$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/CgSZtDADoXdKgPG24QBrznOJvfk.roa File: CgSZtDADoXdKgPG24QBrznOJvfk.roa (raw, json) Hash identifier: GYGL45N9RM8hzhKvta8/9Cu2CpcetnJ1m2z8XF0+g9A= Subject key identifier: 0A:04:99:B4:30:03:A1:77:4A:80:F1:B6:E1:00:6B:CE:73:89:BD:F9 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17A8 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CgSZtDADoXdKgPG24QBrznOJvfk.roa Signing time: Wed 12 Feb 2025 01:36:55 +0000 ROA not before: Wed 12 Feb 2025 01:36:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 210.65.144.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6056 (0x17a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A0499B43003A1774A80F1B6E1006BCE7389BDF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:6b:7b:22:a6:a2:3f:d5:30:6d:4b:bb:46: 32:53:0f:ae:40:ab:ab:f9:66:b0:07:c9:24:1f:cc: d0:dc:66:81:51:a4:c0:1b:ae:e9:a9:83:0e:6d:6e: ba:17:4e:0c:9c:f2:2e:4f:7a:94:8a:a8:9a:5e:aa: 6d:9f:3b:62:b7:62:e7:06:7f:d8:62:8f:f6:3d:ea: ca:9b:7a:e7:94:5c:2d:56:28:60:f5:66:07:fa:72: 34:79:c8:3a:d9:bb:65:6c:08:0a:53:b2:32:1f:0d: fe:b8:02:62:c2:5b:20:3b:64:0f:05:38:da:10:ca: 3f:de:9a:b9:cf:d3:9d:22:f6:3f:61:d2:b8:d5:6f: 86:f0:4c:6d:65:a2:eb:9f:41:3d:d5:5d:21:07:eb: 8e:fe:b1:3b:60:e3:11:c6:87:64:1b:5b:71:f2:bd: 3e:ae:39:4c:76:74:49:cd:5c:d0:31:3a:b6:ec:c1: 5b:6d:a4:52:e8:42:1d:8c:89:6f:98:ab:3c:63:2e: 94:57:b9:59:b6:dd:33:64:4b:10:9d:4f:0d:3b:7c: 3a:88:37:bd:b3:de:01:ef:33:de:7b:f4:30:56:2b: 91:ab:40:21:fb:5c:7f:92:b8:5e:a8:9b:30:c6:f4: b9:74:6d:26:f8:2e:ef:a4:1b:16:ec:05:97:ca:dc: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:04:99:B4:30:03:A1:77:4A:80:F1:B6:E1:00:6B:CE:73:89:BD:F9 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CgSZtDADoXdKgPG24QBrznOJvfk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.144.128/26 Signature Algorithm: sha256WithRSAEncryption 36:c8:01:29:c7:72:ae:c6:a8:38:31:23:20:63:62:53:c8:0a: 4f:16:4a:a7:d6:c8:57:06:89:76:36:5b:fa:35:e9:a5:d1:18: 33:42:36:d9:16:45:1f:c9:b6:5e:8c:50:f2:5b:75:5d:52:e5: b9:88:67:5b:4d:77:ae:c0:f8:e4:7d:ac:44:75:87:08:23:37: ba:3c:6c:87:25:b8:46:58:c5:53:86:71:ba:11:be:42:8d:74: aa:2a:8e:5f:1c:25:9e:89:51:1e:5d:e3:10:98:41:f4:67:94: 2f:73:21:42:5d:ed:23:9d:bc:91:e7:72:93:f7:92:47:55:44: bd:79:3e:9f:53:99:ff:9d:ea:9f:01:6c:9f:67:ce:61:22:91: a1:76:1a:53:7e:54:54:54:ed:59:c4:59:34:02:e4:03:b0:d6: 29:e4:79:11:31:a2:81:18:b9:b7:39:6c:77:29:17:9d:e5:ed: 83:d0:b5:67:31:69:49:c2:78:1f:32:ea:81:5b:4d:d6:27:a1: 8b:97:bc:7a:66:24:31:1c:e8:68:99:1d:f0:b7:b4:fd:6b:37: 86:2f:6e:a1:86:75:76:11:99:29:6b:4d:63:a1:ec:d5:d0:d6: 34:88:1b:74:00:64:d1:ba:bc:b8:1c:69:33:11:d9:34:f5:e6: 2f:b5:b9:13 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICF6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBMDQ5OUI0MzAwM0Ex Nzc0QTgwRjFCNkUxMDA2QkNFNzM4OUJERjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCX2Gt7IqaiP9UwbUu7RjJTD65Aq6v5ZrAHySQfzNDcZoFRpMAb rumpgw5tbroXTgyc8i5PepSKqJpeqm2fO2K3YucGf9hij/Y96sqbeueUXC1WKGD1 Zgf6cjR5yDrZu2VsCApTsjIfDf64AmLCWyA7ZA8FONoQyj/emrnP050i9j9h0rjV b4bwTG1louufQT3VXSEH647+sTtg4xHGh2QbW3HyvT6uOUx2dEnNXNAxOrbswVtt pFLoQh2MiW+YqzxjLpRXuVm23TNkSxCdTw07fDqIN72z3gHvM9579DBWK5GrQCH7 XH+SuF6omzDG9Ll0bSb4Lu+kGxbsBZfK3GTvAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUCgSZtDADoXdKgPG24QBrznOJvfkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9DZ1NadERBRG9YZEtnUEcyNFFC cnpuT0p2Zmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0kGQ gDANBgkqhkiG9w0BAQsFAAOCAQEANsgBKcdyrsaoODEjIGNiU8gKTxZKp9bIVwaJ djZb+jXppdEYM0I22RZFH8m2XoxQ8lt1XVLluYhnW013rsD45H2sRHWHCCM3ujxs hyW4RljFU4ZxuhG+Qo10qiqOXxwlnolRHl3jEJhB9GeUL3MhQl3tI528kedyk/eS R1VEvXk+n1OZ/53qnwFsn2fOYSKRoXYaU35UVFTtWcRZNALkA7DWKeR5ETGigRi5 tzlsdykXneXtg9C1ZzFpScJ4HzLqgVtN1iehi5e8emYkMRzoaJkd8Le0/Ws3hi9u oYZ1dhGZKWtNY6Hs1dDWNIgbdABk0bq8uBxpMxHZNPXmL7W5Ew== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net