$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LSJMjS071AKGJTf7KQ65fuA7IuM.roa File: LSJMjS071AKGJTf7KQ65fuA7IuM.roa (raw, json) Hash identifier: AP221pT8lDYY1DTCIzlz4D6XOQDuCg9KmcbVIpQZLpA= Subject key identifier: 2D:22:4C:8D:2D:3B:D4:02:86:25:37:FB:29:0E:B9:7E:E0:3B:22:E3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 173A Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LSJMjS071AKGJTf7KQ65fuA7IuM.roa Signing time: Wed 12 Feb 2025 01:36:31 +0000 ROA not before: Wed 12 Feb 2025 01:36:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 61.218.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5946 (0x173a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2D224C8D2D3BD402862537FB290EB97EE03B22E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:4b:4e:d9:03:21:ab:44:55:78:b9:72:75: 66:b1:1e:dc:c9:0f:96:29:4c:a8:b6:cd:57:20:71: 16:fd:74:82:f1:d7:c8:d1:47:6f:83:0d:9a:8c:49: 5b:40:b8:71:9f:dc:87:5c:80:51:7b:be:bf:51:86: 7f:e6:60:44:47:38:28:4d:d6:9d:4d:41:28:8b:15: c8:44:fc:e7:a7:88:47:be:87:01:fd:e3:9e:9b:4e: 46:70:20:da:07:08:b5:38:2b:b7:96:fc:9f:7b:36: 20:de:76:81:ee:06:05:de:f5:f1:50:db:74:4d:2b: 4b:90:25:f3:fd:ea:30:61:53:bc:5b:9f:12:99:e0: 87:4c:44:b9:83:1f:40:bc:c2:50:ff:d5:e4:3f:68: 9e:11:0d:c5:2d:12:ae:a0:c0:56:80:02:b7:b3:2a: 9d:e7:fa:49:2d:2d:a8:15:51:52:69:08:d4:71:9a: c3:94:a5:03:70:f7:d1:38:04:73:b2:15:3e:3d:6b: 13:9b:a1:51:74:c3:f5:58:e8:4d:5e:9e:e7:80:4a: 7f:81:82:11:e2:f0:15:75:e1:32:35:ee:20:77:f9: 5f:93:bd:f2:09:6c:57:cf:f6:84:2d:23:57:60:fd: da:57:c2:8c:ba:04:b6:5f:c2:1e:d8:3a:2d:37:2b: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:22:4C:8D:2D:3B:D4:02:86:25:37:FB:29:0E:B9:7E:E0:3B:22:E3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LSJMjS071AKGJTf7KQ65fuA7IuM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.218.0.0/15 Signature Algorithm: sha256WithRSAEncryption 77:ff:e2:cf:d4:97:c1:be:12:20:11:c0:a3:06:f1:f6:31:22: 0d:46:8b:b1:b6:01:82:be:c6:db:64:36:83:a0:26:e7:1d:fa: 7d:c2:c1:52:49:41:ff:95:9e:31:5d:ed:76:d9:31:78:d1:13: f6:2f:55:65:be:63:02:f8:4e:58:6f:5d:13:2c:81:84:f1:36: 7f:25:12:32:ed:0e:06:1e:58:33:67:0a:24:33:7f:f2:c9:9e: f7:83:ad:20:4f:83:ba:ad:6a:d4:3b:f1:c1:6a:ec:a5:b1:7d: 0f:37:48:11:45:7e:80:88:bc:ef:6f:68:9c:0f:e0:23:b5:2c: c0:3b:df:13:29:a9:d1:11:0f:88:e9:e7:42:6b:ea:83:7e:9b: b2:af:61:a6:32:1d:a6:ae:69:d7:d8:b3:13:30:03:88:ed:96: 58:f5:99:bc:ae:4e:c8:4d:31:17:fd:85:20:42:b0:0a:d2:e5: b4:20:2d:0d:83:d9:dc:79:63:ab:22:cc:5c:8d:f1:16:3c:6e: 68:11:71:fe:b0:7d:86:4c:23:be:6e:68:6e:a1:2e:c4:ae:d7: e0:72:6f:54:71:e9:b4:80:9f:16:76:f5:1b:f5:3f:7b:d5:69: 50:bd:6d:8e:8f:7a:9c:06:4a:d0:bf:2a:20:b9:0a:38:35:d9: 63:3a:2e:34 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICFzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJEMjI0QzhEMkQzQkQ0 MDI4NjI1MzdGQjI5MEVCOTdFRTAzQjIyRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuNUtO2QMhq0RVeLlydWaxHtzJD5YpTKi2zVcgcRb9dILx18jR R2+DDZqMSVtAuHGf3IdcgFF7vr9Rhn/mYERHOChN1p1NQSiLFchE/OeniEe+hwH9 456bTkZwINoHCLU4K7eW/J97NiDedoHuBgXe9fFQ23RNK0uQJfP96jBhU7xbnxKZ 4IdMRLmDH0C8wlD/1eQ/aJ4RDcUtEq6gwFaAArezKp3n+kktLagVUVJpCNRxmsOU pQNw99E4BHOyFT49axOboVF0w/VY6E1enueASn+BghHi8BV14TI17iB3+V+TvfIJ bFfP9oQtI1dg/dpXwoy6BLZfwh7YOi03KwhXAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQULSJMjS071AKGJTf7KQ65fuA7IuMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MU0pNalMwNzFBS0dKVGY3S1E2 NWZ1QTdJdU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBPdow DQYJKoZIhvcNAQELBQADggEBAHf/4s/Ul8G+EiARwKMG8fYxIg1Gi7G2AYK+xttk NoOgJucd+n3CwVJJQf+VnjFd7XbZMXjRE/YvVWW+YwL4TlhvXRMsgYTxNn8lEjLt DgYeWDNnCiQzf/LJnveDrSBPg7qtatQ78cFq7KWxfQ83SBFFfoCIvO9vaJwP4CO1 LMA73xMpqdERD4jp50Jr6oN+m7KvYaYyHaauadfYsxMwA4jtllj1mbyuTshNMRf9 hSBCsArS5bQgLQ2D2dx5Y6sizFyN8RY8bmgRcf6wfYZMI75uaG6hLsSu1+Byb1Rx 6bSAnxZ29Rv1P3vVaVC9bY6PepwGStC/KiC5Cjg12WM6LjQ= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net