$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/788zpBtbvYCw7v1YbFFIe4AG5nE.roa File: 788zpBtbvYCw7v1YbFFIe4AG5nE.roa (raw, json) Hash identifier: lTE+7MXcoqj5wsCwm1IN3VEECABzL5eexo7rg07v6/Y= Subject key identifier: EF:CF:33:A4:1B:5B:BD:80:B0:EE:FD:58:6C:51:48:7B:80:06:E6:71 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 176F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/788zpBtbvYCw7v1YbFFIe4AG5nE.roa Signing time: Wed 12 Feb 2025 01:36:42 +0000 ROA not before: Wed 12 Feb 2025 01:36:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131621 IP address blocks: 2001:b032:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5999 (0x176f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EFCF33A41B5BBD80B0EEFD586C51487B8006E671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:c6:83:4d:34:71:64:f2:6e:17:66:81:01: 25:d2:3e:e5:fe:38:db:f2:cb:8a:6e:c4:f4:db:d0: 39:18:0c:39:ef:c5:32:ad:9f:7d:48:c1:05:ef:99: 88:d0:f8:ca:3b:55:0a:f3:f5:7a:c5:06:93:8d:d6: cc:80:e2:f5:e9:49:66:96:1e:89:05:69:06:7a:99: f2:dc:83:45:2a:cf:74:95:7e:60:bd:36:98:0d:1d: fb:fa:ac:02:5e:92:7a:5a:51:42:13:e5:b6:e7:76: 17:04:22:0c:0a:d6:d7:fb:07:82:b5:e8:73:b4:c5: 86:d5:32:76:1e:8a:3b:1e:68:78:15:c2:a8:6d:9f: 2d:15:61:90:82:10:de:42:d2:41:e7:d2:a0:74:c0: 45:2d:92:db:c5:99:79:78:5f:9f:c1:b5:40:e1:3c: d9:4a:82:ba:7f:be:00:4b:c1:38:2e:03:d5:8a:31: 60:3c:1c:b7:7c:ec:22:b6:90:df:0f:35:de:f6:8e: 10:d6:e3:d9:67:3c:7c:6b:36:8c:86:72:63:cc:ad: 8e:a6:4c:b5:06:8f:16:7c:c6:66:b7:4f:a3:1c:c8: e9:2f:8a:93:29:e4:af:9e:b5:77:40:93:8a:ca:d0: 82:b1:1b:54:2f:8a:8a:51:ae:53:c1:b2:f0:a1:c7: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CF:33:A4:1B:5B:BD:80:B0:EE:FD:58:6C:51:48:7B:80:06:E6:71 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/788zpBtbvYCw7v1YbFFIe4AG5nE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b032:103::/48 Signature Algorithm: sha256WithRSAEncryption 98:75:30:b8:bb:a0:be:4b:21:69:2b:8e:5b:98:01:fb:b4:77: fe:50:ea:5c:5a:21:19:9b:5b:7f:ed:02:0a:b1:f3:d1:29:9d: cc:54:14:71:b5:bf:3a:ad:5a:b4:9c:b7:7a:6a:f2:3f:d2:01: e5:48:50:68:63:75:c0:90:4e:e3:b1:ee:fe:12:5c:e1:ad:c2: f9:6a:61:6a:b4:df:d4:ce:6f:89:50:3b:c8:a1:3e:c9:97:ca: 1e:2c:d1:0f:fb:d6:d2:a6:fa:7a:12:99:90:ee:50:d6:ee:9c: 0f:23:a5:da:6a:ff:af:e4:fd:96:79:d2:83:c0:7e:3d:87:66: fc:3a:c6:8e:b1:9b:7e:e0:ed:9d:13:36:3c:66:b9:ff:ab:1b: b5:d6:fe:d0:20:5f:08:e6:19:45:84:62:26:4d:70:72:3a:00: 37:6f:57:0c:2d:9e:e9:8d:20:54:1e:8c:4d:be:2f:d9:d9:dc: ca:f8:70:31:17:09:9b:d7:b9:31:6a:24:81:66:7d:e4:03:2f: 85:cd:e7:80:2c:2b:ec:4b:2a:ef:13:d6:6f:9d:df:42:a1:78: 91:8f:e0:9a:35:2d:f9:36:36:18:0c:b7:b4:c1:24:22:f5:86: 57:6f:66:ae:b7:e7:8a:e4:8d:56:da:c3:92:f2:6b:1d:01:47: 81:3c:e9:4f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICF28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVGQ0YzM0E0MUI1QkJE ODBCMEVFRkQ1ODZDNTE0ODdCODAwNkU2NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPz8aDTTRxZPJuF2aBASXSPuX+ONvyy4puxPTb0DkYDDnvxTKt n31IwQXvmYjQ+Mo7VQrz9XrFBpON1syA4vXpSWaWHokFaQZ6mfLcg0Uqz3SVfmC9 NpgNHfv6rAJeknpaUUIT5bbndhcEIgwK1tf7B4K16HO0xYbVMnYeijseaHgVwqht ny0VYZCCEN5C0kHn0qB0wEUtktvFmXl4X5/BtUDhPNlKgrp/vgBLwTguA9WKMWA8 HLd87CK2kN8PNd72jhDW49lnPHxrNoyGcmPMrY6mTLUGjxZ8xma3T6McyOkvipMp 5K+etXdAk4rK0IKxG1QviopRrlPBsvChx89jAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU788zpBtbvYCw7v1YbFFIe4AG5nEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC83ODh6cEJ0YnZZQ3c3djFZYkZG SWU0QUc1bkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw MgEDMA0GCSqGSIb3DQEBCwUAA4IBAQCYdTC4u6C+SyFpK45bmAH7tHf+UOpcWiEZ m1t/7QIKsfPRKZ3MVBRxtb86rVq0nLd6avI/0gHlSFBoY3XAkE7jse7+ElzhrcL5 amFqtN/Uzm+JUDvIoT7Jl8oeLNEP+9bSpvp6EpmQ7lDW7pwPI6Xaav+v5P2WedKD wH49h2b8OsaOsZt+4O2dEzY8Zrn/qxu11v7QIF8I5hlFhGImTXByOgA3b1cMLZ7p jSBUHoxNvi/Z2dzK+HAxFwmb17kxaiSBZn3kAy+FzeeALCvsSyrvE9Zvnd9CoXiR j+CaNS35NjYYDLe0wSQi9YZXb2aut+eK5I1W2sOS8msdAUeBPOlP -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net