$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ENs7o1gOHzRi565h9wsoLGpnC0w.roa File: ENs7o1gOHzRi565h9wsoLGpnC0w.roa (raw, json) Hash identifier: h9XA2Ky+p3aHlJJvZgzNRRp40DButpD/KQ1s1gtGtxs= Subject key identifier: 10:DB:3B:A3:58:0E:1F:34:62:E7:AE:61:F7:0B:28:2C:6A:67:0B:4C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1779 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ENs7o1gOHzRi565h9wsoLGpnC0w.roa Signing time: Wed 12 Feb 2025 01:36:44 +0000 ROA not before: Wed 12 Feb 2025 01:36:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 203.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6009 (0x1779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=10DB3BA3580E1F3462E7AE61F70B282C6A670B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:db:9c:bf:24:3f:5f:f6:14:c4:ba:94:e0: 73:99:d4:f2:67:07:a6:2d:d5:19:8d:1d:36:e8:7a: cf:ad:0c:20:37:0b:de:39:ab:a0:b3:23:a0:84:85: 48:73:11:54:fe:3b:d5:97:d5:62:b3:70:ce:a4:22: af:cd:3f:9d:a4:42:16:5b:e9:77:82:8c:00:1f:ab: 8e:f4:74:63:1b:b6:a2:dc:85:bd:5a:9e:ba:9d:20: c3:34:e6:b6:5b:4d:2d:08:a9:f9:3c:83:4e:af:f0: 79:c7:ec:5f:e5:e8:0d:67:76:b2:10:c4:25:f2:92: 69:bb:d8:76:5d:21:a6:e5:11:28:37:01:a7:37:c5: e2:21:d9:04:fb:0c:eb:11:7f:1b:4c:e9:a0:fc:92: 42:33:13:f6:65:3c:b4:c1:38:d5:ba:2f:8e:25:5a: 32:01:1e:cb:98:b1:64:9f:05:0e:30:d2:46:8a:d2: e6:9a:c0:5e:21:5e:9e:c1:d2:86:e1:5c:ac:4c:6d: 7f:13:e3:95:24:fd:0c:bd:da:68:c2:4e:05:ee:5a: 48:f7:dc:a4:d9:c1:38:cb:17:cd:ab:f2:44:e1:53: 1d:49:93:da:fd:e0:fa:10:82:4e:97:d5:3f:4d:d2: 1c:16:0f:63:50:dc:d0:82:19:ae:7e:2d:02:50:4a: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:3B:A3:58:0E:1F:34:62:E7:AE:61:F7:0B:28:2C:6A:67:0B:4C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ENs7o1gOHzRi565h9wsoLGpnC0w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.75.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:cb:5c:6a:c4:db:22:7b:58:ea:2b:56:ec:e5:e4:46:2a:e7: 85:4c:a4:b2:08:28:29:22:e5:61:ef:26:5a:40:6b:09:e5:a9: a8:02:02:3e:9f:f1:34:17:1a:2f:9b:1c:db:4d:5e:50:58:d2: ff:31:8f:37:b1:67:d4:77:02:17:ea:78:ac:9b:44:43:50:76: 85:e1:40:d9:82:a4:ff:08:60:9d:02:25:9b:26:3b:8e:85:99: 11:9e:99:e9:1e:09:cc:11:65:8f:5e:63:ab:a1:dd:49:44:c2: 8b:ba:f4:9d:5b:e2:31:ad:ec:e4:83:6d:b7:24:b3:8d:b0:a2: aa:72:3a:aa:46:69:ca:1c:51:9b:93:7f:bc:a0:e4:27:d1:2f: 71:62:2e:35:ad:4a:b8:a5:b6:71:da:be:79:dd:68:40:a9:42: 1d:54:62:22:82:63:be:b0:94:4e:2c:9f:e8:48:a1:c8:a1:08: 3d:b6:39:55:ac:de:b1:77:10:c2:0a:f4:cc:9e:78:de:86:2a: 2f:6b:9b:74:9d:09:ae:ba:f7:01:f4:68:a6:89:0e:43:d3:f6: 07:a8:b8:8f:48:4b:25:12:29:08:a9:aa:cd:98:fa:83:da:f2: ad:bb:84:bd:77:d7:2b:61:90:db:87:24:e7:24:32:d6:f4:11: 10:63:7b:54 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEwREIzQkEzNTgwRTFG MzQ2MkU3QUU2MUY3MEIyODJDNkE2NzBCNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp99ucvyQ/X/YUxLqU4HOZ1PJnB6Yt1RmNHTboes+tDCA3C945 q6CzI6CEhUhzEVT+O9WX1WKzcM6kIq/NP52kQhZb6XeCjAAfq470dGMbtqLchb1a nrqdIMM05rZbTS0Iqfk8g06v8HnH7F/l6A1ndrIQxCXykmm72HZdIablESg3Aac3 xeIh2QT7DOsRfxtM6aD8kkIzE/ZlPLTBONW6L44lWjIBHsuYsWSfBQ4w0kaK0uaa wF4hXp7B0obhXKxMbX8T45Uk/Qy92mjCTgXuWkj33KTZwTjLF82r8kThUx1Jk9r9 4PoQgk6X1T9N0hwWD2NQ3NCCGa5+LQJQSvHLAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUENs7o1gOHzRi565h9wsoLGpnC0wwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9FTnM3bzFnT0h6Umk1NjVoOXdz b0xHcG5DMHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0sw DQYJKoZIhvcNAQELBQADggEBAAXLXGrE2yJ7WOorVuzl5EYq54VMpLIIKCki5WHv JlpAawnlqagCAj6f8TQXGi+bHNtNXlBY0v8xjzexZ9R3AhfqeKybRENQdoXhQNmC pP8IYJ0CJZsmO46FmRGemekeCcwRZY9eY6uh3UlEwou69J1b4jGt7OSDbbcks42w oqpyOqpGacocUZuTf7yg5CfRL3FiLjWtSriltnHavnndaECpQh1UYiKCY76wlE4s n+hIocihCD22OVWs3rF3EMIK9MyeeN6GKi9rm3SdCa669wH0aKaJDkPT9geouI9I SyUSKQipqs2Y+oPa8q27hL131ythkNuHJOckMtb0ERBje1Q= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net