$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa File: JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa (raw, json) Hash identifier: Zk1ghf7E9l4Rw4tnSKhC1aG1p2/ZGcLZD7oByyiceMw= Subject key identifier: 27:39:10:8C:90:0F:75:26:8B:2D:2A:89:4C:55:5D:FE:8F:6F:FB:AB Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Certificate serial: 0DDD Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa Signing time: Wed 12 Feb 2025 01:36:46 +0000 ROA not before: Wed 12 Feb 2025 01:36:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131660 IP address blocks: 168.95.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3549 (0xddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Validity Not Before: Feb 12 01:36:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2739108C900F75268B2D2A894C555DFE8F6FFBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:3f:e4:95:7e:d3:65:9b:61:0c:a1:bf:44: 41:0a:db:dd:0c:b8:f0:6b:6c:52:11:3c:f3:bc:45: 2d:e9:86:f7:05:87:61:56:68:a8:aa:dd:ab:9f:40: 78:02:04:d7:fc:61:ae:bf:b0:5f:22:98:30:a8:e3: 3d:7d:b7:d2:b9:a7:fe:da:64:11:8c:9e:47:1d:38: 47:16:4b:fa:f6:63:74:60:b5:fc:ec:35:19:1d:f7: 84:0b:e6:bc:fd:ea:ae:a8:ff:2a:73:e9:45:cc:87: 5c:12:2f:a8:03:1f:d9:8c:1d:01:85:4c:22:d7:57: 75:91:b0:01:52:f8:1c:15:36:f8:fd:5b:01:6d:50: cb:c3:3a:05:5b:86:f7:a3:de:3e:5f:12:e5:c1:81: 5c:b7:9f:5a:ef:ae:57:da:f8:c6:9d:31:d0:21:16: 9d:14:9b:a9:65:d7:e2:91:b4:60:e6:08:81:87:71: 56:0d:d7:d7:4d:81:81:f0:d4:3c:18:7f:aa:b5:13: 7f:03:59:a2:5f:8e:20:fa:aa:7f:bd:6c:25:fc:b1: 34:22:3f:63:31:3a:2d:eb:f9:cd:f5:fb:cd:af:c6: 50:be:16:16:06:6d:71:da:c5:39:e2:1b:2d:4a:a4: fc:21:15:2c:2a:2f:d5:91:b6:29:2e:c4:81:79:fc: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:39:10:8C:90:0F:75:26:8B:2D:2A:89:4C:55:5D:FE:8F:6F:FB:AB X509v3 Authority Key Identifier: keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 168.95.246.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:b2:f0:ae:c4:0b:ea:d4:77:43:75:ec:25:d0:2c:31:ae:77: 5d:14:d2:e7:5e:38:ac:17:29:f5:74:f6:35:90:42:35:03:af: 9f:a0:fd:a1:a7:fc:90:0c:32:f3:73:29:18:e2:ff:11:1e:92: 63:95:41:09:1c:76:4e:d1:23:1b:d3:0d:7a:31:f4:d0:f4:a3: 99:be:4b:61:16:c7:a4:06:83:55:5f:f9:75:91:a1:b1:38:67: 89:da:44:8e:e6:92:ec:53:34:e0:72:17:9b:4d:d3:8d:10:a9: b5:c2:ba:67:c8:58:4d:d8:aa:8e:d0:62:e2:22:1e:f3:a8:27: 11:c7:77:d4:e8:ac:9f:8b:69:89:8e:ea:61:9e:66:75:39:d4: 13:87:34:11:53:c4:20:05:96:5f:da:25:a8:9d:84:25:92:11: 26:7f:59:8a:10:bd:56:9f:a2:56:83:90:65:d9:e8:63:6d:ff: dd:9e:8d:98:e8:83:6a:fe:62:f9:53:60:75:fe:dc:94:70:36: 9d:a2:c6:21:d8:a8:9f:36:83:5d:b4:4d:73:68:0f:1f:a7:ea: f6:9a:fb:30:59:c5:70:56:8d:59:f9:ac:54:5e:0d:da:16:bb: 1a:2b:c6:54:11:cf:5f:d2:e0:65:26:b8:31:ba:fb:7a:f7:96: 4b:53:9a:c0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDd0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3 NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yNTAyMTIw MTM2NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3MzkxMDhDOTAwRjc1 MjY4QjJEMkE4OTRDNTU1REZFOEY2RkZCQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUCj/klX7TZZthDKG/REEK290MuPBrbFIRPPO8RS3phvcFh2FW aKiq3aufQHgCBNf8Ya6/sF8imDCo4z19t9K5p/7aZBGMnkcdOEcWS/r2Y3Rgtfzs NRkd94QL5rz96q6o/ypz6UXMh1wSL6gDH9mMHQGFTCLXV3WRsAFS+BwVNvj9WwFt UMvDOgVbhvej3j5fEuXBgVy3n1rvrlfa+MadMdAhFp0Um6ll1+KRtGDmCIGHcVYN 19dNgYHw1DwYf6q1E38DWaJfjiD6qn+9bCX8sTQiP2MxOi3r+c31+82vxlC+FhYG bXHaxTniGy1KpPwhFSwqL9WRtikuxIF5/DbdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJzkQjJAPdSaLLSqJTFVd/o9v+6swHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KemtRakpBUGRTYUxMU3FKVEZW ZF9vOXYtNnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF/2 MA0GCSqGSIb3DQEBCwUAA4IBAQBdsvCuxAvq1HdDdewl0CwxrnddFNLnXjisFyn1 dPY1kEI1A6+foP2hp/yQDDLzcykY4v8RHpJjlUEJHHZO0SMb0w16MfTQ9KOZvkth FsekBoNVX/l1kaGxOGeJ2kSO5pLsUzTgchebTdONEKm1wrpnyFhN2KqO0GLiIh7z qCcRx3fU6Kyfi2mJjuphnmZ1OdQThzQRU8QgBZZf2iWonYQlkhEmf1mKEL1Wn6JW g5Bl2ehjbf/dno2Y6INq/mL5U2B1/tyUcDadosYh2KifNoNdtE1zaA8fp+r2mvsw WcVwVo1Z+axUXg3aFrsaK8ZUEc9f0uBlJrgxuvt695ZLU5rA -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net