$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/hcZGI-w66pAEplFI-sJ_6iENMBE.roa File: hcZGI-w66pAEplFI-sJ_6iENMBE.roa (raw, json) Hash identifier: +HY3yhDBBmPyejlASY5ipLV2XMWhxLrbySKQeGW5IXg= Subject key identifier: 85:C6:46:23:EC:3A:EA:90:04:A6:51:48:FA:C2:7F:EA:21:0D:30:11 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 174F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hcZGI-w66pAEplFI-sJ_6iENMBE.roa Signing time: Wed 12 Feb 2025 01:36:34 +0000 ROA not before: Wed 12 Feb 2025 01:36:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17421 IP address blocks: 2001:b400::/23 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 05:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5967 (0x174f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=85C64623EC3AEA9004A65148FAC27FEA210D3011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:90:71:3b:e1:fb:35:e1:16:44:07:89:a1: f2:f2:5a:08:ca:b2:a5:99:17:97:c0:96:fc:27:6f: f3:22:a4:d3:a0:7b:f4:6f:50:5e:8b:3d:57:97:ce: 69:b8:9c:e0:78:b2:9c:53:f4:0d:2c:5f:0e:73:17: 64:72:ed:b4:70:c5:cc:3a:82:a2:79:e4:78:d4:a7: d4:71:a7:2b:93:9d:88:0e:b1:ed:a3:de:c9:68:a8: 22:d6:aa:cc:e4:1d:8a:74:c8:40:20:2b:61:b3:86: 8d:a7:8e:6c:1c:f2:a0:f5:e8:82:ff:43:15:64:b5: 7c:90:51:c6:c4:f2:8a:66:d7:aa:2c:54:ed:f3:1f: 6a:8c:45:de:bb:33:d1:28:e5:d1:be:87:13:ba:5b: 56:61:7d:5e:84:d1:12:b2:6a:ff:d2:b9:07:1e:a6: 80:cb:d9:b2:36:2e:79:6c:3b:9e:b6:00:34:10:3a: b6:f1:9a:c9:1c:11:3a:f0:06:28:e9:e1:a0:42:3e: 27:e6:bd:56:93:6a:bb:f3:17:c5:27:59:7b:78:4f: 82:9a:dd:89:9d:3f:67:2f:4c:00:1e:71:8e:dd:21: 40:36:28:04:c6:b6:db:1f:e4:99:a2:f8:67:aa:47: cc:8d:b3:00:9f:2b:f1:66:a8:a8:70:94:8c:c4:e7: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C6:46:23:EC:3A:EA:90:04:A6:51:48:FA:C2:7F:EA:21:0D:30:11 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hcZGI-w66pAEplFI-sJ_6iENMBE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b400::/23 Signature Algorithm: sha256WithRSAEncryption b3:4b:bb:67:fa:04:0a:34:05:ef:c8:f8:13:08:20:b8:07:d3: 97:2c:b5:16:9a:36:b3:1a:2d:95:73:92:91:de:ce:36:12:15: 6b:f6:a1:7b:ba:bf:5a:75:22:81:39:75:fc:56:74:a7:d5:a6: 8f:75:2d:2a:20:0d:75:10:f1:ed:06:16:90:d7:e8:4e:e6:ba: a9:b2:4e:f0:20:c6:d7:34:43:61:77:26:0f:60:e3:d7:3d:2a: 49:61:bc:7a:c7:3a:de:9e:44:b9:77:99:77:80:59:6c:ee:4d: a2:50:e4:74:31:8c:e1:25:93:ef:16:18:dd:1e:a5:25:56:e6: 42:5b:48:86:54:87:cd:92:6f:53:df:47:8c:00:ed:63:3c:2c: 06:b0:0c:5a:48:19:9a:17:e5:44:81:71:4e:8f:3d:6a:77:e7: c8:c4:d5:06:ca:a3:fc:c3:16:1d:02:5b:05:44:a6:2a:78:1b: 7c:15:b8:d9:dd:f7:9a:15:26:d1:e5:cb:0d:6b:49:f3:3e:3c: cf:bf:07:2d:01:e0:f7:d3:ba:e2:28:da:cb:fa:d6:a3:57:91: df:57:8c:4d:2d:41:94:d3:68:3b:c2:df:12:a2:ff:31:92:6b: 52:e4:c5:2f:8e:3c:af:f0:59:83:bd:38:3b:2f:f9:a3:48:04: 87:6f:03:0b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg1QzY0NjIzRUMzQUVB OTAwNEE2NTE0OEZBQzI3RkVBMjEwRDMwMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFTJBxO+H7NeEWRAeJofLyWgjKsqWZF5fAlvwnb/MipNOge/Rv UF6LPVeXzmm4nOB4spxT9A0sXw5zF2Ry7bRwxcw6gqJ55HjUp9RxpyuTnYgOse2j 3sloqCLWqszkHYp0yEAgK2Gzho2njmwc8qD16IL/QxVktXyQUcbE8opm16osVO3z H2qMRd67M9Eo5dG+hxO6W1ZhfV6E0RKyav/SuQcepoDL2bI2LnlsO562ADQQOrbx mskcETrwBijp4aBCPifmvVaTarvzF8UnWXt4T4Ka3YmdP2cvTAAecY7dIUA2KATG ttsf5Jmi+GeqR8yNswCfK/FmqKhwlIzE5+b/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUhcZGI+w66pAEplFI+sJ/6iENMBEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9oY1pHSS13NjZwQUVwbEZJLXNK XzZpRU5NQkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQBIAG0 MA0GCSqGSIb3DQEBCwUAA4IBAQCzS7tn+gQKNAXvyPgTCCC4B9OXLLUWmjazGi2V c5KR3s42EhVr9qF7ur9adSKBOXX8VnSn1aaPdS0qIA11EPHtBhaQ1+hO5rqpsk7w IMbXNENhdyYPYOPXPSpJYbx6xzrenkS5d5l3gFls7k2iUOR0MYzhJZPvFhjdHqUl VuZCW0iGVIfNkm9T30eMAO1jPCwGsAxaSBmaF+VEgXFOjz1qd+fIxNUGyqP8wxYd AlsFRKYqeBt8FbjZ3feaFSbR5csNa0nzPjzPvwctAeD307riKNrL+tajV5HfV4xN LUGU02g7wt8Sov8xkmtS5MUvjjyv8FmDvTg7L/mjSASHbwML -----END CERTIFICATE-----Generated at Tue Apr 15 03:11:59 2025 by rpki-client