$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9-F4n5--4tUt7VNfz_fhTdCbp6s.roa File: 9-F4n5--4tUt7VNfz_fhTdCbp6s.roa (raw, json) Hash identifier: Z4Iquj22n5pdXhcgX6XU5yiOhpCgRMwpfU5TMo48q/4= Subject key identifier: F7:E1:78:9F:9F:BE:E2:D5:2D:ED:53:5F:CF:F7:E1:4D:D0:9B:A7:AB Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1856 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9-F4n5--4tUt7VNfz_fhTdCbp6s.roa Signing time: Tue 15 Apr 2025 04:53:45 +0000 ROA not before: Tue 15 Apr 2025 04:53:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9505 IP address blocks: 2001:b200::/23 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6230 (0x1856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Apr 15 04:53:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F7E1789F9FBEE2D52DED535FCFF7E14DD09BA7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:75:15:5a:cc:4c:13:0a:23:b5:ca:55:1d: 4a:b5:ed:32:b9:4f:40:9a:38:7c:03:6a:3f:40:4f: af:8b:7c:30:59:ea:6c:e8:43:0c:f8:0a:95:63:7e: a2:16:4c:4f:34:b6:76:fc:23:73:39:57:ae:99:42: 9b:bd:77:5f:e1:9b:83:8c:7b:a5:59:93:79:01:2e: 4a:c0:31:65:76:9f:db:da:e2:d9:70:7e:37:9c:a3: 0e:9d:52:0c:07:72:fe:71:d5:22:79:94:2e:1b:9c: c6:95:5a:90:8c:f2:33:41:04:68:7b:7b:bb:8c:51: 21:0a:58:ad:a1:6a:57:5a:5e:2d:b4:7c:09:01:d3: 9f:1f:f9:da:7c:2a:ca:8e:6e:91:78:d0:40:fd:15: ba:39:4c:79:c7:13:c8:9f:88:5b:27:62:3b:11:c2: 75:6e:64:a0:30:4f:12:cc:85:84:e0:fd:c6:57:cd: e5:70:f1:c5:db:46:81:60:a1:24:b1:9c:5a:b7:e2: b3:ee:cc:c4:7b:48:fd:fa:f5:00:32:e6:db:66:d7: bf:45:63:63:0e:d2:6e:65:60:26:8c:f0:29:56:7e: b7:75:75:10:e2:e9:da:4c:2d:fb:87:1a:dd:bf:cb: f3:4e:6c:16:92:b8:0f:70:bc:a3:ad:22:58:00:79: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:78:9F:9F:BE:E2:D5:2D:ED:53:5F:CF:F7:E1:4D:D0:9B:A7:AB X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9-F4n5--4tUt7VNfz_fhTdCbp6s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b200::/23 Signature Algorithm: sha256WithRSAEncryption 9d:83:1e:26:0a:b3:6b:bd:ea:65:73:47:5f:0c:9d:4e:d9:3c: 3a:b7:8e:88:99:dd:1d:54:1d:cf:65:3f:13:19:d6:25:ae:ec: 05:fe:91:30:ed:df:d1:c0:61:a7:6f:6d:5d:11:c5:7f:73:bc: ee:15:af:a4:3c:51:45:e9:f6:d9:b9:6b:34:33:b4:3e:e0:bd: f8:a3:87:66:95:70:b6:dc:23:c8:38:90:c1:02:c4:d9:a4:61: f5:58:27:aa:c0:2a:ec:e9:79:da:19:d3:5c:55:2d:93:b3:05: be:ac:33:04:ae:d7:da:cc:8b:37:c9:ea:bf:46:39:dd:a5:0e: c5:4c:da:a6:2f:aa:b0:db:b7:59:f2:e9:f2:3f:61:c8:1a:b0: dd:8f:b8:9b:74:9c:8a:42:91:94:54:8a:ec:18:c3:c3:ca:b7: c1:f6:5c:82:8f:11:3a:7e:38:de:d4:a5:76:ef:e0:40:95:2e: 3c:c2:3a:66:2c:99:93:f4:4b:17:f8:c1:83:3e:52:12:20:16: 38:d2:5e:bf:dd:6f:a6:a4:a6:49:aa:a4:13:7f:90:15:1c:f6: 1a:59:ee:82:6a:b1:f6:c8:30:24:0c:d1:d3:b5:1b:37:85:32: 05:3d:bb:48:e2:79:32:e2:45:d5:fb:e5:84:ad:a9:56:dc:d5: ac:7a:92:00 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICGFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA0MTUw NDUzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY3RTE3ODlGOUZCRUUy RDUyREVENTM1RkNGRjdFMTRERDA5QkE3QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgmHUVWsxMEwojtcpVHUq17TK5T0CaOHwDaj9AT6+LfDBZ6mzo Qwz4CpVjfqIWTE80tnb8I3M5V66ZQpu9d1/hm4OMe6VZk3kBLkrAMWV2n9va4tlw fjecow6dUgwHcv5x1SJ5lC4bnMaVWpCM8jNBBGh7e7uMUSEKWK2haldaXi20fAkB 058f+dp8KsqObpF40ED9Fbo5THnHE8ifiFsnYjsRwnVuZKAwTxLMhYTg/cZXzeVw 8cXbRoFgoSSxnFq34rPuzMR7SP369QAy5ttm179FY2MO0m5lYCaM8ClWfrd1dRDi 6dpMLfuHGt2/y/NObBaSuA9wvKOtIlgAeV/xAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU9+F4n5++4tUt7VNfz/fhTdCbp6swHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC85LUY0bjUtLTR0VXQ3Vk5mel9m aFRkQ2JwNnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQBIAGy MA0GCSqGSIb3DQEBCwUAA4IBAQCdgx4mCrNrveplc0dfDJ1O2Tw6t46Imd0dVB3P ZT8TGdYlruwF/pEw7d/RwGGnb21dEcV/c7zuFa+kPFFF6fbZuWs0M7Q+4L34o4dm lXC23CPIOJDBAsTZpGH1WCeqwCrs6XnaGdNcVS2TswW+rDMErtfazIs3yeq/Rjnd pQ7FTNqmL6qw27dZ8unyP2HIGrDdj7ibdJyKQpGUVIrsGMPDyrfB9lyCjxE6fjje 1KV27+BAlS48wjpmLJmT9EsX+MGDPlISIBY40l6/3W+mpKZJqqQTf5AVHPYaWe6C arH2yDAkDNHTtRs3hTIFPbtI4nky4kXV++WEralW3NWsepIA -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net