$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/zri1gxOHitGv4cB639qQ3r4YRP4.roa File: zri1gxOHitGv4cB639qQ3r4YRP4.roa (raw, json) Hash identifier: JXBNsW6+JFeR/wV8jng9FRdb1OcDGhGOGXtz5Y6Ho80= Subject key identifier: CE:B8:B5:83:13:87:8A:D1:AF:E1:C0:7A:DF:DA:90:DE:BE:18:44:FE Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 172E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zri1gxOHitGv4cB639qQ3r4YRP4.roa Signing time: Wed 12 Feb 2025 01:36:28 +0000 ROA not before: Wed 12 Feb 2025 01:36:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 202.39.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5934 (0x172e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CEB8B58313878AD1AFE1C07ADFDA90DEBE1844FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:c6:bd:77:0a:6d:2d:28:9c:6e:b6:2e:6f: b2:f6:15:60:f4:0a:40:6e:85:14:fe:c8:78:36:a5: 90:10:35:56:a4:a9:42:98:d7:63:09:4e:75:ce:a1: f7:1b:e0:bc:c9:00:5c:70:ba:cd:e6:64:c3:fb:0d: fb:07:4d:49:83:cf:3f:ef:a2:44:50:cb:23:9c:90: f2:fe:ae:de:7a:b5:53:4e:51:45:f7:37:7b:e2:e7: fb:ea:8b:03:8e:7e:8c:43:8f:d3:f7:96:1a:9e:34: a6:9d:48:18:97:54:f3:0b:6a:5d:3a:7e:60:56:0b: c5:25:6d:80:54:0c:2b:c4:94:5a:ea:37:c5:63:a2: cb:b5:89:7f:55:a4:62:a4:05:ce:3d:2e:a7:92:39: d6:d6:33:cd:63:b9:1c:d5:8e:c2:1f:98:8e:29:ce: 80:40:89:72:1b:e4:9b:68:59:e2:77:02:45:be:ee: 29:fb:dc:f9:1a:5f:4a:b9:f1:cb:2b:6d:75:2b:74: e6:eb:6c:8f:aa:61:4e:11:1d:17:11:c0:ad:ca:64: 6a:d9:ff:8a:72:95:98:0c:7e:6b:79:43:0e:6c:a2: 58:94:1d:b0:12:f6:df:3f:aa:d5:fd:67:0a:a3:0f: c1:29:89:d0:0f:0b:28:c5:8e:50:dd:82:d7:a7:3a: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B8:B5:83:13:87:8A:D1:AF:E1:C0:7A:DF:DA:90:DE:BE:18:44:FE X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zri1gxOHitGv4cB639qQ3r4YRP4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.64.0/19 Signature Algorithm: sha256WithRSAEncryption 57:e4:a5:fe:55:5f:98:61:9f:67:da:a6:fa:ef:04:05:30:81: 66:95:4a:b0:a0:ff:2b:97:f0:ec:8b:36:3a:06:45:d9:09:29: 3c:54:7b:f0:d9:c3:87:5d:d8:7c:b6:7e:43:04:cb:0d:05:65: 7e:20:5a:00:ed:7a:51:32:b3:bd:1e:97:d4:36:08:73:cf:55: 3d:b3:4b:4c:a7:61:61:25:2a:ce:0f:d0:24:bc:32:7f:f4:8a: f3:9d:8f:4f:22:4c:fd:ac:9f:7d:a0:f3:17:04:63:00:46:2c: f3:f9:ce:36:e8:62:6b:70:2c:2c:b1:fb:ce:56:97:ca:19:05: 9b:e7:19:42:65:55:e0:ac:d4:0f:3d:2c:46:d7:41:86:4a:c6: f4:b1:25:8d:fc:e2:40:bc:5b:0e:f2:8d:aa:7b:2b:00:be:9b: a9:57:1c:e1:2e:24:6b:0c:71:0f:3c:79:64:73:a0:82:a5:be: b9:11:38:b6:42:1f:88:1f:60:08:71:37:dc:47:68:8d:29:c7: 10:cf:09:d9:51:b9:91:99:fe:59:dc:55:78:cf:e7:19:9c:4c: ae:dd:7b:18:da:c2:12:5b:61:1c:19:d6:66:5b:fd:9a:cd:2b: 89:62:6d:85:d0:0f:4a:f2:5a:44:e6:01:5b:e4:4a:df:1d:3f: 4f:d9:73:8e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFQjhCNTgzMTM4NzhB RDFBRkUxQzA3QURGREE5MERFQkUxODQ0RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/N8a9dwptLSicbrYub7L2FWD0CkBuhRT+yHg2pZAQNVakqUKY 12MJTnXOofcb4LzJAFxwus3mZMP7DfsHTUmDzz/vokRQyyOckPL+rt56tVNOUUX3 N3vi5/vqiwOOfoxDj9P3lhqeNKadSBiXVPMLal06fmBWC8UlbYBUDCvElFrqN8Vj osu1iX9VpGKkBc49LqeSOdbWM81juRzVjsIfmI4pzoBAiXIb5JtoWeJ3AkW+7in7 3PkaX0q58csrbXUrdObrbI+qYU4RHRcRwK3KZGrZ/4pylZgMfmt5Qw5soliUHbAS 9t8/qtX9ZwqjD8EpidAPCyjFjlDdgtenOq1vAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUzri1gxOHitGv4cB639qQ3r4YRP4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC96cmkxZ3hPSGl0R3Y0Y0I2Mzlx UTNyNFlSUDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyidA MA0GCSqGSIb3DQEBCwUAA4IBAQBX5KX+VV+YYZ9n2qb67wQFMIFmlUqwoP8rl/Ds izY6BkXZCSk8VHvw2cOHXdh8tn5DBMsNBWV+IFoA7XpRMrO9HpfUNghzz1U9s0tM p2FhJSrOD9AkvDJ/9IrznY9PIkz9rJ99oPMXBGMARizz+c426GJrcCwssfvOVpfK GQWb5xlCZVXgrNQPPSxG10GGSsb0sSWN/OJAvFsO8o2qeysAvpupVxzhLiRrDHEP PHlkc6CCpb65ETi2Qh+IH2AIcTfcR2iNKccQzwnZUbmRmf5Z3FV4z+cZnEyu3XsY 2sISW2EcGdZmW/2azSuJYm2F0A9K8lpE5gFb5ErfHT9P2XOO -----END CERTIFICATE-----Generated at Mon Apr 7 02:02:55 2025 by rpki-client