$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AQ4xCQGrK6meIO454mK-aQlgWzQ.roa File: AQ4xCQGrK6meIO454mK-aQlgWzQ.roa (raw, json) Hash identifier: hCFWYNoza2vRnEFqBn2eLDdylP7dRp9d27oTm/XKRKM= Subject key identifier: 01:0E:31:09:01:AB:2B:A9:9E:20:EE:39:E2:62:BE:69:09:60:5B:34 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 172B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AQ4xCQGrK6meIO454mK-aQlgWzQ.roa Signing time: Wed 12 Feb 2025 01:36:27 +0000 ROA not before: Wed 12 Feb 2025 01:36:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131621 IP address blocks: 118.168.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5931 (0x172b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=010E310901AB2BA99E20EE39E262BE6909605B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:4a:82:34:29:e1:44:db:59:dc:43:e6:e8: 38:27:42:12:05:d7:ad:72:cf:db:de:64:c6:e3:e3: 66:7c:b4:51:a5:21:26:02:85:c0:43:3e:1d:f6:63: 2a:59:d1:af:2c:47:98:77:b4:b8:69:76:96:22:8c: 04:b8:f5:da:08:2c:8a:2c:9d:d0:55:ac:24:e1:f5: 6a:66:ea:c5:53:f6:a5:2f:56:1c:78:eb:e0:62:3e: 44:e2:fe:cb:ea:44:63:31:d3:38:d9:d5:1e:80:95: f4:e0:6f:bf:48:7c:6c:3a:9e:50:14:99:da:31:26: 74:fb:6d:ed:ee:d7:33:18:c2:3d:47:06:46:fd:eb: a1:4f:e7:38:4e:17:72:cc:c3:bc:45:89:59:04:45: 2e:86:ea:73:54:b4:8b:e1:d5:95:9e:8d:18:40:6a: f8:46:19:83:8d:70:bb:f4:c9:08:7a:4a:2c:d6:3a: 49:01:7c:9b:59:09:52:77:35:3d:f2:4e:0d:f8:ab: 9b:41:c9:6b:56:e7:79:86:ba:c0:33:ff:a6:87:fb: eb:3e:63:0d:ac:fe:34:eb:70:83:30:28:9f:8d:12: 34:ad:8c:89:80:32:f5:92:03:6f:91:f8:55:f3:91: d6:28:83:bc:98:e8:0c:ce:38:c9:6b:16:4e:30:ec: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0E:31:09:01:AB:2B:A9:9E:20:EE:39:E2:62:BE:69:09:60:5B:34 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AQ4xCQGrK6meIO454mK-aQlgWzQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.168.255.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:4e:02:36:e5:21:63:9d:7d:2a:3e:2f:c5:29:e4:76:7d:4f: a0:19:9a:6e:88:10:f6:bd:28:b9:b5:72:c4:56:71:80:95:c0: 63:a3:cb:1a:73:25:95:7b:73:34:d1:bb:77:e0:28:67:13:ff: 52:0f:04:e5:ea:64:5d:fd:ce:88:6f:5b:14:26:f6:a4:67:97: 18:56:01:71:be:a0:e3:05:dc:40:66:5d:dd:be:d5:20:0d:2a: 20:49:f3:5a:e3:f5:76:02:ba:cd:1c:fc:e1:47:de:c9:f9:3e: 84:ab:4c:f6:53:0f:a9:1a:99:8f:c3:2b:4c:1f:68:93:e3:fb: e5:2c:6d:ad:3c:37:05:64:78:88:54:7e:e2:12:2b:78:55:fa: 49:03:d3:21:18:96:4d:b4:fd:98:40:f1:b1:bf:00:63:bb:b7: d9:d5:da:97:5f:d4:97:0a:e7:ee:43:f7:65:27:8d:ed:82:7c: 64:90:2f:55:42:1c:8b:b5:10:21:5e:87:20:7e:f8:a5:22:dd: 58:4f:72:05:7a:22:f1:b0:af:58:1b:79:e5:19:b2:4b:19:a6: 8c:e3:92:40:23:45:d8:56:a6:dd:bb:c8:e2:58:7e:ed:1a:83: 4d:d5:c4:4d:6d:24:c8:64:79:70:25:a0:35:19:d1:a6:c4:02: d8:d4:12:b8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxMEUzMTA5MDFBQjJC QTk5RTIwRUUzOUUyNjJCRTY5MDk2MDVCMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYo0qCNCnhRNtZ3EPm6DgnQhIF161yz9veZMbj42Z8tFGlISYC hcBDPh32YypZ0a8sR5h3tLhpdpYijAS49doILIosndBVrCTh9Wpm6sVT9qUvVhx4 6+BiPkTi/svqRGMx0zjZ1R6AlfTgb79IfGw6nlAUmdoxJnT7be3u1zMYwj1HBkb9 66FP5zhOF3LMw7xFiVkERS6G6nNUtIvh1ZWejRhAavhGGYONcLv0yQh6SizWOkkB fJtZCVJ3NT3yTg34q5tByWtW53mGusAz/6aH++s+Yw2s/jTrcIMwKJ+NEjStjImA MvWSA2+R+FXzkdYog7yY6AzOOMlrFk4w7JGhAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUAQ4xCQGrK6meIO454mK+aQlgWzQwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BUTR4Q1FHcks2bWVJTzQ1NG1L LWFRbGdXelEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdqj/ MA0GCSqGSIb3DQEBCwUAA4IBAQCaTgI25SFjnX0qPi/FKeR2fU+gGZpuiBD2vSi5 tXLEVnGAlcBjo8sacyWVe3M00bt34ChnE/9SDwTl6mRd/c6Ib1sUJvakZ5cYVgFx vqDjBdxAZl3dvtUgDSogSfNa4/V2ArrNHPzhR97J+T6Eq0z2Uw+pGpmPwytMH2iT 4/vlLG2tPDcFZHiIVH7iEit4VfpJA9MhGJZNtP2YQPGxvwBju7fZ1dqXX9SXCufu Q/dlJ43tgnxkkC9VQhyLtRAhXocgfvilIt1YT3IFeiLxsK9YG3nlGbJLGaaM45JA I0XYVqbdu8jiWH7tGoNN1cRNbSTIZHlwJaA1GdGmxALY1BK4 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net