$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/l2GIpjod9Pl9DBmh91QTzUF58e8.roa File: l2GIpjod9Pl9DBmh91QTzUF58e8.roa (raw, json) Hash identifier: At6IitWmhfoCgNasWr1IsGGZ0UolrUei/+HdGTcwIrg= Subject key identifier: 97:61:88:A6:3A:1D:F4:F9:7D:0C:19:A1:F7:54:13:CD:41:79:F1:EF Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 178E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/l2GIpjod9Pl9DBmh91QTzUF58e8.roa Signing time: Wed 12 Feb 2025 01:36:49 +0000 ROA not before: Wed 12 Feb 2025 01:36:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 220.128.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6030 (0x178e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=976188A63A1DF4F97D0C19A1F75413CD4179F1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:76:dc:c7:74:c0:ac:51:b6:4c:3f:04:95:fd: 01:92:e8:47:5c:bd:1b:0d:10:52:04:da:86:41:ff: b5:14:28:11:e4:78:f0:83:36:61:1d:66:c0:99:81: 26:1c:38:e6:d4:ce:a2:e6:86:22:2f:55:bd:2c:29: fd:ff:cb:13:fe:a9:a5:7c:bd:c5:63:6b:19:11:bb: ee:e8:0d:ba:a2:f0:18:d1:e3:f0:c3:b8:47:56:1f: e7:54:f6:be:ff:39:8e:18:6a:c1:c7:63:76:df:17: 35:85:64:96:c8:0d:bf:80:06:b8:32:ad:82:dc:6b: 44:f3:3c:0c:8d:c5:7d:de:fc:bd:a6:f2:88:58:cc: 0b:f1:69:a9:88:fb:3e:79:b4:7e:ad:11:65:22:d4: 2a:8d:a2:f7:a3:3d:3b:e2:e6:96:07:fe:06:a5:af: f9:e6:90:cf:33:f1:6a:e0:67:ed:17:8c:47:47:f0: dc:79:c8:48:88:a5:26:da:31:b1:91:59:96:b6:1d: 64:3a:63:50:f5:aa:f3:49:8b:77:5c:d8:d0:8f:d0: 7a:10:19:19:88:e1:e1:b4:6e:42:82:58:f2:f0:d1: 6a:48:79:7e:20:bd:48:de:69:9d:a3:22:42:e7:8d: a5:c9:e2:df:ee:5b:cc:c4:38:03:9b:55:93:9e:59: 49:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:61:88:A6:3A:1D:F4:F9:7D:0C:19:A1:F7:54:13:CD:41:79:F1:EF X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/l2GIpjod9Pl9DBmh91QTzUF58e8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.80.0/24 Signature Algorithm: sha256WithRSAEncryption 79:2f:e2:64:49:3a:a0:2c:28:aa:ec:cd:2b:f8:a1:67:6b:ab: 20:a0:30:16:b2:37:ad:9b:02:56:34:4b:61:be:d4:43:ce:e0: 17:23:b0:f3:8c:17:79:04:34:fe:d6:62:fc:05:de:04:8f:f7: 71:f0:ce:6c:ca:76:d4:69:be:f0:d3:cb:dc:e9:b7:91:d5:fc: 1f:2c:2f:1a:76:2a:54:21:6f:9e:7c:ef:52:20:fd:e0:7e:50: a9:a0:a6:bd:d3:7a:bb:f2:5e:39:c5:13:2a:fe:fb:f3:60:2d: 59:92:8d:d4:fd:16:58:af:91:60:57:de:7b:12:8e:48:43:a5: 32:28:43:ef:af:9b:9d:60:43:0c:78:23:e8:ab:b2:ed:3f:68: 7f:23:5b:01:72:b4:46:85:18:e1:0f:b2:cb:7a:ed:cb:08:27: 88:51:7f:6b:8d:74:08:f7:2f:19:11:bf:af:bf:a7:5a:59:3d: 6b:e1:b4:50:9d:b6:df:ee:09:08:8a:63:61:0b:2b:4b:ee:cc: ab:e7:8b:d6:bb:24:e5:63:68:60:1f:4d:8f:07:66:39:8c:8d: 37:f4:43:0e:41:4b:33:17:0b:fb:e4:0b:b4:bc:04:2c:0e:51: cf:40:13:97:29:c1:00:80:5c:7e:18:28:8b:18:e4:66:2f:ba: eb:c9:55:8f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3NjE4OEE2M0ExREY0 Rjk3RDBDMTlBMUY3NTQxM0NENDE3OUYxRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwdtzHdMCsUbZMPwSV/QGS6EdcvRsNEFIE2oZB/7UUKBHkePCD NmEdZsCZgSYcOObUzqLmhiIvVb0sKf3/yxP+qaV8vcVjaxkRu+7oDbqi8BjR4/DD uEdWH+dU9r7/OY4YasHHY3bfFzWFZJbIDb+ABrgyrYLca0TzPAyNxX3e/L2m8ohY zAvxaamI+z55tH6tEWUi1CqNovejPTvi5pYH/galr/nmkM8z8WrgZ+0XjEdH8Nx5 yEiIpSbaMbGRWZa2HWQ6Y1D1qvNJi3dc2NCP0HoQGRmI4eG0bkKCWPLw0WpIeX4g vUjeaZ2jIkLnjaXJ4t/uW8zEOAObVZOeWUlHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUl2GIpjod9Pl9DBmh91QTzUF58e8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9sMkdJcGpvZDlQbDlEQm1oOTFR VHpVRjU4ZTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBQ MA0GCSqGSIb3DQEBCwUAA4IBAQB5L+JkSTqgLCiq7M0r+KFna6sgoDAWsjetmwJW NEthvtRDzuAXI7DzjBd5BDT+1mL8Bd4Ej/dx8M5synbUab7w08vc6beR1fwfLC8a dipUIW+efO9SIP3gflCpoKa903q78l45xRMq/vvzYC1Zko3U/RZYr5FgV957Eo5I Q6UyKEPvr5udYEMMeCPoq7LtP2h/I1sBcrRGhRjhD7LLeu3LCCeIUX9rjXQI9y8Z Eb+vv6daWT1r4bRQnbbf7gkIimNhCytL7syr54vWuyTlY2hgH02PB2Y5jI039EMO QUszFwv75Au0vAQsDlHPQBOXKcEAgFx+GCiLGORmL7rryVWP -----END CERTIFICATE-----Generated at Mon Apr 7 02:05:26 2025 by rpki-client