$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_M3rUx3KBtxf-aSGwp0sJcYAeHE.roa File: _M3rUx3KBtxf-aSGwp0sJcYAeHE.roa (raw, json) Hash identifier: dr6nrioYNqLe2xrycuokEJPjG9dGDTRSbZNK6B/phyw= Subject key identifier: FC:CD:EB:53:1D:CA:06:DC:5F:F9:A4:86:C2:9D:2C:25:C6:00:78:71 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1736 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_M3rUx3KBtxf-aSGwp0sJcYAeHE.roa Signing time: Wed 12 Feb 2025 01:36:30 +0000 ROA not before: Wed 12 Feb 2025 01:36:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9505 IP address blocks: 203.160.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5942 (0x1736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FCCDEB531DCA06DC5FF9A486C29D2C25C6007871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:69:11:d5:a1:e1:41:e9:41:78:30:a5:c1: 6a:32:d2:de:80:0a:3f:a3:bd:27:dc:8c:3d:70:66: d5:23:87:ae:cc:90:f2:0b:00:93:95:ff:97:c6:b4: e7:ab:8d:e8:93:82:8f:8b:2b:15:b3:72:7b:32:2b: 0d:c1:a9:6e:6f:db:e8:7b:3d:45:6f:39:d2:d7:ac: 2b:80:f3:97:4f:dc:5f:be:07:65:99:2f:48:cd:42: 75:7a:49:2d:77:b0:22:d2:75:b4:ce:79:ed:6f:55: 0b:9b:21:4a:98:19:e6:5f:09:ed:ec:e4:e8:9d:6f: ae:6d:23:dd:63:43:9f:9f:95:ba:12:11:99:5e:fc: 38:75:fb:bd:66:d1:c6:5e:76:70:0f:94:06:73:93: 5d:08:42:21:cb:49:fd:a1:14:bc:f0:d2:f9:68:f8: 03:0d:cb:26:c5:d1:00:e2:60:59:ab:4b:60:f4:b2: 5b:54:db:7e:c2:19:5d:b9:60:49:fc:01:25:e7:26: 46:bb:0c:f8:03:96:73:9e:fc:9d:79:6c:97:2d:b4: 99:cb:e3:85:38:c2:2f:81:4c:3f:64:f8:03:2d:6e: 9e:b1:ae:e9:7c:11:70:04:f5:74:8a:bc:38:51:62: 57:85:2e:81:4c:b9:d6:65:7e:65:8f:7f:95:df:eb: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CD:EB:53:1D:CA:06:DC:5F:F9:A4:86:C2:9D:2C:25:C6:00:78:71 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_M3rUx3KBtxf-aSGwp0sJcYAeHE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.160.224.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:01:89:35:eb:83:6a:1e:d7:e7:9a:0d:72:3e:e1:96:68:0b: 8c:30:60:45:29:ef:d4:6b:48:69:52:4a:3f:9f:b9:1f:1c:cc: 77:28:b8:0b:e0:07:f1:ca:0c:ff:36:52:de:03:2b:6c:0e:79: e4:8a:bc:0b:44:c5:fe:37:28:93:95:e2:9a:c5:45:18:f7:20: 11:b7:2c:51:30:4e:63:b7:7e:59:c8:f6:ae:e1:5c:cb:b2:43: b8:c3:21:e0:79:df:43:fc:72:d6:68:af:6e:66:d7:d4:42:1d: bd:c4:1a:6a:9e:ad:c0:73:00:2a:0d:52:ac:f2:fd:e2:15:97: 9b:aa:98:27:4a:73:f0:95:2e:ee:d3:55:5e:b4:d2:7a:1e:5c: cd:49:8a:06:95:38:ad:b8:7b:ee:0d:fb:87:2d:db:cc:25:4b: c2:6a:fc:f2:07:29:36:1c:35:b3:0c:97:b3:6b:5d:72:df:e5: 6f:99:5b:29:21:24:ab:ed:91:86:f3:d6:26:8b:cb:90:4f:27: 0e:80:0a:3e:e6:b5:f3:84:3a:e5:34:06:e4:5b:1c:5e:3e:38: b7:78:db:ec:fc:e2:c0:61:b2:d7:79:66:8f:90:9a:34:a8:a3: 2f:51:5b:98:b6:5b:c7:91:49:75:a0:45:58:0a:6f:1b:ce:0c: ae:fa:1d:03 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDQ0RFQjUzMURDQTA2 REM1RkY5QTQ4NkMyOUQyQzI1QzYwMDc4NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmBmkR1aHhQelBeDClwWoy0t6ACj+jvSfcjD1wZtUjh67MkPIL AJOV/5fGtOerjeiTgo+LKxWzcnsyKw3BqW5v2+h7PUVvOdLXrCuA85dP3F++B2WZ L0jNQnV6SS13sCLSdbTOee1vVQubIUqYGeZfCe3s5Oidb65tI91jQ5+flboSEZle /Dh1+71m0cZednAPlAZzk10IQiHLSf2hFLzw0vlo+AMNyybF0QDiYFmrS2D0sltU 237CGV25YEn8ASXnJka7DPgDlnOe/J15bJcttJnL44U4wi+BTD9k+AMtbp6xrul8 EXAE9XSKvDhRYleFLoFMudZlfmWPf5Xf60zlAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/M3rUx3KBtxf+aSGwp0sJcYAeHEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9fTTNyVXgzS0J0eGYtYVNHd3Aw c0pjWUFlSEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy6Dg MA0GCSqGSIb3DQEBCwUAA4IBAQCeAYk164NqHtfnmg1yPuGWaAuMMGBFKe/Ua0hp Uko/n7kfHMx3KLgL4Afxygz/NlLeAytsDnnkirwLRMX+NyiTleKaxUUY9yARtyxR ME5jt35ZyPau4VzLskO4wyHged9D/HLWaK9uZtfUQh29xBpqnq3AcwAqDVKs8v3i FZebqpgnSnPwlS7u01VetNJ6HlzNSYoGlTituHvuDfuHLdvMJUvCavzyByk2HDWz DJeza11y3+VvmVspISSr7ZGG89Ymi8uQTycOgAo+5rXzhDrlNAbkWxxePji3eNvs /OLAYbLXeWaPkJo0qKMvUVuYtlvHkUl1oEVYCm8bzgyu+h0D -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net