$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RInQA0-2Bq7LAT3bsgl5a6TzEJo.roa File: RInQA0-2Bq7LAT3bsgl5a6TzEJo.roa (raw, json) Hash identifier: WPMfjRlM7lKo6mX5BiXm9u+c47pyZECUVYoyxEs2YFU= Subject key identifier: 44:89:D0:03:4F:B6:06:AE:CB:01:3D:DB:B2:09:79:6B:A4:F3:10:9A Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1767 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RInQA0-2Bq7LAT3bsgl5a6TzEJo.roa Signing time: Wed 12 Feb 2025 01:36:39 +0000 ROA not before: Wed 12 Feb 2025 01:36:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131660 IP address blocks: 2001:b000:590::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5991 (0x1767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4489D0034FB606AECB013DDBB209796BA4F3109A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2c:4e:03:80:e7:af:a7:b4:77:23:b8:93:78: 83:1e:cb:47:d4:95:9c:4b:06:e3:3a:00:80:e6:13: c0:4a:ab:03:5f:c6:09:68:71:58:40:5d:0a:6f:03: f0:fe:76:92:e6:c9:ae:07:ba:c6:c4:06:a7:7c:3a: 25:46:9b:a8:a2:f6:74:7d:af:06:f9:20:ae:16:99: e6:43:a8:e1:e0:00:7a:5e:89:09:21:e5:74:67:07: 94:48:62:9c:1c:a9:d8:ab:61:34:2a:91:08:98:b3: 43:93:46:ba:44:dc:cf:dd:73:a9:e3:80:d0:1e:6d: 71:7c:0a:c0:42:ec:53:f3:c3:be:28:6c:13:67:82: 4c:10:d6:17:9c:2b:1c:66:02:b0:3d:9a:a8:6c:03: 6a:5d:7a:14:b0:5e:7b:f7:f1:73:8b:f9:0e:62:16: 5f:0c:ac:13:6f:48:ce:3d:5f:5b:ad:66:df:e8:fb: 3a:da:0f:d6:03:e0:8f:f8:a3:f3:ae:4f:05:a1:71: b9:86:d2:ee:87:f0:68:ee:6f:cb:a7:6c:7d:1f:91: 09:53:08:6e:c3:33:47:9c:77:87:aa:8a:c1:b0:5f: 10:0d:a4:83:0f:ba:98:cc:df:2c:4b:d3:9d:6c:ea: 10:5f:01:76:d0:5a:49:83:fd:a9:a2:d0:ba:62:3b: df:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:89:D0:03:4F:B6:06:AE:CB:01:3D:DB:B2:09:79:6B:A4:F3:10:9A X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RInQA0-2Bq7LAT3bsgl5a6TzEJo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000:590::/48 Signature Algorithm: sha256WithRSAEncryption 38:3f:cf:8c:c5:11:ed:52:92:9c:0f:06:e2:3c:d8:32:7d:2f: 3f:ab:15:bb:da:af:a6:b1:07:83:a5:8c:dc:f0:5e:ca:5a:4a: 55:73:5a:df:3f:58:eb:39:21:0e:51:92:fe:94:af:87:a2:70: 11:18:38:3d:f8:16:f7:73:d5:cf:f4:78:4d:cf:97:fe:04:ab: 81:6e:0f:6d:87:8a:ce:72:ca:03:2b:13:5b:5f:0d:1c:1b:0b: f3:c0:01:06:aa:78:68:cc:89:90:b0:6e:af:7c:1e:9c:ed:25: 4e:73:7f:d0:65:aa:8a:1f:02:ce:46:a6:fc:3e:ec:94:3b:e3: f6:9a:9d:50:7a:88:2b:13:25:85:9e:a3:8b:67:2a:4e:b0:6c: a1:16:a5:0a:5f:c9:45:9c:de:df:4f:61:59:e6:3b:cd:dd:77: f6:ee:8c:76:cf:bc:05:15:69:22:33:f9:ea:97:93:0d:c8:dd: 5c:bb:62:7a:da:2e:95:5d:55:07:22:8b:9a:27:59:b7:74:2f: f3:91:2c:2f:12:35:4b:7f:18:c5:d4:02:05:6c:44:63:2f:87: 65:aa:53:ea:af:43:d4:5d:03:7b:e4:80:f3:ee:ec:9a:1d:3e: 14:05:17:3b:b2:c0:23:c2:be:fd:c5:95:72:f6:1b:92:e1:10: fc:5f:76:93 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICF2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ0ODlEMDAzNEZCNjA2 QUVDQjAxM0REQkIyMDk3OTZCQTRGMzEwOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjLE4DgOevp7R3I7iTeIMey0fUlZxLBuM6AIDmE8BKqwNfxglo cVhAXQpvA/D+dpLmya4HusbEBqd8OiVGm6ii9nR9rwb5IK4WmeZDqOHgAHpeiQkh 5XRnB5RIYpwcqdirYTQqkQiYs0OTRrpE3M/dc6njgNAebXF8CsBC7FPzw74obBNn gkwQ1hecKxxmArA9mqhsA2pdehSwXnv38XOL+Q5iFl8MrBNvSM49X1utZt/o+zra D9YD4I/4o/OuTwWhcbmG0u6H8Gjub8unbH0fkQlTCG7DM0ecd4eqisGwXxANpIMP upjM3yxL051s6hBfAXbQWkmD/ami0LpiO99rAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQURInQA0+2Bq7LAT3bsgl5a6TzEJowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9SSW5RQTAtMkJxN0xBVDNic2ds NWE2VHpFSm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw AAWQMA0GCSqGSIb3DQEBCwUAA4IBAQA4P8+MxRHtUpKcDwbiPNgyfS8/qxW72q+m sQeDpYzc8F7KWkpVc1rfP1jrOSEOUZL+lK+HonARGDg9+Bb3c9XP9HhNz5f+BKuB bg9th4rOcsoDKxNbXw0cGwvzwAEGqnhozImQsG6vfB6c7SVOc3/QZaqKHwLORqb8 PuyUO+P2mp1QeogrEyWFnqOLZypOsGyhFqUKX8lFnN7fT2FZ5jvN3Xf27ox2z7wF FWkiM/nql5MNyN1cu2J62i6VXVUHIouaJ1m3dC/zkSwvEjVLfxjF1AIFbERjL4dl qlPqr0PUXQN75IDz7uyaHT4UBRc7ssAjwr79xZVy9huS4RD8X3aT -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net