$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IJXxIErisNfVkdmmW3INoWWi28w.roa File: IJXxIErisNfVkdmmW3INoWWi28w.roa (raw, json) Hash identifier: YVL6QDu0drrudpi2k43ADOb1VqWPRiM/ZS4ZuaTilsY= Subject key identifier: 20:95:F1:20:4A:E2:B0:D7:D5:91:D9:A6:5B:72:0D:A1:65:A2:DB:CC Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1750 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IJXxIErisNfVkdmmW3INoWWi28w.roa Signing time: Wed 12 Feb 2025 01:36:35 +0000 ROA not before: Wed 12 Feb 2025 01:36:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 203.66.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5968 (0x1750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2095F1204AE2B0D7D591D9A65B720DA165A2DBCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1c:08:28:64:e7:76:10:37:d4:13:e6:0f:8d: 1f:55:91:e8:15:41:7d:48:f3:59:cd:83:ae:26:4b: 4e:22:e0:3a:e3:76:98:49:40:31:f8:b5:6b:59:fc: 82:c9:71:fc:1c:0d:4b:2d:d9:f2:19:27:a3:70:d5: fd:15:94:8c:15:af:47:6b:d6:25:ec:d4:69:06:13: 0a:6c:92:ae:a2:1b:23:55:4c:55:a2:84:e7:c9:a8: f2:62:85:47:6d:b0:b1:90:df:2b:16:60:ab:ef:6d: 5c:84:67:d7:3f:81:0e:61:1c:43:3d:fe:3e:f1:20: c3:f0:ea:d7:c1:0b:77:26:07:bd:5c:9a:84:1b:53: 7b:e0:1f:1d:36:4d:25:2b:a4:dd:1c:ef:6f:01:a7: a4:75:77:69:74:65:b5:ac:ef:7a:cc:30:47:e5:3c: a7:3a:e0:f0:38:8f:dc:3b:fe:66:b9:9f:df:77:6b: 9e:d2:20:2c:f1:0b:f3:02:42:21:24:e9:7f:7d:c8: ad:c4:9e:91:ae:b7:7d:c1:9f:71:19:3e:3b:96:93: aa:d4:58:9f:06:d7:63:5c:a8:d4:bb:74:0c:a8:68: ec:0f:d8:d6:86:61:fb:4d:b1:cd:24:91:8d:7b:5f: 64:77:72:cf:0b:f2:4f:50:03:cb:75:a1:50:98:5d: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:95:F1:20:4A:E2:B0:D7:D5:91:D9:A6:5B:72:0D:A1:65:A2:DB:CC X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IJXxIErisNfVkdmmW3INoWWi28w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.226.0/24 Signature Algorithm: sha256WithRSAEncryption 36:61:3b:29:17:b9:81:b3:89:5f:a5:81:93:62:20:b8:41:ba: 97:2c:17:d1:ea:cd:3a:83:44:02:b3:95:95:30:39:e4:35:cc: 51:54:a9:66:10:be:09:d0:44:25:2b:c3:4f:f5:7a:dc:54:a5: c4:a9:a1:0c:5d:d0:c3:a0:cd:28:6b:79:33:84:40:88:16:67: 36:cf:34:32:b7:10:d0:0f:dc:b3:12:83:9e:9c:70:6c:a3:eb: 25:fe:07:b7:ea:8e:c7:b7:58:a7:74:0e:e8:04:c8:21:3c:55: 4b:fb:f0:c8:59:3a:d4:bb:b5:e5:3f:b4:73:72:09:c5:84:8b: e3:57:14:a4:5c:f4:7c:58:46:66:16:85:77:e0:ce:5d:ac:56: de:19:b2:16:d8:2a:85:01:a1:70:46:f4:18:c7:ef:4e:9b:88: fc:a4:3d:36:6b:05:27:7e:74:ed:15:47:88:69:05:fc:e8:7d: 26:93:f9:77:4b:29:05:ad:a5:70:a8:ad:ca:d7:b0:b5:3e:10: 9b:b2:be:29:f3:ac:52:66:fc:f9:12:7a:d2:a8:ae:ba:b4:f4: 9a:ff:49:8f:1d:ec:5a:fc:72:c8:e0:a3:b8:49:b6:0e:46:5e: 75:1f:ac:1c:fb:b1:9d:dd:86:22:45:9b:5c:6f:41:12:46:84: ac:24:ef:e9 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwOTVGMTIwNEFFMkIw RDdENTkxRDlBNjVCNzIwREExNjVBMkRCQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlHAgoZOd2EDfUE+YPjR9VkegVQX1I81nNg64mS04i4DrjdphJ QDH4tWtZ/ILJcfwcDUst2fIZJ6Nw1f0VlIwVr0dr1iXs1GkGEwpskq6iGyNVTFWi hOfJqPJihUdtsLGQ3ysWYKvvbVyEZ9c/gQ5hHEM9/j7xIMPw6tfBC3cmB71cmoQb U3vgHx02TSUrpN0c728Bp6R1d2l0ZbWs73rMMEflPKc64PA4j9w7/ma5n993a57S ICzxC/MCQiEk6X99yK3EnpGut33Bn3EZPjuWk6rUWJ8G12NcqNS7dAyoaOwP2NaG YftNsc0kkY17X2R3cs8L8k9QA8t1oVCYXU1PAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUIJXxIErisNfVkdmmW3INoWWi28wwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9JSlh4SUVyaXNOZlZrZG1tVzNJ Tm9XV2kyOHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Li MA0GCSqGSIb3DQEBCwUAA4IBAQA2YTspF7mBs4lfpYGTYiC4QbqXLBfR6s06g0QC s5WVMDnkNcxRVKlmEL4J0EQlK8NP9XrcVKXEqaEMXdDDoM0oa3kzhECIFmc2zzQy txDQD9yzEoOenHBso+sl/ge36o7Ht1indA7oBMghPFVL+/DIWTrUu7XlP7RzcgnF hIvjVxSkXPR8WEZmFoV34M5drFbeGbIW2CqFAaFwRvQYx+9Om4j8pD02awUnfnTt FUeIaQX86H0mk/l3SykFraVwqK3K17C1PhCbsr4p86xSZvz5EnrSqK66tPSa/0mP Hexa/HLI4KO4SbYORl51H6wc+7Gd3YYiRZtcb0ESRoSsJO/p -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net