$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZWnFiyqIPx4oJmOqAAoeZJOjgG0.roa File: ZWnFiyqIPx4oJmOqAAoeZJOjgG0.roa (raw, json) Hash identifier: ZIDpJGuhf07xUppvvkQGmUb9K57TusOuN+/JNEziXmU= Subject key identifier: 65:69:C5:8B:2A:88:3F:1E:28:26:63:AA:00:0A:1E:64:93:A3:80:6D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1734 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZWnFiyqIPx4oJmOqAAoeZJOjgG0.roa Signing time: Wed 12 Feb 2025 01:36:29 +0000 ROA not before: Wed 12 Feb 2025 01:36:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 15133 IP address blocks: 61.221.181.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5940 (0x1734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6569C58B2A883F1E282663AA000A1E6493A3806D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5d:31:02:09:d7:a6:49:77:51:13:7f:c0:11: 6c:13:31:e5:aa:db:a8:c7:81:da:d5:b5:1f:cf:0d: 12:ec:40:4e:04:d1:76:4e:c9:bd:c4:6d:a3:06:f9: 09:23:a0:7a:99:d5:a5:c9:36:58:ec:68:8d:4f:67: 05:ee:d9:79:52:ba:c6:d0:83:c3:76:dd:56:ac:db: 05:5c:70:be:e0:42:69:b0:e1:5b:80:01:3c:0e:ad: 52:07:ae:45:07:1f:db:2c:91:db:d2:b1:9f:1d:7f: 77:c5:1a:46:35:91:7c:eb:e6:dd:9a:34:25:36:1c: 3f:0d:68:ca:2f:7b:b2:e1:c3:c0:47:d8:42:3d:1a: 82:bc:98:39:9b:a6:a8:ed:53:72:7c:5c:8c:6c:13: cd:27:ef:66:67:37:53:a8:2c:df:d5:de:a3:3c:80: fe:57:77:8d:db:b0:83:be:f3:81:6d:5f:04:5b:a2: c7:28:65:13:19:2e:09:f4:9b:04:56:91:c7:cd:f9: 45:6d:da:3e:95:85:17:ce:e3:45:25:9b:d8:f3:cf: 4c:10:a3:61:d2:52:2e:ea:9e:fe:46:db:0e:54:f9: d2:ed:64:fd:29:72:d9:83:b6:4a:be:3c:f3:08:22: 76:86:dd:1c:60:09:9b:63:01:9a:e6:a6:8b:10:6e: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:69:C5:8B:2A:88:3F:1E:28:26:63:AA:00:0A:1E:64:93:A3:80:6D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZWnFiyqIPx4oJmOqAAoeZJOjgG0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.221.181.64/26 Signature Algorithm: sha256WithRSAEncryption b3:86:4e:dd:ce:cb:4d:0b:31:32:bd:ef:96:a8:47:2e:7c:6a: 21:ca:aa:db:9d:19:8f:46:b2:5f:cb:31:26:0a:ce:0b:9d:e1: 1d:78:a2:5e:f2:ce:fa:69:59:f5:aa:a5:1f:90:dc:79:5a:ce: d3:d9:89:11:a8:75:78:48:0b:17:f4:ad:c0:23:95:2c:ba:f4: 5b:df:91:76:69:6b:7c:46:15:aa:89:d1:a0:ba:99:7e:4a:86: 0e:9f:cd:49:08:fd:8b:ca:bc:5c:b8:d1:94:5b:c0:61:d1:52: 92:07:fe:7f:05:58:e3:30:e1:f0:68:49:8c:8c:05:5c:59:b2: ef:67:13:50:00:1f:fe:9d:19:05:ce:d0:d2:12:8d:46:b4:1b: 45:e2:7a:a0:b5:c1:9f:64:f9:f1:b7:8e:97:b4:c0:e1:bf:97: 3f:44:1d:51:57:9b:be:ec:44:cb:a9:d1:b4:d5:61:7d:f4:9c: 10:8f:c8:d3:ec:02:79:08:c5:59:14:27:fc:8c:ad:9a:90:c9: a7:9d:93:4a:c7:da:da:57:1c:3b:7d:cb:37:79:dc:38:2d:35: ff:d2:ce:9f:0d:80:05:2c:ed:c2:c0:5a:77:af:e5:20:31:13: 16:c8:7f:03:86:8b:40:23:80:45:89:eb:0c:56:1e:42:6d:00: c3:6c:f3:a2 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY1NjlDNThCMkE4ODNG MUUyODI2NjNBQTAwMEExRTY0OTNBMzgwNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3XTECCdemSXdRE3/AEWwTMeWq26jHgdrVtR/PDRLsQE4E0XZO yb3EbaMG+QkjoHqZ1aXJNljsaI1PZwXu2XlSusbQg8N23Vas2wVccL7gQmmw4VuA ATwOrVIHrkUHH9sskdvSsZ8df3fFGkY1kXzr5t2aNCU2HD8NaMove7Lhw8BH2EI9 GoK8mDmbpqjtU3J8XIxsE80n72ZnN1OoLN/V3qM8gP5Xd43bsIO+84FtXwRbosco ZRMZLgn0mwRWkcfN+UVt2j6VhRfO40Ulm9jzz0wQo2HSUi7qnv5G2w5U+dLtZP0p ctmDtkq+PPMIInaG3RxgCZtjAZrmposQbtnDAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUZWnFiyqIPx4oJmOqAAoeZJOjgG0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9aV25GaXlxSVB4NG9KbU9xQUFv ZVpKT2pnRzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPd21 QDANBgkqhkiG9w0BAQsFAAOCAQEAs4ZO3c7LTQsxMr3vlqhHLnxqIcqq250Zj0ay X8sxJgrOC53hHXiiXvLO+mlZ9aqlH5DceVrO09mJEah1eEgLF/StwCOVLLr0W9+R dmlrfEYVqonRoLqZfkqGDp/NSQj9i8q8XLjRlFvAYdFSkgf+fwVY4zDh8GhJjIwF XFmy72cTUAAf/p0ZBc7Q0hKNRrQbReJ6oLXBn2T58beOl7TA4b+XP0QdUVebvuxE y6nRtNVhffScEI/I0+wCeQjFWRQn/IytmpDJp52TSsfa2lccO33LN3ncOC01/9LO nw2ABSztwsBad6/lIDETFsh/A4aLQCOARYnrDFYeQm0Aw2zzog== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net