$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa File: MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa (raw, json) Hash identifier: H+sr8bFzLNlonAB6wdZKvrjHiQZNgKcbO3dcWbbzWdI= Subject key identifier: 30:E6:85:AB:68:88:93:CF:86:B1:B4:CD:48:DD:0B:62:10:C5:47:30 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 175B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa Signing time: Wed 12 Feb 2025 01:36:37 +0000 ROA not before: Wed 12 Feb 2025 01:36:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131660 IP address blocks: 114.25.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5979 (0x175b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=30E685AB688893CF86B1B4CD48DD0B6210C54730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:8b:e5:90:bd:d0:e8:97:51:ea:3b:10:f8: 7d:f8:37:04:d0:cb:ae:45:fa:45:0d:8b:44:9e:6e: ea:34:24:5b:ea:56:32:2f:d3:19:88:f9:9d:02:eb: f1:66:91:69:13:36:de:11:74:e2:22:9f:04:a6:95: d1:fc:cd:09:32:52:63:39:16:c9:3f:65:46:3f:12: 69:04:0c:7c:28:47:f4:40:97:a7:89:2e:13:ab:dd: 0a:6a:f2:10:4b:db:1f:cb:9e:c8:07:e8:8e:59:73: 88:4b:66:7c:98:83:69:5f:c8:e4:fd:06:b6:98:12: 4a:85:d4:89:25:97:f9:4a:fe:57:c7:fc:38:eb:59: a9:56:4f:28:f1:28:55:ce:12:fc:ed:8c:f6:ad:8c: bb:a3:eb:cd:9a:c2:a7:95:61:24:d1:5b:12:08:17: af:bf:1d:2d:df:b5:e6:21:59:76:74:28:83:11:7b: 72:0b:34:f4:ef:fd:7b:4d:4a:ec:92:75:08:38:68: bd:9f:98:07:24:6b:d4:03:d2:eb:41:e9:6e:f0:4a: da:d4:78:9b:a5:4f:f0:9e:2b:1b:2f:69:ce:9c:2a: 74:c3:4d:52:f1:9a:b2:60:05:67:37:89:23:37:7c: 67:aa:e1:94:a5:76:16:48:6d:14:90:76:fa:43:40: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E6:85:AB:68:88:93:CF:86:B1:B4:CD:48:DD:0B:62:10:C5:47:30 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.25.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:d3:8a:71:4d:e0:7d:76:79:d8:02:2a:42:c4:62:88:17:09: af:fa:14:fa:ba:5e:fb:06:4e:ea:32:3f:b3:29:02:79:02:49: fa:61:15:f8:65:1c:bc:90:73:35:97:ff:c7:bd:fd:97:48:d8: 23:bb:28:ba:af:a2:ce:e1:8a:e6:28:ca:77:4c:87:5a:c4:43: 6f:ac:e8:39:7b:64:f1:41:1e:b4:9e:ca:3d:b9:b0:4e:d4:bd: 0d:2f:b1:f3:0e:c2:e9:2f:1a:9a:02:e5:ae:f6:3d:f8:90:dc: e5:02:07:b6:c6:66:48:13:e1:0a:61:fc:f9:b4:b4:85:40:be: 0b:5d:9a:f1:3a:46:6e:8f:b6:85:b0:c7:bb:f0:3c:2b:7d:da: b3:b1:a4:43:0d:d8:88:09:19:b2:48:ce:42:de:38:49:9e:38: 64:b7:c4:a3:5c:82:00:86:88:5b:54:ef:61:10:c2:12:94:37: f4:6d:79:e9:a3:bd:fd:c9:0a:10:fe:9b:2e:c7:58:40:c6:4b: 5d:46:90:9c:f0:e5:28:8f:e3:c8:23:ed:52:56:e6:27:eb:fe: c8:72:6b:60:0d:84:99:73:f9:0f:22:a5:0a:2f:4d:7d:a1:77: 2a:be:af:ca:ef:74:50:0b:96:f0:66:35:9a:63:3f:86:e6:17: ad:1f:ff:78 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMwRTY4NUFCNjg4ODkz Q0Y4NkIxQjRDRDQ4REQwQjYyMTBDNTQ3MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvJYvlkL3Q6JdR6jsQ+H34NwTQy65F+kUNi0Sebuo0JFvqVjIv 0xmI+Z0C6/FmkWkTNt4RdOIinwSmldH8zQkyUmM5Fsk/ZUY/EmkEDHwoR/RAl6eJ LhOr3Qpq8hBL2x/LnsgH6I5Zc4hLZnyYg2lfyOT9BraYEkqF1Ikll/lK/lfH/Djr WalWTyjxKFXOEvztjPatjLuj682awqeVYSTRWxIIF6+/HS3fteYhWXZ0KIMRe3IL NPTv/XtNSuySdQg4aL2fmAcka9QD0utB6W7wStrUeJulT/CeKxsvac6cKnTDTVLx mrJgBWc3iSM3fGeq4ZSldhZIbRSQdvpDQF5zAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUMOaFq2iIk8+GsbTNSN0LYhDFRzAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9NT2FGcTJpSWs4LUdzYlROU04w TFloREZSekEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAchn6 MA0GCSqGSIb3DQEBCwUAA4IBAQAs04pxTeB9dnnYAipCxGKIFwmv+hT6ul77Bk7q Mj+zKQJ5Akn6YRX4ZRy8kHM1l//Hvf2XSNgjuyi6r6LO4YrmKMp3TIdaxENvrOg5 e2TxQR60nso9ubBO1L0NL7HzDsLpLxqaAuWu9j34kNzlAge2xmZIE+EKYfz5tLSF QL4LXZrxOkZuj7aFsMe78DwrfdqzsaRDDdiICRmySM5C3jhJnjhkt8SjXIIAhohb VO9hEMISlDf0bXnpo739yQoQ/psux1hAxktdRpCc8OUoj+PII+1SVuYn6/7Icmtg DYSZc/kPIqUKL019oXcqvq/K73RQC5bwZjWaYz+G5hetH/94 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net