$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/n2QQy1K28nTwrMtS30fY02QjCyk.roa File: n2QQy1K28nTwrMtS30fY02QjCyk.roa (raw, json) Hash identifier: NW+8TmZ4R0xTrRypHxU/2yEo3USCnH60px2Xip9vxxI= Subject key identifier: 9F:64:10:CB:52:B6:F2:74:F0:AC:CB:52:DF:47:D8:D3:64:23:0B:29 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 171B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/n2QQy1K28nTwrMtS30fY02QjCyk.roa Signing time: Wed 12 Feb 2025 01:36:25 +0000 ROA not before: Wed 12 Feb 2025 01:36:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 203.69.47.224/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5915 (0x171b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9F6410CB52B6F274F0ACCB52DF47D8D364230B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:9a:ba:f0:9c:05:f5:63:bf:44:da:13:d2: 15:05:15:b0:73:b0:a2:95:1c:67:54:57:41:30:2b: 2e:bf:71:c4:7d:5f:9d:a3:fd:53:e7:6b:b3:c3:03: 8b:d7:cc:95:86:47:6a:15:0d:6c:57:20:8d:be:dd: d0:8c:f3:8d:9b:11:8d:b5:bf:45:69:37:d7:06:b6: 06:ec:61:b1:62:60:7d:4a:e4:75:59:ef:f5:51:b6: 15:c8:b6:9e:05:5e:a9:65:86:ea:10:c2:4a:cf:05: 1a:87:e4:ac:5c:c6:59:22:89:85:90:6c:40:9c:61: c3:33:af:b0:1e:12:87:0f:6b:5d:d9:c4:c0:0a:da: 38:22:d3:37:b7:cb:66:62:5b:45:5a:4e:75:7b:9a: 9e:c3:1a:33:db:49:34:a9:b9:81:ea:23:d9:1b:53: 0e:ef:73:fd:fd:9b:60:bc:d7:ef:7b:8d:2b:12:b2: 0a:c1:63:6a:68:73:31:7f:54:b4:ec:93:17:f6:67: 11:55:e4:29:66:4f:15:b5:7d:87:c6:5f:40:8b:b1: 53:82:bf:41:97:47:18:71:f7:12:c3:6f:9f:16:1b: f7:77:21:f5:70:8a:19:c0:49:2d:48:74:0e:5e:e1: 27:fd:32:c7:0a:6e:5d:5a:47:5f:13:a0:ff:68:23: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:64:10:CB:52:B6:F2:74:F0:AC:CB:52:DF:47:D8:D3:64:23:0B:29 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/n2QQy1K28nTwrMtS30fY02QjCyk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.47.224/27 Signature Algorithm: sha256WithRSAEncryption 18:8b:b7:89:7d:6c:5d:50:30:7f:a5:db:1b:35:d0:6e:34:11: 3e:2d:a4:1a:5e:77:41:65:7f:41:d0:7d:a9:37:b8:49:7c:51: d7:76:1c:91:34:f9:3d:bb:f7:c1:25:3d:4c:75:c8:a4:01:17: cf:92:1e:14:c6:37:af:6b:50:e9:f0:f2:39:0d:e9:cc:76:0b: fa:3f:b8:52:e4:96:d3:88:c7:b4:99:f8:14:2d:72:71:00:08: 23:2b:94:ec:9c:87:55:f8:39:f8:2d:49:02:28:22:bb:cf:c6: 5f:3c:74:52:39:9c:81:38:89:90:38:29:de:b2:e3:64:83:52: 08:d1:25:c9:30:44:10:56:97:84:51:4e:3a:32:77:cc:da:96: 96:26:b8:07:2b:21:e2:c4:75:3c:af:06:53:ef:34:c7:f2:94: 63:8e:b5:d5:51:18:be:f5:9f:ac:5e:50:35:df:70:9c:0d:4d: d0:e1:a3:3f:8f:39:c9:05:31:78:84:ef:4a:a2:55:f2:f8:cf: 5b:ce:88:22:6b:31:bd:3b:a8:bf:ad:bd:de:a8:60:03:c3:54: ad:eb:0b:ce:93:b1:39:e2:e6:76:d8:cd:62:19:11:5d:6a:de: d6:b0:80:ac:79:8c:c2:7f:f1:4c:ef:97:c4:93:ed:ef:60:0c: 4b:5a:3a:6b -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlGNjQxMENCNTJCNkYy NzRGMEFDQ0I1MkRGNDdEOEQzNjQyMzBCMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6ppq68JwF9WO/RNoT0hUFFbBzsKKVHGdUV0EwKy6/ccR9X52j /VPna7PDA4vXzJWGR2oVDWxXII2+3dCM842bEY21v0VpN9cGtgbsYbFiYH1K5HVZ 7/VRthXItp4FXqllhuoQwkrPBRqH5KxcxlkiiYWQbECcYcMzr7AeEocPa13ZxMAK 2jgi0ze3y2ZiW0VaTnV7mp7DGjPbSTSpuYHqI9kbUw7vc/39m2C81+97jSsSsgrB Y2poczF/VLTskxf2ZxFV5ClmTxW1fYfGX0CLsVOCv0GXRxhx9xLDb58WG/d3IfVw ihnASS1IdA5e4Sf9MscKbl1aR18ToP9oI+OXAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUn2QQy1K28nTwrMtS30fY02QjCykwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uMlFReTFLMjhuVHdyTXRTMzBm WTAyUWpDeWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0Uv 4DANBgkqhkiG9w0BAQsFAAOCAQEAGIu3iX1sXVAwf6XbGzXQbjQRPi2kGl53QWV/ QdB9qTe4SXxR13YckTT5Pbv3wSU9THXIpAEXz5IeFMY3r2tQ6fDyOQ3pzHYL+j+4 UuSW04jHtJn4FC1ycQAIIyuU7JyHVfg5+C1JAigiu8/GXzx0UjmcgTiJkDgp3rLj ZINSCNElyTBEEFaXhFFOOjJ3zNqWlia4Bysh4sR1PK8GU+80x/KUY4611VEYvvWf rF5QNd9wnA1N0OGjP485yQUxeITvSqJV8vjPW86IImsxvTuov6293qhgA8NUresL zpOxOeLmdtjNYhkRXWre1rCArHmMwn/xTO+XxJPt72AMS1o6aw== -----END CERTIFICATE-----Generated at Mon Apr 7 01:57:43 2025 by rpki-client