$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa File: fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa (raw, json) Hash identifier: VDNInNafPLr3HNrqkIzn28CtS7rbt7AD0Ndcf+3G6DA= Subject key identifier: 7E:9B:A3:DF:E8:73:34:E1:F7:8C:D4:AE:68:37:BF:E8:14:CB:DD:47 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1761 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa Signing time: Wed 12 Feb 2025 01:36:38 +0000 ROA not before: Wed 12 Feb 2025 01:36:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 2001:b400:e9f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5985 (0x1761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7E9BA3DFE87334E1F78CD4AE6837BFE814CBDD47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:69:2f:70:b8:78:fe:0f:0e:a3:b0:e2:c1: 8b:4b:0e:c4:5e:1b:65:53:99:04:88:6d:e8:8e:e4: 00:82:ed:ab:d8:50:5f:50:a1:e9:e3:64:e1:87:e0: d8:6b:27:6a:ff:02:b3:f3:44:fe:94:b5:f2:e9:6a: 58:63:fa:94:07:9e:84:91:a9:f6:09:74:7b:55:27: 36:13:04:be:88:a1:34:c4:85:90:5d:ef:f8:b5:63: 41:84:7f:7f:b8:ee:b8:64:fc:8d:8c:c1:ee:f8:e4: b4:f1:7c:bc:18:70:9f:1a:08:05:48:7d:dd:96:d0: 13:a6:d1:5e:ad:f8:e0:69:58:1d:d8:0a:85:55:89: a1:2c:a2:54:a6:1c:2a:af:db:87:07:a1:8b:7c:14: 60:e4:b6:c2:76:75:43:52:29:ce:fd:e8:76:78:c4: 25:ea:98:5d:d3:2d:99:d7:c7:dc:e3:6a:d9:55:06: 59:cd:3e:a3:2d:8c:26:02:8a:f5:49:e2:8a:e4:6c: cc:71:a4:36:2b:4d:93:86:35:87:ed:07:d6:19:59: 0d:77:9a:16:12:d6:9f:92:64:a6:58:d0:39:16:9e: f0:19:7a:1c:d1:f4:33:bb:9c:58:d0:96:ac:36:a4: 0a:b4:c5:a0:38:a9:74:bf:5e:8a:a1:75:6e:6e:41: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9B:A3:DF:E8:73:34:E1:F7:8C:D4:AE:68:37:BF:E8:14:CB:DD:47 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b400:e9f0::/44 Signature Algorithm: sha256WithRSAEncryption 9b:6b:36:8a:39:0e:f5:0e:0e:24:74:df:d4:ee:bb:af:5a:47: d7:b4:6f:af:52:52:d6:63:7b:28:e8:f8:bc:31:63:30:56:e3: c1:3f:36:6d:58:fa:7e:af:3d:69:ad:ba:24:7a:aa:6d:d7:a3: f1:a2:3c:ef:f2:d8:dd:29:fb:c5:c7:ba:d1:ca:2e:2c:93:ca: 81:d1:81:8c:26:63:c3:fd:33:3b:35:62:78:44:39:31:ac:14: 00:f5:f3:49:9a:5d:bf:29:7d:39:9d:0c:32:d1:a8:fb:e3:0e: 5d:fe:c4:2c:bf:95:70:e3:b2:4c:ac:ec:b1:82:6b:da:19:82: de:cf:48:e4:f6:f2:60:50:6d:ae:ae:19:36:3b:50:8c:30:43: ea:e4:f6:eb:ad:bc:ab:98:d9:b1:0e:74:f3:be:94:3a:7b:5a: b0:5a:dd:55:e9:f4:02:95:11:d4:5d:09:38:43:2b:5a:1f:81: 96:60:77:e8:a4:35:a3:72:b3:f4:98:a4:51:a0:25:aa:2c:d5: 2b:06:4b:9f:06:72:9d:ea:a3:e1:cf:ab:fa:f3:64:4c:51:f3: a8:b1:8d:37:04:c5:1c:f7:7c:f3:e6:c4:3e:26:c5:96:b8:50: ef:51:87:75:96:b7:61:9a:e7:87:34:85:ef:74:c9:17:fc:43: d2:55:24:69 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICF2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFOUJBM0RGRTg3MzM0 RTFGNzhDRDRBRTY4MzdCRkU4MTRDQkRENDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIdGkvcLh4/g8Oo7DiwYtLDsReG2VTmQSIbeiO5ACC7avYUF9Q oenjZOGH4NhrJ2r/ArPzRP6UtfLpalhj+pQHnoSRqfYJdHtVJzYTBL6IoTTEhZBd 7/i1Y0GEf3+47rhk/I2Mwe745LTxfLwYcJ8aCAVIfd2W0BOm0V6t+OBpWB3YCoVV iaEsolSmHCqv24cHoYt8FGDktsJ2dUNSKc796HZ4xCXqmF3TLZnXx9zjatlVBlnN PqMtjCYCivVJ4orkbMxxpDYrTZOGNYftB9YZWQ13mhYS1p+SZKZY0DkWnvAZehzR 9DO7nFjQlqw2pAq0xaA4qXS/XoqhdW5uQUaHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUfpuj3+hzNOH3jNSuaDe/6BTL3UcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9mcHVqMy1oek5PSDNqTlN1YURl XzZCVEwzVWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAG0 AOnwMA0GCSqGSIb3DQEBCwUAA4IBAQCbazaKOQ71Dg4kdN/U7ruvWkfXtG+vUlLW Y3so6Pi8MWMwVuPBPzZtWPp+rz1prbokeqpt16Pxojzv8tjdKfvFx7rRyi4sk8qB 0YGMJmPD/TM7NWJ4RDkxrBQA9fNJml2/KX05nQwy0aj74w5d/sQsv5Vw47JMrOyx gmvaGYLez0jk9vJgUG2urhk2O1CMMEPq5PbrrbyrmNmxDnTzvpQ6e1qwWt1V6fQC lRHUXQk4QytaH4GWYHfopDWjcrP0mKRRoCWqLNUrBkufBnKd6qPhz6v682RMUfOo sY03BMUc93zz5sQ+JsWWuFDvUYd1lrdhmueHNIXvdMkX/EPSVSRp -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net