$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa File: 4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa (raw, json) Hash identifier: uTjSA7MrWrz5qWSJPGN1Q1HeaZbTvBuidH4mHOeNV1Q= Subject key identifier: E1:47:1A:88:C4:68:48:41:C1:B7:B8:C0:A9:CE:26:F5:43:B8:FD:B3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1732 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa Signing time: Wed 12 Feb 2025 01:36:29 +0000 ROA not before: Wed 12 Feb 2025 01:36:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 198949 IP address blocks: 210.61.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5938 (0x1732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E1471A88C4684841C1B7B8C0A9CE26F543B8FDB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:86:71:04:95:14:39:ef:ab:b6:34:d3:4e: d5:7e:75:e5:53:72:ff:96:2a:70:74:9a:9e:67:0b: c2:cf:89:e6:95:20:e7:c0:c5:8f:cf:fa:8e:ec:7e: 2e:95:e7:3a:70:79:ee:87:8d:f1:74:95:94:37:f4: 74:5a:e6:d3:84:71:dd:9e:fe:b9:26:90:b8:84:77: b4:de:2a:6f:24:1c:64:fc:a1:fc:8a:d4:0c:07:4b: c0:43:24:68:54:a4:84:5e:af:be:f0:f1:41:c0:35: 45:01:59:04:90:5b:23:69:c6:45:0d:c3:fb:bf:26: 7e:2b:fe:d8:06:70:9a:22:4f:e6:56:7b:60:b6:a1: 79:2c:9d:9b:15:52:ba:f7:da:a7:06:45:8d:af:e9: 30:02:08:0b:72:12:20:c7:80:6f:fe:13:b6:c1:13: b7:7e:a8:c0:f3:e2:95:2e:85:78:2e:d7:87:c7:c1: 61:db:3f:03:11:ee:92:bc:08:a2:b6:9e:32:7f:af: ae:d7:93:74:1e:87:ef:5a:46:26:a8:51:cd:64:f5: ce:5c:69:22:4d:44:bd:eb:1d:61:ed:f8:40:f5:a6: bb:08:35:4b:0a:fc:7b:b0:ba:18:ec:4d:86:cf:e7: d5:69:0d:f2:50:9a:6d:40:65:6e:0a:a5:f4:f8:6c: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:1A:88:C4:68:48:41:C1:B7:B8:C0:A9:CE:26:F5:43:B8:FD:B3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.3.0/24 Signature Algorithm: sha256WithRSAEncryption 04:19:3a:ce:da:ab:72:16:56:36:f9:86:99:01:27:ae:b2:a1: a0:c6:3d:5d:a3:a9:5a:2f:a2:91:35:ba:d0:27:fc:aa:7c:26: 78:cc:47:c7:6b:36:fd:7c:85:55:ef:82:44:12:96:30:e2:bd: c4:77:69:b5:23:53:7c:c7:5d:d8:06:12:bc:41:ef:10:e0:84: 6b:33:ff:08:a6:0c:a5:2d:4e:0a:76:df:58:a0:b9:32:b3:60: e3:66:50:ba:4e:da:33:a9:fd:b6:6a:86:3a:7a:04:a9:77:13: c9:0d:54:a1:14:9d:6c:ed:60:8e:08:6e:5f:5d:99:75:e9:53: e3:26:d7:40:95:00:12:8b:a3:c4:c2:90:55:e5:8f:02:c8:c1: f0:8f:d8:24:b9:f2:2b:ef:15:b8:93:7f:0e:cd:20:f1:f6:03: e7:00:13:a1:a0:e2:04:e0:21:58:91:82:d2:15:7c:0d:8a:f0: 5f:2d:7c:91:d9:fe:96:80:d8:01:fe:80:39:94:42:3b:ca:a6: a2:7b:98:fd:2c:ce:9a:c9:11:29:58:5f:df:e7:91:b3:27:4a: c9:3a:69:0f:64:ab:c5:be:f0:2e:d8:86:71:67:b2:27:ca:9c: 40:b7:94:aa:43:57:11:8b:c3:1a:1d:07:2c:06:a5:99:47:d9: 90:d0:4a:8d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxNDcxQTg4QzQ2ODQ4 NDFDMUI3QjhDMEE5Q0UyNkY1NDNCOEZEQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuloZxBJUUOe+rtjTTTtV+deVTcv+WKnB0mp5nC8LPieaVIOfA xY/P+o7sfi6V5zpwee6HjfF0lZQ39HRa5tOEcd2e/rkmkLiEd7TeKm8kHGT8ofyK 1AwHS8BDJGhUpIRer77w8UHANUUBWQSQWyNpxkUNw/u/Jn4r/tgGcJoiT+ZWe2C2 oXksnZsVUrr32qcGRY2v6TACCAtyEiDHgG/+E7bBE7d+qMDz4pUuhXgu14fHwWHb PwMR7pK8CKK2njJ/r67Xk3Qeh+9aRiaoUc1k9c5caSJNRL3rHWHt+ED1prsINUsK /HuwuhjsTYbP59VpDfJQmm1AZW4KpfT4bPg1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU4UcaiMRoSEHBt7jAqc4m9UO4/bMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC80VWNhaU1Sb1NFSEJ0N2pBcWM0 bTlVTzRfYk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j0D MA0GCSqGSIb3DQEBCwUAA4IBAQAEGTrO2qtyFlY2+YaZASeusqGgxj1do6laL6KR NbrQJ/yqfCZ4zEfHazb9fIVV74JEEpYw4r3Ed2m1I1N8x13YBhK8Qe8Q4IRrM/8I pgylLU4Kdt9YoLkys2DjZlC6Ttozqf22aoY6egSpdxPJDVShFJ1s7WCOCG5fXZl1 6VPjJtdAlQASi6PEwpBV5Y8CyMHwj9gkufIr7xW4k38OzSDx9gPnABOhoOIE4CFY kYLSFXwNivBfLXyR2f6WgNgB/oA5lEI7yqaie5j9LM6ayREpWF/f55GzJ0rJOmkP ZKvFvvAu2IZxZ7InypxAt5SqQ1cRi8MaHQcsBqWZR9mQ0EqN -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net