$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/sNFpsuof2m2YwCY_4vGA_8eEz24.roa File: sNFpsuof2m2YwCY_4vGA_8eEz24.roa (raw, json) Hash identifier: 1vs3bjXgnjtxpYHQMijJC69EBIuMd+IBMJ2LcRE9d1o= Subject key identifier: B0:D1:69:B2:EA:1F:DA:6D:98:C0:26:3F:E2:F1:80:FF:C7:84:CF:6E Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322 Certificate serial: 0C97 Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/sNFpsuof2m2YwCY_4vGA_8eEz24.roa Signing time: Mon 10 Feb 2025 14:11:11 +0000 ROA not before: Mon 10 Feb 2025 14:11:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4782 IP address blocks: 203.65.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322 Validity Not Before: Feb 10 14:11:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B0D169B2EA1FDA6D98C0263FE2F180FFC784CF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:40:4d:c3:92:d2:f0:74:1b:9a:24:9f:8c: 71:5a:52:2d:00:81:b0:a0:7f:53:d1:aa:15:37:32: d5:c1:d2:19:b3:a4:dc:02:f1:95:06:f7:07:84:b2: d0:8f:ea:77:e5:a4:0d:43:ca:ea:67:1d:91:aa:2d: 56:3c:11:e6:b9:d2:22:51:4f:16:ca:58:5f:c4:b8: 88:f6:4b:3a:8d:f0:a6:4f:41:d5:bb:02:a9:9b:75: b7:f6:20:22:30:7d:72:3c:1b:11:7d:78:ec:de:fc: a1:29:4d:73:03:ed:87:74:3d:ff:5f:d1:a2:eb:7e: 11:54:3f:a7:e0:c5:d0:7c:a8:ec:70:42:af:a4:13: 01:41:7f:19:99:06:92:f6:46:ac:98:ce:6b:8a:fd: b3:32:42:78:58:c9:8e:40:96:44:e0:4a:5a:ca:ad: c8:44:4c:cc:f1:d5:d4:4d:32:11:40:24:be:56:9c: 99:df:5d:93:f2:11:bd:da:cc:95:41:c1:81:bf:09: 5f:89:a4:2f:b0:b7:99:f2:18:74:88:66:95:90:db: 01:34:a9:dc:36:9e:26:7a:f0:84:f9:7e:e0:86:91: 9e:c4:0b:7f:1a:c3:b0:ad:42:5e:79:5c:42:95:02: 96:54:19:b0:20:6f:d5:5b:aa:cf:f8:3f:6b:dd:43: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D1:69:B2:EA:1F:DA:6D:98:C0:26:3F:E2:F1:80:FF:C7:84:CF:6E X509v3 Authority Key Identifier: keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/sNFpsuof2m2YwCY_4vGA_8eEz24.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.65.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0e:94:57:5c:7d:02:93:5d:bb:79:e0:ca:81:8c:99:13:46:12: 4f:61:94:01:9c:ae:59:97:27:87:f5:bc:35:aa:57:cd:53:2b: 7c:88:a5:24:6f:34:d2:27:79:8f:4a:6f:aa:88:9e:1c:c1:66: a5:06:d3:06:50:9b:cc:64:13:af:0d:bb:52:c4:d5:68:11:4f: 97:29:28:68:28:72:23:79:d5:d1:db:8e:be:e9:2a:a7:20:69: 44:da:a0:2e:4d:73:19:c6:0c:76:78:8f:5c:db:c8:dd:83:31: ba:a2:47:6a:d7:5d:00:c9:67:c4:5f:a3:f9:cb:c3:66:43:e9: ad:95:e7:4f:d4:32:b7:a4:73:ed:9b:ae:28:17:78:57:8d:b6: 6e:aa:ae:9a:86:7f:70:ef:e7:7a:fd:d4:be:4c:3f:04:39:7b: 4f:c3:dd:1e:b8:bb:8a:95:73:7c:07:5a:9b:b2:dc:7a:7c:03: 27:18:d6:5d:91:57:c5:06:4a:ac:14:34:91:d8:af:16:80:d5: ca:a2:8c:4a:b8:7c:34:78:08:bf:78:8e:e3:a7:79:04:ce:cf: ab:a3:8a:b8:6e:2a:c9:08:89:a8:d9:3c:e4:20:14:06:0b:98: 6e:c6:81:23:ae:ac:55:10:39:c7:df:4a:10:20:5c:b1:87:a0: f5:d8:c9:18 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNG RjVDOTJDQzQ5NTBBNDU3QTczMjdEMTY4RkJDNDY1QjIxODMyMjAeFw0yNTAyMTAx NDExMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIwRDE2OUIyRUExRkRB NkQ5OEMwMjYzRkUyRjE4MEZGQzc4NENGNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+EEBNw5LS8HQbmiSfjHFaUi0AgbCgf1PRqhU3MtXB0hmzpNwC 8ZUG9weEstCP6nflpA1DyupnHZGqLVY8Eea50iJRTxbKWF/EuIj2SzqN8KZPQdW7 Aqmbdbf2ICIwfXI8GxF9eOze/KEpTXMD7Yd0Pf9f0aLrfhFUP6fgxdB8qOxwQq+k EwFBfxmZBpL2RqyYzmuK/bMyQnhYyY5AlkTgSlrKrchETMzx1dRNMhFAJL5WnJnf XZPyEb3azJVBwYG/CV+JpC+wt5nyGHSIZpWQ2wE0qdw2niZ68IT5fuCGkZ7EC38a w7CtQl55XEKVApZUGbAgb9Vbqs/4P2vdQ6MZAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUsNFpsuof2m2YwCY/4vGA/8eEz24wHwYDVR0jBBgwFoAUQ/9cksxJUKRXpzJ9 Fo+8RlshgyIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEVBTFRI TkVUL1FfOWNrc3hKVUtSWHB6SjlGby04UmxzaGd5SS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvUV85Y2tzeEpVS1JYcHpKOUZvLThSbHNoZ3lJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEVBTFRITkVUL3NORnBzdW9mMm0y WXdDWV80dkdBXzhlRXoyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfLQQAwDQYJKoZIhvcNAQELBQADggEBAA6UV1x9ApNdu3ngyoGMmRNGEk9h lAGcrlmXJ4f1vDWqV81TK3yIpSRvNNIneY9Kb6qInhzBZqUG0wZQm8xkE68Nu1LE 1WgRT5cpKGgociN51dHbjr7pKqcgaUTaoC5NcxnGDHZ4j1zbyN2DMbqiR2rXXQDJ Z8Rfo/nLw2ZD6a2V50/UMrekc+2brigXeFeNtm6qrpqGf3Dv53r91L5MPwQ5e0/D 3R64u4qVc3wHWpuy3Hp8AycY1l2RV8UGSqwUNJHYrxaA1cqijEq4fDR4CL94juOn eQTOz6ujirhuKskIiajZPOQgFAYLmG7GgSOurFUQOcffShAgXLGHoPXYyRg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net