$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/13uqLzvEoq2ceb-xyCzeDYAAAp0.roa File: 13uqLzvEoq2ceb-xyCzeDYAAAp0.roa (raw, json) Hash identifier: IR18Q/c8zwXF3A/ZDngm6p8Llvy7CuFvfyr9/klZ6rQ= Subject key identifier: D7:7B:AA:2F:3B:C4:A2:AD:9C:79:BF:B1:C8:2C:DE:0D:80:00:02:9D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17C3 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/13uqLzvEoq2ceb-xyCzeDYAAAp0.roa Signing time: Wed 12 Feb 2025 01:37:02 +0000 ROA not before: Wed 12 Feb 2025 01:37:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 125.232.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6083 (0x17c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:37:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D77BAA2F3BC4A2AD9C79BFB1C82CDE0D8000029D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:e0:6c:4c:db:73:8c:52:2b:89:52:2c:52: 90:ea:2c:d2:10:5a:9c:cb:dd:79:a3:4d:3b:06:d0: 44:32:39:6b:d2:5f:d3:0c:52:e3:33:ee:a7:4b:f5: 74:0b:81:51:dc:55:35:85:f3:75:43:5b:12:7d:87: 46:01:25:8e:9d:dc:34:f5:7f:bf:85:d3:ca:34:fd: c2:a2:8d:9d:fb:6e:e2:d5:5a:e4:26:d2:89:07:40: 61:b5:8e:bc:f2:ff:cd:21:59:31:1e:00:54:f2:15: 3a:34:7b:0a:d3:18:c6:f3:e7:4a:25:bc:53:c6:27: 4d:9a:c9:dc:c3:b1:a8:3c:04:8e:e6:52:6d:f5:50: 2d:02:45:e1:09:f2:79:97:22:d0:0f:3f:05:c0:57: 62:ef:d9:35:71:32:a5:ee:bd:f1:c3:34:f9:32:4a: 60:a5:72:41:80:95:e8:03:04:d7:6a:23:ae:50:21: 82:b3:b9:38:98:c3:81:ea:9c:f8:09:8e:37:d6:a3: 40:dd:8c:94:55:7d:38:20:f6:1a:47:fa:d9:d0:23: 4c:69:19:de:e3:ed:a3:b7:57:77:e6:5a:87:06:54: a9:4e:1b:ba:18:e1:9c:fd:6b:f5:81:51:e6:e8:b4: 32:a3:1a:50:73:fc:72:9e:94:3a:59:35:71:70:15: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:AA:2F:3B:C4:A2:AD:9C:79:BF:B1:C8:2C:DE:0D:80:00:02:9D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/13uqLzvEoq2ceb-xyCzeDYAAAp0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.232.0.0/15 Signature Algorithm: sha256WithRSAEncryption a9:f7:8f:73:e5:39:a7:c6:56:7f:16:a5:cd:df:3c:06:c6:72: e8:f9:42:1b:ac:f5:b7:8a:fe:01:51:17:5a:a2:76:dc:01:8d: b0:a9:29:0e:ab:17:90:ca:14:7d:6b:66:ea:ce:18:be:90:41: a8:0e:54:97:d3:bb:ae:3d:17:56:66:aa:ca:5d:25:68:c2:fd: 6c:87:01:6b:20:6f:fa:7b:60:e8:2e:62:21:5c:1a:76:43:d3: 70:a1:2c:1d:86:43:ce:6d:2c:04:72:35:e3:39:8e:a2:5b:11: b2:4a:66:c4:75:3c:89:45:79:05:cb:32:e8:ce:1a:6b:68:8d: ba:67:f0:37:bf:b0:a2:79:04:7b:2a:f6:90:7f:21:6b:2d:e7: 94:0f:49:84:6a:d5:bb:7e:64:ed:47:0e:59:c7:8d:9e:ed:c0: 8c:7f:02:7f:d6:df:3e:27:f4:95:14:69:43:0f:4b:88:c9:c9: 3c:c3:4c:63:5e:54:61:9c:67:26:20:e4:c3:9a:46:a0:d6:73: ea:7b:bb:28:59:c3:d9:b5:b8:10:38:d6:b8:51:73:e8:47:de: ac:7a:6f:04:ee:96:9f:3a:61:ac:56:71:91:5b:e3:bb:97:d1: 59:a4:b0:48:05:87:10:db:2b:74:f4:33:c3:36:c0:ac:ab:c8: 1f:73:7d:a9 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM3MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ3N0JBQTJGM0JDNEEy QUQ5Qzc5QkZCMUM4MkNERTBEODAwMDAyOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYqeBsTNtzjFIriVIsUpDqLNIQWpzL3XmjTTsG0EQyOWvSX9MM UuMz7qdL9XQLgVHcVTWF83VDWxJ9h0YBJY6d3DT1f7+F08o0/cKijZ37buLVWuQm 0okHQGG1jrzy/80hWTEeAFTyFTo0ewrTGMbz50olvFPGJ02aydzDsag8BI7mUm31 UC0CReEJ8nmXItAPPwXAV2Lv2TVxMqXuvfHDNPkySmClckGAlegDBNdqI65QIYKz uTiYw4HqnPgJjjfWo0DdjJRVfTgg9hpH+tnQI0xpGd7j7aO3V3fmWocGVKlOG7oY 4Zz9a/WBUebotDKjGlBz/HKelDpZNXFwFa+LAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU13uqLzvEoq2ceb+xyCzeDYAAAp0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8xM3VxTHp2RW9xMmNlYi14eUN6 ZURZQUFBcDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBfegw DQYJKoZIhvcNAQELBQADggEBAKn3j3PlOafGVn8Wpc3fPAbGcuj5Qhus9beK/gFR F1qidtwBjbCpKQ6rF5DKFH1rZurOGL6QQagOVJfTu649F1ZmqspdJWjC/WyHAWsg b/p7YOguYiFcGnZD03ChLB2GQ85tLARyNeM5jqJbEbJKZsR1PIlFeQXLMujOGmto jbpn8De/sKJ5BHsq9pB/IWst55QPSYRq1bt+ZO1HDlnHjZ7twIx/An/W3z4n9JUU aUMPS4jJyTzDTGNeVGGcZyYg5MOaRqDWc+p7uyhZw9m1uBA41rhRc+hH3qx6bwTu lp86YaxWcZFb47uX0VmksEgFhxDbK3T0M8M2wKyryB9zfak= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net