$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa File: DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa (raw, json) Hash identifier: GI+eJF51Mt+Ud4PMyTQVm0Uy2btals2Bg6pFVIieDuY= Subject key identifier: 0D:A6:C7:A0:DF:04:F4:FC:25:4B:CB:6A:D9:A4:E6:4F:AA:90:49:D4 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 176D Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa Signing time: Wed 12 Feb 2025 01:36:41 +0000 ROA not before: Wed 12 Feb 2025 01:36:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 137280 IP address blocks: 203.69.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5997 (0x176d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0DA6C7A0DF04F4FC254BCB6AD9A4E64FAA9049D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:79:26:62:27:33:51:40:cd:93:57:d6:3b:c0: 0e:0f:e2:0b:96:0f:c0:28:8d:1e:00:76:2d:02:81: 4a:d7:62:d4:ec:17:7e:13:64:a5:17:64:f3:bb:a8: 5a:07:9e:b1:4b:4d:08:0a:65:9d:bc:84:6b:7c:10: 1f:17:6e:bc:94:1a:7f:70:27:55:31:d4:76:70:84: aa:08:8b:b1:7e:61:d8:6b:59:3f:eb:66:0b:94:8b: 46:01:33:5b:f1:b2:09:ea:a5:67:d6:ec:70:9c:f7: d2:7a:26:28:c6:04:e2:99:cc:3e:8e:16:1f:e1:c0: b4:ac:f2:19:fc:2f:ae:cf:ac:80:10:ff:ff:63:f0: d3:eb:39:e4:88:ff:8d:40:79:cd:a9:8a:ac:7a:b2: 7d:c1:3b:96:46:a5:8e:7e:f6:ed:7f:9d:3e:a1:a0: 20:0d:64:f5:88:70:5c:0f:c7:2f:dd:99:e1:1c:2f: f8:0d:7d:c4:c5:10:b3:8d:d7:94:61:e2:95:36:09: 6b:69:6d:48:05:eb:1a:bd:be:6e:92:f4:ee:46:80: f2:e7:e4:1d:76:b2:c2:0a:cc:da:ad:86:7c:2b:f0: 1a:36:3d:60:8c:cd:33:9c:cc:a1:9f:5b:53:4b:f7: fb:05:65:f7:55:8b:fc:d7:26:a0:7e:76:a5:0a:0a: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A6:C7:A0:DF:04:F4:FC:25:4B:CB:6A:D9:A4:E6:4F:AA:90:49:D4 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.19.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:05:68:0d:21:f6:eb:f6:c6:92:e7:ba:4a:a6:27:c9:8e:09: ce:c4:29:a9:30:e1:0c:12:d0:40:72:a6:e5:60:22:46:bb:5f: 66:7a:0c:8a:9e:28:16:24:ce:2e:a0:c8:56:e0:3c:bf:b3:34: 66:ec:95:df:7b:ab:49:4d:9c:aa:ec:89:bc:a8:99:52:9b:1d: b3:ed:8e:53:f6:ef:17:fc:e8:8c:0b:9b:b3:f4:05:a1:ba:d1: e6:f8:7e:e0:e7:13:5a:2e:b2:7f:dd:9c:7b:3d:aa:32:dd:ec: 88:96:c1:89:e8:60:a1:5f:82:a3:e2:a5:f5:7b:29:c6:ed:89: e5:0a:06:00:28:bb:a5:ae:2f:ee:02:2f:a4:5c:ee:d7:66:de: b6:68:93:99:db:18:35:c9:fa:2c:4b:5a:31:05:cd:cb:52:bb: d6:60:2d:0f:dc:af:b3:7b:72:f5:2d:ad:55:a0:70:08:98:b4: d6:30:d1:df:05:5e:ea:23:9e:e0:93:5d:36:ed:ec:47:a8:66: 2b:35:4a:ab:9e:11:0a:94:86:80:58:c7:f9:43:03:39:bd:04: 7f:da:89:c0:7d:ee:6b:5a:51:2c:44:58:3a:42:38:f7:99:3e: 57:c9:e5:b3:8b:39:3c:b0:de:98:e3:0a:df:ce:f3:a0:e4:af: e5:d1:eb:7f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEQTZDN0EwREYwNEY0 RkMyNTRCQ0I2QUQ5QTRFNjRGQUE5MDQ5RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTeSZiJzNRQM2TV9Y7wA4P4guWD8AojR4Adi0CgUrXYtTsF34T ZKUXZPO7qFoHnrFLTQgKZZ28hGt8EB8XbryUGn9wJ1Ux1HZwhKoIi7F+YdhrWT/r ZguUi0YBM1vxsgnqpWfW7HCc99J6JijGBOKZzD6OFh/hwLSs8hn8L67PrIAQ//9j 8NPrOeSI/41Aec2piqx6sn3BO5ZGpY5+9u1/nT6hoCANZPWIcFwPxy/dmeEcL/gN fcTFELON15Rh4pU2CWtpbUgF6xq9vm6S9O5GgPLn5B12ssIKzNqthnwr8Bo2PWCM zTOczKGfW1NL9/sFZfdVi/zXJqB+dqUKCuhhAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUDabHoN8E9PwlS8tq2aTmT6qQSdQwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9EYWJIb044RTlQd2xTOHRxMmFU bVQ2cVFTZFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0UT MA0GCSqGSIb3DQEBCwUAA4IBAQCbBWgNIfbr9saS57pKpifJjgnOxCmpMOEMEtBA cqblYCJGu19megyKnigWJM4uoMhW4Dy/szRm7JXfe6tJTZyq7Im8qJlSmx2z7Y5T 9u8X/OiMC5uz9AWhutHm+H7g5xNaLrJ/3Zx7Paoy3eyIlsGJ6GChX4Kj4qX1eynG 7YnlCgYAKLulri/uAi+kXO7XZt62aJOZ2xg1yfosS1oxBc3LUrvWYC0P3K+ze3L1 La1VoHAImLTWMNHfBV7qI57gk1027exHqGYrNUqrnhEKlIaAWMf5QwM5vQR/2onA fe5rWlEsRFg6Qjj3mT5XyeWzizk8sN6Y4wrfzvOg5K/l0et/ -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net