$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bxjG5kOYPgftyu40hAGt-sj9Ewk.roa File: bxjG5kOYPgftyu40hAGt-sj9Ewk.roa (raw, json) Hash identifier: I7htHOZG6F29EZ1PBpsFl5LTKeBsElaEsHT9FiK9K3s= Subject key identifier: 6F:18:C6:E6:43:98:3E:07:ED:CA:EE:34:84:01:AD:FA:C8:FD:13:09 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17C6 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bxjG5kOYPgftyu40hAGt-sj9Ewk.roa Signing time: Wed 12 Feb 2025 01:37:03 +0000 ROA not before: Wed 12 Feb 2025 01:37:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 211.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6086 (0x17c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:37:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6F18C6E643983E07EDCAEE348401ADFAC8FD1309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:9e:aa:6a:7f:05:57:d3:9a:74:ad:1f:1d: bb:bb:75:e5:3f:22:ee:66:e3:5b:8c:53:7d:d9:b7: e3:0f:31:02:3f:e3:a3:30:cd:09:3d:da:04:95:89: a4:8b:74:6c:7d:40:f6:2c:b7:0e:45:7d:77:e7:39: 2d:e5:72:f0:fe:71:fb:eb:c4:ed:4c:90:16:03:63: 29:35:45:24:f1:e2:64:e2:bf:a5:6b:56:ae:d3:bb: f0:72:e0:3b:b7:30:36:4b:1a:c9:09:ca:40:4a:e3: fd:8a:fe:41:c7:e7:cd:99:90:0f:a3:5b:93:ad:2b: a0:ac:f9:8d:dc:6b:a6:f3:d7:cb:00:04:48:ae:48: 56:64:79:cf:6e:27:a4:a6:ff:85:04:bf:3b:9b:8c: 66:07:fb:ed:37:e6:b2:73:38:f8:3b:23:b5:51:13: f9:d6:01:c1:46:f9:9e:87:68:59:cd:83:45:22:a3: 9e:8b:d9:c9:b8:54:e6:8c:6c:37:bc:da:28:70:97: aa:a2:99:a4:3d:07:a9:f8:c9:95:9a:dc:4c:5d:75: 0b:29:19:0c:24:8d:57:57:79:cd:99:3a:c7:31:f7: 07:69:00:03:f8:51:37:ea:57:08:64:e1:93:b6:28: 44:81:2c:61:82:44:34:a1:35:f9:d0:ea:be:af:09: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:18:C6:E6:43:98:3E:07:ED:CA:EE:34:84:01:AD:FA:C8:FD:13:09 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bxjG5kOYPgftyu40hAGt-sj9Ewk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.75.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:a2:1c:6a:7f:ff:17:50:2f:a8:24:39:3c:25:59:ca:70:cf: fe:36:8f:20:8a:15:00:85:14:7a:ce:c4:ec:c2:b0:77:c3:8e: 0d:97:9f:49:b1:f6:c9:f5:e4:4e:c4:17:82:a3:02:a2:da:c8: 58:42:e4:9b:e6:8a:fe:02:1b:a2:4f:b5:12:7a:22:a3:54:35: e3:a8:2b:e5:3e:53:53:ed:6a:36:b8:d9:2d:81:c4:c2:be:27: 5c:08:0b:f6:fa:f0:97:23:ae:33:f7:1d:46:10:fc:b9:cf:d2: 30:82:cb:e6:be:01:04:18:29:87:76:3f:c3:02:5d:a7:95:7a: 22:0b:09:07:82:e5:3f:be:f2:bc:55:9b:49:94:20:cd:1d:67: ca:98:fd:e1:1e:eb:bf:f8:7e:26:71:9a:59:64:f1:8c:ff:31: 78:03:15:0e:78:22:30:de:ec:3f:ba:9b:3f:b2:20:c8:0f:e0: 20:a7:d0:b1:53:68:21:97:00:2a:0d:01:d7:8b:3d:2c:15:6e: c5:1e:45:a6:0f:24:ed:3d:0b:6e:f1:f4:10:c0:c0:2f:e1:a3: 23:6d:20:06:92:ed:c0:cf:83:a7:93:38:50:16:21:6e:57:20: 83:65:ce:99:17:52:20:1c:3c:ab:aa:46:4e:45:fb:12:56:bf: 3d:34:c5:87 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF8YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM3MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGMThDNkU2NDM5ODNF MDdFRENBRUUzNDg0MDFBREZBQzhGRDEzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3zZ6qan8FV9OadK0fHbu7deU/Iu5m41uMU33Zt+MPMQI/46Mw zQk92gSViaSLdGx9QPYstw5FfXfnOS3lcvD+cfvrxO1MkBYDYyk1RSTx4mTiv6Vr Vq7Tu/By4Du3MDZLGskJykBK4/2K/kHH582ZkA+jW5OtK6Cs+Y3ca6bz18sABEiu SFZkec9uJ6Sm/4UEvzubjGYH++035rJzOPg7I7VRE/nWAcFG+Z6HaFnNg0Uio56L 2cm4VOaMbDe82ihwl6qimaQ9B6n4yZWa3ExddQspGQwkjVdXec2ZOscx9wdpAAP4 UTfqVwhk4ZO2KESBLGGCRDShNfnQ6r6vCfJFAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUbxjG5kOYPgftyu40hAGt+sj9EwkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ieGpHNWtPWVBnZnR5dTQwaEFH dC1zajlFd2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA00sw DQYJKoZIhvcNAQELBQADggEBAKOiHGp//xdQL6gkOTwlWcpwz/42jyCKFQCFFHrO xOzCsHfDjg2Xn0mx9sn15E7EF4KjAqLayFhC5Jvmiv4CG6JPtRJ6IqNUNeOoK+U+ U1Ptaja42S2BxMK+J1wIC/b68JcjrjP3HUYQ/LnP0jCCy+a+AQQYKYd2P8MCXaeV eiILCQeC5T++8rxVm0mUIM0dZ8qY/eEe67/4fiZxmllk8Yz/MXgDFQ54IjDe7D+6 mz+yIMgP4CCn0LFTaCGXACoNAdeLPSwVbsUeRaYPJO09C27x9BDAwC/hoyNtIAaS 7cDPg6eTOFAWIW5XIINlzpkXUiAcPKuqRk5F+xJWvz00xYc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net