$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2bDoBg8AHgsXOylvHXm0V6coZLg.roa File: 2bDoBg8AHgsXOylvHXm0V6coZLg.roa (raw, json) Hash identifier: 3JpcrbCJn4CWxMtRa3H6JJJol/R6A1Ls6GTp8kiBnZI= Subject key identifier: D9:B0:E8:06:0F:00:1E:0B:17:3B:29:6F:1D:79:B4:57:A7:28:64:B8 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17C5 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2bDoBg8AHgsXOylvHXm0V6coZLg.roa Signing time: Wed 12 Feb 2025 01:37:03 +0000 ROA not before: Wed 12 Feb 2025 01:37:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 220.128.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6085 (0x17c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:37:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D9B0E8060F001E0B173B296F1D79B457A72864B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:79:5e:52:ea:bb:81:05:d2:4d:14:a4:64: 36:c7:e2:44:18:90:18:0f:33:02:47:1e:9d:c3:b4: 86:be:b9:6b:40:65:23:cf:8b:46:8a:f9:d7:2a:a3: 39:62:7f:70:19:e0:4e:fe:8b:b8:75:8c:27:f0:94: bc:54:49:99:5a:4e:7e:99:b3:c9:19:b5:38:38:4f: 0f:97:8f:fe:b5:56:85:61:5b:8e:40:99:6e:da:fe: 51:59:56:f6:79:4f:e4:f3:0c:2a:0b:58:83:6d:89: 2e:e7:7a:06:a3:0a:80:4a:62:7a:ec:50:5d:49:68: 00:a9:91:a5:e6:59:1f:1e:84:66:c0:0d:23:1c:ee: 23:79:cd:75:d9:ff:80:c8:8d:46:c6:95:f3:a4:6a: 4b:48:e1:8d:45:9c:36:c0:f0:82:4a:5d:2c:75:15: 30:2b:f4:39:f2:3b:ce:0d:3b:ed:96:44:07:51:80: 44:13:6d:9a:fa:15:dc:10:02:93:24:b8:4c:66:7a: 40:af:a7:37:52:6f:e4:0a:f2:16:b9:9a:3e:2b:fd: fe:2d:73:d2:18:10:8d:d1:bc:58:13:6a:57:de:5e: 1d:e7:06:de:b9:28:6b:7e:89:06:e7:66:93:01:33: 45:63:a9:ae:18:a2:20:78:d1:81:1b:6b:86:40:bb: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:E8:06:0F:00:1E:0B:17:3B:29:6F:1D:79:B4:57:A7:28:64:B8 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2bDoBg8AHgsXOylvHXm0V6coZLg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption 30:f3:ee:34:b1:c2:0b:8b:76:97:29:e8:e4:4e:89:a0:04:51: 42:3a:3d:82:2a:d9:4f:12:99:ed:cc:0b:11:51:11:bf:de:d9: 04:9e:9f:e3:3e:1c:30:12:65:00:29:dd:26:3b:0c:df:a4:7c: 35:42:7b:8b:b4:dd:1b:d3:07:9c:c5:0e:05:9a:ef:37:4f:9b: 5f:e6:8e:50:22:77:aa:37:ef:2b:fa:9e:d6:42:d6:0a:e8:2e: bf:a5:b8:9f:cb:d2:f9:ea:45:78:c2:0c:6f:b8:36:4f:43:f0: bd:c8:2d:b2:fc:14:de:f7:4b:5e:1f:96:d3:b4:b3:de:17:52: da:a2:1a:a1:2a:47:be:26:74:b1:73:e5:ff:69:43:b7:37:92: f4:41:33:fc:18:1e:90:4e:06:e0:02:ec:f7:cf:26:8c:4a:3a: b3:9c:43:34:e9:70:09:56:48:47:94:cd:5c:ee:3c:93:c9:57: 4d:8e:59:f6:7f:77:02:86:12:e0:c7:94:58:66:11:b6:ec:07: 11:35:49:0e:68:5d:68:cb:3b:18:4d:8e:e1:5f:b5:f2:86:f4: 25:d7:53:c2:f5:c6:b6:9d:f4:8f:8f:aa:d9:c8:27:c6:f6:5f: 5b:d2:8b:b8:f8:b2:6e:86:6c:20:39:54:bb:b4:af:54:0c:8a: fd:ec:bd:29 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM3MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5QjBFODA2MEYwMDFF MEIxNzNCMjk2RjFENzlCNDU3QTcyODY0QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE2nleUuq7gQXSTRSkZDbH4kQYkBgPMwJHHp3DtIa+uWtAZSPP i0aK+dcqozlif3AZ4E7+i7h1jCfwlLxUSZlaTn6Zs8kZtTg4Tw+Xj/61VoVhW45A mW7a/lFZVvZ5T+TzDCoLWINtiS7negajCoBKYnrsUF1JaACpkaXmWR8ehGbADSMc 7iN5zXXZ/4DIjUbGlfOkaktI4Y1FnDbA8IJKXSx1FTAr9DnyO84NO+2WRAdRgEQT bZr6FdwQApMkuExmekCvpzdSb+QK8ha5mj4r/f4tc9IYEI3RvFgTalfeXh3nBt65 KGt+iQbnZpMBM0Vjqa4YoiB40YEba4ZAu5VFAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU2bDoBg8AHgsXOylvHXm0V6coZLgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8yYkRvQmc4QUhnc1hPeWx2SFht MFY2Y29aTGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG3IBA MA0GCSqGSIb3DQEBCwUAA4IBAQAw8+40scILi3aXKejkTomgBFFCOj2CKtlPEpnt zAsRURG/3tkEnp/jPhwwEmUAKd0mOwzfpHw1QnuLtN0b0wecxQ4Fmu83T5tf5o5Q IneqN+8r+p7WQtYK6C6/pbify9L56kV4wgxvuDZPQ/C9yC2y/BTe90teH5bTtLPe F1LaohqhKke+JnSxc+X/aUO3N5L0QTP8GB6QTgbgAuz3zyaMSjqznEM06XAJVkhH lM1c7jyTyVdNjln2f3cChhLgx5RYZhG27AcRNUkOaF1oyzsYTY7hX7XyhvQl11PC 9ca2nfSPj6rZyCfG9l9b0ou4+LJuhmwgOVS7tK9UDIr97L0p -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net