$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Fg9x59aFjlliWMuBAeWelnaQmz0.roa File: Fg9x59aFjlliWMuBAeWelnaQmz0.roa (raw, json) Hash identifier: C3Kw0ZgDnizcx8UwZPCULryh8/vJToOHSqeOiCBRdCY= Subject key identifier: 16:0F:71:E7:D6:85:8E:59:62:58:CB:81:01:E5:9E:96:76:90:9B:3D Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 07AE Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Fg9x59aFjlliWMuBAeWelnaQmz0.roa Signing time: Mon 10 Feb 2025 13:44:39 +0000 ROA not before: Mon 10 Feb 2025 13:44:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20473 IP address blocks: 2406:48c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Feb 10 13:44:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=160F71E7D6858E596258CB8101E59E9676909B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:60:31:e2:b1:78:df:66:3c:f1:50:f4:ce: 1e:71:87:74:a7:78:12:66:51:84:51:92:1c:01:42: 33:ce:29:38:da:4c:c4:8c:89:70:21:fd:60:4d:ee: de:b3:e7:88:bf:e9:ae:de:28:bd:70:1e:ea:b4:c3: ce:a8:6a:f1:46:3e:b5:d1:e0:f8:46:da:bf:f1:10: df:77:ee:0b:55:ad:e1:fa:16:e6:78:3e:bc:85:00: 42:be:a3:00:30:2a:d1:55:04:09:77:cf:5a:fb:9c: 5f:ca:c0:0b:c1:8d:fd:2c:58:56:5a:2c:f5:83:17: e4:17:70:9c:83:82:2f:92:8b:3d:c1:7f:b5:f4:7f: 0c:0b:79:eb:36:b7:4a:1a:85:f7:00:ba:29:e8:45: 3e:08:17:2d:9a:1f:ca:bd:f0:f2:8b:44:00:7c:21: 28:28:18:73:9c:46:c7:7a:3f:f7:14:fe:c3:64:3c: e5:f3:65:04:ee:a3:e4:b8:ab:f4:8c:a1:68:c4:9f: d7:28:8d:87:ba:8d:df:86:fa:3b:df:04:26:70:45: aa:93:62:57:3f:4e:36:eb:92:2a:4a:fd:36:a6:46: e9:d2:65:50:44:23:78:ee:d5:2d:aa:3a:b0:54:91: 3c:41:c5:5e:12:c7:e4:24:63:ee:81:bd:71:5a:42: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0F:71:E7:D6:85:8E:59:62:58:CB:81:01:E5:9E:96:76:90:9B:3D X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Fg9x59aFjlliWMuBAeWelnaQmz0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/32 Signature Algorithm: sha256WithRSAEncryption a0:26:e8:2c:aa:be:2e:83:9f:6a:b8:a9:c5:c6:f1:e2:a5:fe: cc:0d:1a:fe:2d:6d:34:9b:a8:59:84:af:81:d0:69:a7:03:54: d7:3e:e2:1d:80:7c:0d:02:b0:7e:71:64:7f:05:65:45:c4:c0: 84:4d:17:74:83:19:e5:57:c6:43:f6:90:85:64:ef:1e:73:d2: d3:a8:71:62:23:fc:7f:55:af:c6:68:41:74:95:27:31:62:eb: 88:8d:b6:27:26:d8:9d:70:4f:6c:dc:32:79:df:12:59:f3:8b: 00:ba:b0:b4:55:18:f2:e8:04:bb:50:db:00:77:91:86:91:fd: 63:b2:0f:d5:23:45:06:02:2c:2d:da:79:68:d4:e4:d3:de:65: 0c:96:8d:36:94:ac:ea:df:df:7e:bf:aa:0e:52:5b:52:88:93: b3:44:53:68:46:81:c2:7c:63:b8:74:3d:51:94:2d:1e:5e:81: ef:b3:15:f7:ff:d9:dd:16:d4:56:01:f7:7c:4c:fd:0c:e6:3b: 7f:6f:cd:94:fc:ff:d6:90:78:37:29:10:d4:9f:07:81:42:87: 03:a1:e5:75:4e:e0:bb:02:8a:90:3a:20:e7:18:39:d3:55:14: 29:80:16:c3:4d:ba:93:3d:b5:96:60:6b:af:dc:17:89:d5:d7: a1:8d:19:e6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICB64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx MzQ0MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2MEY3MUU3RDY4NThF NTk2MjU4Q0I4MTAxRTU5RTk2NzY5MDlCM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYmmAx4rF432Y88VD0zh5xh3SneBJmUYRRkhwBQjPOKTjaTMSM iXAh/WBN7t6z54i/6a7eKL1wHuq0w86oavFGPrXR4PhG2r/xEN937gtVreH6FuZ4 PryFAEK+owAwKtFVBAl3z1r7nF/KwAvBjf0sWFZaLPWDF+QXcJyDgi+Siz3Bf7X0 fwwLees2t0oahfcAuinoRT4IFy2aH8q98PKLRAB8ISgoGHOcRsd6P/cU/sNkPOXz ZQTuo+S4q/SMoWjEn9cojYe6jd+G+jvfBCZwRaqTYlc/TjbrkipK/TamRunSZVBE I3ju1S2qOrBUkTxBxV4Sx+QkY+6BvXFaQnSZAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUFg9x59aFjlliWMuBAeWelnaQmz0wHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL0ZnOXg1OWFGamxsaVdNdUJB ZVdlbG5hUW16MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BkjAMA0GCSqGSIb3DQEBCwUAA4IBAQCgJugsqr4ug59quKnFxvHipf7MDRr+LW00 m6hZhK+B0GmnA1TXPuIdgHwNArB+cWR/BWVFxMCETRd0gxnlV8ZD9pCFZO8ec9LT qHFiI/x/Va/GaEF0lScxYuuIjbYnJtidcE9s3DJ53xJZ84sAurC0VRjy6AS7UNsA d5GGkf1jsg/VI0UGAiwt2nlo1OTT3mUMlo02lKzq399+v6oOUltSiJOzRFNoRoHC fGO4dD1RlC0eXoHvsxX3/9ndFtRWAfd8TP0M5jt/b82U/P/WkHg3KRDUnweBQocD oeV1TuC7AoqQOiDnGDnTVRQpgBbDTbqTPbWWYGuv3BeJ1dehjRnm -----END CERTIFICATE-----Generated at Sat Apr 5 15:05:08 2025 by rpki-client