$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wbWElUS3UqBAiNq0FQAbo0x57Co.roa File: wbWElUS3UqBAiNq0FQAbo0x57Co.roa (raw, json) Hash identifier: +Wyq3mQ6bl+Unify1S3b6CVFo96vwrhAFp4+o9qwP2Y= Subject key identifier: C1:B5:84:95:44:B7:52:A0:40:88:DA:B4:15:00:1B:A3:4C:79:EC:2A Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 178B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wbWElUS3UqBAiNq0FQAbo0x57Co.roa Signing time: Wed 12 Feb 2025 01:36:48 +0000 ROA not before: Wed 12 Feb 2025 01:36:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 210.65.144.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6027 (0x178b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C1B5849544B752A04088DAB415001BA34C79EC2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:a7:c7:cd:53:3a:6e:bc:0d:c1:9e:f8:e0: f6:ea:46:35:8e:58:1d:06:d4:e4:ad:1a:c2:c7:d4: 36:ac:a0:57:dd:a6:cf:60:33:41:44:da:78:0c:a1: 41:12:a0:58:cd:68:c5:28:2c:58:d4:9f:8f:7f:6f: 12:05:74:1d:2c:17:cb:ef:54:a1:07:3e:c2:68:31: 0a:6d:96:f6:f6:30:af:bd:74:69:b5:d0:dc:d2:1e: a2:8b:0e:57:41:91:34:a3:d4:90:9d:5f:57:27:63: 4b:00:67:28:c7:13:59:13:0a:61:8b:e0:32:36:47: 61:d2:19:da:8a:03:6c:1c:af:90:97:1d:8c:70:ff: 5e:53:73:31:b9:dd:4c:f3:a7:32:50:ba:94:e3:8c: e7:ae:48:96:22:41:e6:39:0a:0a:a8:2f:7b:77:8d: 19:c4:3b:fe:40:04:34:ac:eb:7d:2a:41:fd:61:1a: 77:c6:59:3f:be:c9:f3:7b:48:a6:6e:2b:39:19:54: 21:7c:82:93:26:d1:23:70:4f:4c:10:54:26:8d:73: 19:c7:f7:01:3f:bf:e0:40:9f:72:3e:5e:f7:d0:6c: 96:e0:38:3f:8b:8c:d8:aa:6c:eb:a7:52:5f:63:18: 6e:68:a0:4c:fc:00:48:3c:fc:84:68:fe:2b:8c:2a: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B5:84:95:44:B7:52:A0:40:88:DA:B4:15:00:1B:A3:4C:79:EC:2A X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wbWElUS3UqBAiNq0FQAbo0x57Co.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.144.192/26 Signature Algorithm: sha256WithRSAEncryption 8f:a9:9a:3d:c6:79:97:29:9c:c5:fe:a6:08:7d:fd:2d:cd:4a: 0c:75:12:5f:f4:54:e2:bb:c6:0d:82:2b:bc:3f:b1:3e:d3:30: fb:b3:19:8b:af:fd:d3:da:40:b6:a4:93:7e:e1:0d:eb:09:88: 0b:82:56:18:56:ff:65:01:8e:07:9c:7f:58:ea:39:98:4a:04: 9e:4b:10:d0:e8:0a:97:3c:57:c5:01:94:ff:fa:92:0f:75:65: 46:a2:32:f8:7c:56:9e:5f:73:bb:d2:31:7c:b5:6f:9d:5f:57: b9:53:b5:08:27:65:76:4b:28:dc:a3:4a:16:b1:31:69:9a:d3: f9:4b:65:c4:b3:75:61:3c:47:86:fb:c2:f6:f5:f2:3c:a7:3a: 4f:f9:eb:8a:e5:96:d8:91:76:f1:16:f9:c3:f7:cb:e5:26:7c: d9:bf:b4:4b:3c:10:1f:40:67:92:1d:5a:2a:de:b6:d5:f9:a2: c9:c7:95:04:15:f6:78:11:ca:0d:4a:a2:74:39:5f:88:aa:6e: 5f:d0:bc:3f:b4:43:26:5e:05:ec:70:65:4d:3a:24:54:07:9b: 4a:d7:3f:2f:da:09:ba:4c:b6:e5:5e:8b:75:db:eb:b2:3a:56: 94:60:d5:ec:e0:ac:db:8a:73:5a:ae:cc:19:f9:8a:68:5f:82: 4e:f8:c9:24 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICF4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxQjU4NDk1NDRCNzUy QTA0MDg4REFCNDE1MDAxQkEzNEM3OUVDMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPyKfHzVM6brwNwZ744PbqRjWOWB0G1OStGsLH1DasoFfdps9g M0FE2ngMoUESoFjNaMUoLFjUn49/bxIFdB0sF8vvVKEHPsJoMQptlvb2MK+9dGm1 0NzSHqKLDldBkTSj1JCdX1cnY0sAZyjHE1kTCmGL4DI2R2HSGdqKA2wcr5CXHYxw /15TczG53UzzpzJQupTjjOeuSJYiQeY5CgqoL3t3jRnEO/5ABDSs630qQf1hGnfG WT++yfN7SKZuKzkZVCF8gpMm0SNwT0wQVCaNcxnH9wE/v+BAn3I+XvfQbJbgOD+L jNiqbOunUl9jGG5ooEz8AEg8/IRo/iuMKjsRAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUwbWElUS3UqBAiNq0FQAbo0x57CowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93YldFbFVTM1VxQkFpTnEwRlFB Ym8weDU3Q28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0kGQ wDANBgkqhkiG9w0BAQsFAAOCAQEAj6maPcZ5lymcxf6mCH39Lc1KDHUSX/RU4rvG DYIrvD+xPtMw+7MZi6/909pAtqSTfuEN6wmIC4JWGFb/ZQGOB5x/WOo5mEoEnksQ 0OgKlzxXxQGU//qSD3VlRqIy+HxWnl9zu9IxfLVvnV9XuVO1CCdldkso3KNKFrEx aZrT+UtlxLN1YTxHhvvC9vXyPKc6T/nriuWW2JF28Rb5w/fL5SZ82b+0SzwQH0Bn kh1aKt621fmiyceVBBX2eBHKDUqidDlfiKpuX9C8P7RDJl4F7HBlTTokVAebStc/ L9oJuky25V6LddvrsjpWlGDV7OCs24pzWq7MGfmKaF+CTvjJJA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:18 2025 by rpki-client