$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa File: nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa (raw, json) Hash identifier: ivu7RKzF1hAL/Uow7w+IZhZhT7GDUb83xjgES8trLWU= Subject key identifier: 9D:00:AD:4C:B1:CD:2E:72:58:52:42:05:62:C1:93:95:03:DC:C0:52 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17AE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa Signing time: Wed 12 Feb 2025 01:36:57 +0000 ROA not before: Wed 12 Feb 2025 01:36:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 210.59.138.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6062 (0x17ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9D00AD4CB1CD2E725852420562C1939503DCC052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:1b:a8:4c:fb:3c:ac:07:7c:5f:76:c7:5c: 41:a5:04:00:43:9c:a8:0b:c7:61:c2:04:f9:23:12: 33:14:df:b7:c4:1f:e8:16:b8:99:b5:56:4a:f1:67: 7d:68:15:b4:ef:a2:a3:4b:b5:3a:1a:fc:e4:1c:58: 3c:09:b8:66:8c:fd:d4:d8:b3:b5:d1:c7:46:0e:09: 84:50:f7:e5:4a:a4:80:18:fc:53:89:9c:b0:e4:e6: 4f:07:0b:93:02:5b:5f:2b:2c:67:01:07:2a:11:17: ec:11:b5:bb:62:7d:f9:7d:be:91:de:93:57:c4:e5: ff:d8:cf:f9:30:47:06:f6:18:dc:69:84:2d:3c:c3: 29:31:bc:68:45:f4:b5:a8:aa:27:43:de:cd:1b:18: 2f:57:1f:74:83:61:9b:40:5b:37:0f:b2:5b:40:4b: 42:f2:5e:d1:9c:8f:3a:f6:dd:0c:26:0c:c6:9e:38: a9:99:dd:5a:cf:93:56:81:5e:bf:f2:31:3d:80:a7: c6:4a:f3:6f:07:2d:e8:10:cc:5b:63:74:14:10:74: 87:94:fd:27:a5:08:c3:ea:71:ea:44:f2:f0:b5:c2: 38:6d:b9:52:8e:94:bd:c4:30:10:d8:57:e6:fa:f4: b2:f5:fb:44:d7:a7:df:e4:a5:9e:fb:0a:70:dc:eb: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:00:AD:4C:B1:CD:2E:72:58:52:42:05:62:C1:93:95:03:DC:C0:52 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nQCtTLHNLnJYUkIFYsGTlQPcwFI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.59.138.128/27 Signature Algorithm: sha256WithRSAEncryption 6a:96:39:d6:7e:d0:8c:2a:42:c6:60:48:22:0d:1a:a7:f4:8c: d4:a2:b5:32:d8:3b:66:47:12:7a:de:d8:37:c2:1a:ce:39:c5: 05:3e:e0:2c:fa:a9:1d:69:5b:5f:d8:86:08:9d:48:ba:fb:70: c1:60:25:e6:24:a7:ac:f0:64:77:79:66:b8:e0:5b:95:9a:df: fb:c6:90:91:aa:00:2b:89:c6:a1:bf:ff:cd:73:cc:a6:57:c4: d2:e9:5b:7e:75:ee:f7:ce:08:b9:37:05:1f:cb:69:75:9b:82: 79:f6:1f:01:da:b3:1a:15:7d:da:99:3c:76:84:41:6b:a8:b0: 85:c3:c2:fd:c0:cc:72:7b:68:84:40:62:7e:8f:37:81:35:57: 1c:d9:9b:ed:d3:a8:86:b6:2b:69:20:b0:77:2b:12:e8:55:b7: c7:8f:12:67:29:3f:eb:7b:c4:ab:f7:c2:49:f1:9f:d4:2f:59: d9:12:50:54:79:22:8a:e9:bd:47:3e:3f:b6:90:d0:f0:3a:49: 41:de:6c:3c:3d:a2:1c:19:f7:e3:18:3b:7a:aa:df:e2:b9:5d: fc:91:8f:27:2b:13:a0:20:b0:4b:57:2b:c5:8b:fc:ac:74:43: 83:ec:65:2f:87:b7:56:93:61:1e:8b:18:60:7f:84:2e:b0:97: 7d:47:c3:71 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICF64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlEMDBBRDRDQjFDRDJF NzI1ODUyNDIwNTYyQzE5Mzk1MDNEQ0MwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDExuoTPs8rAd8X3bHXEGlBABDnKgLx2HCBPkjEjMU37fEH+gW uJm1VkrxZ31oFbTvoqNLtToa/OQcWDwJuGaM/dTYs7XRx0YOCYRQ9+VKpIAY/FOJ nLDk5k8HC5MCW18rLGcBByoRF+wRtbtiffl9vpHek1fE5f/Yz/kwRwb2GNxphC08 wykxvGhF9LWoqidD3s0bGC9XH3SDYZtAWzcPsltAS0LyXtGcjzr23QwmDMaeOKmZ 3VrPk1aBXr/yMT2Ap8ZK828HLegQzFtjdBQQdIeU/SelCMPqcepE8vC1wjhtuVKO lL3EMBDYV+b69LL1+0TXp9/kpZ77CnDc6+1bAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUnQCtTLHNLnJYUkIFYsGTlQPcwFIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uUUN0VExITkxuSllVa0lGWXNH VGxRUGN3Rkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0juK gDANBgkqhkiG9w0BAQsFAAOCAQEAapY51n7QjCpCxmBIIg0ap/SM1KK1Mtg7ZkcS et7YN8IazjnFBT7gLPqpHWlbX9iGCJ1IuvtwwWAl5iSnrPBkd3lmuOBblZrf+8aQ kaoAK4nGob//zXPMplfE0ulbfnXu984IuTcFH8tpdZuCefYfAdqzGhV92pk8doRB a6iwhcPC/cDMcntohEBifo83gTVXHNmb7dOohrYraSCwdysS6FW3x48SZyk/63vE q/fCSfGf1C9Z2RJQVHkiium9Rz4/tpDQ8DpJQd5sPD2iHBn34xg7eqrf4rld/JGP JysToCCwS1crxYv8rHRDg+xlL4e3VpNhHosYYH+ELrCXfUfDcQ== -----END CERTIFICATE-----Generated at Mon Apr 7 02:05:20 2025 by rpki-client