$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jU4b6jxu_NSKCXq38So5K2iF2Nw.roa File: jU4b6jxu_NSKCXq38So5K2iF2Nw.roa (raw, json) Hash identifier: qY9gKM53JuqjvpZ5hjnJcaeVSwIMrIBkMA0M1PkF9+M= Subject key identifier: 8D:4E:1B:EA:3C:6E:FC:D4:8A:09:7A:B7:F1:2A:39:2B:68:85:D8:DC Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17BC Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jU4b6jxu_NSKCXq38So5K2iF2Nw.roa Signing time: Wed 12 Feb 2025 01:37:01 +0000 ROA not before: Wed 12 Feb 2025 01:37:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 61.224.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6076 (0x17bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:37:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8D4E1BEA3C6EFCD48A097AB7F12A392B6885D8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:29:41:18:89:43:37:2b:da:db:61:db:e1: 67:76:ba:d8:66:93:ba:fc:5c:4f:90:c9:09:35:d2: bb:9e:4c:77:83:78:de:5b:43:00:11:a6:c5:23:62: 23:98:48:46:55:08:94:49:37:d0:90:ee:75:93:88: b0:c3:ac:8e:c8:52:dd:ba:21:44:96:2a:93:e2:6c: 9a:07:50:08:cf:9f:fd:29:48:bc:32:e9:91:af:a6: 5a:28:91:de:95:ab:99:d5:9f:e4:4d:a8:42:fa:df: c9:25:bb:7d:eb:17:80:5f:0b:a7:64:19:90:70:47: e5:54:12:1b:05:33:8a:36:aa:af:8d:d5:2d:57:b0: 1a:dc:77:9a:e2:ec:ff:ca:89:cf:a8:ed:ee:57:48: 73:9a:d2:0a:14:cb:80:43:1e:30:36:55:c1:3d:f3: 2d:1a:5a:2a:a7:40:7c:91:93:eb:87:3d:4a:e0:d5: de:a7:38:60:23:9f:0a:27:2a:00:c9:b5:8b:f9:24: ec:e3:ce:75:73:54:e2:3c:19:79:17:59:c1:44:d2: a6:0a:a6:48:5a:c5:03:bb:d7:af:b9:23:b7:76:73: 27:f3:bb:0d:81:f8:8a:8e:12:27:36:6d:99:97:c8: 70:91:60:8f:6f:5a:03:e7:cc:63:8f:44:2d:c0:37: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:1B:EA:3C:6E:FC:D4:8A:09:7A:B7:F1:2A:39:2B:68:85:D8:DC X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jU4b6jxu_NSKCXq38So5K2iF2Nw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.224.0.0/14 Signature Algorithm: sha256WithRSAEncryption 50:67:b9:4a:f0:f3:c5:a9:df:51:2d:2f:4e:b8:db:fd:33:ab: 87:5f:aa:79:a8:09:d2:ff:26:45:fe:35:e1:ed:0e:0c:ba:a9: 28:9e:47:01:7c:b1:ed:44:ff:3d:9a:93:ab:b5:fd:1e:9a:d0: 02:57:c9:16:49:07:08:42:ab:57:da:1f:6d:d9:fb:5d:ad:4d: 86:33:f5:f1:08:97:a7:b4:22:ac:bd:fe:26:97:80:51:60:90: 37:ba:23:6b:e6:52:60:a2:74:c3:9e:d1:8b:4a:5e:53:c9:e9: c3:bc:09:1a:48:e0:42:6b:ce:b3:c0:70:2d:9b:45:97:a9:cb: 0d:14:e4:57:9c:81:74:68:a1:55:c3:bb:09:e6:a5:c1:51:c3: 2b:4a:d4:5e:38:a9:a9:66:57:f1:a6:85:75:22:9a:68:4a:84: 14:6b:1c:54:3b:b5:94:0f:6b:2a:a3:09:78:a7:52:ff:a2:ca: 3d:55:6c:0c:bd:e8:0f:f5:ed:b8:2e:d3:ee:88:85:3f:fa:76: 57:d1:5f:d7:05:98:4a:a3:a2:6e:e5:5e:40:d6:7b:6d:68:45: ee:3c:20:60:43:8f:4a:ca:98:a4:90:c7:50:75:6c:e6:65:3e: 9f:af:17:38:68:26:ea:1e:aa:cd:2f:bc:91:50:7d:f7:85:64: 77:3c:1d:20 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF7wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM3MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhENEUxQkVBM0M2RUZD RDQ4QTA5N0FCN0YxMkEzOTJCNjg4NUQ4REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGOilBGIlDNyva22Hb4Wd2uthmk7r8XE+QyQk10rueTHeDeN5b QwARpsUjYiOYSEZVCJRJN9CQ7nWTiLDDrI7IUt26IUSWKpPibJoHUAjPn/0pSLwy 6ZGvplookd6Vq5nVn+RNqEL638klu33rF4BfC6dkGZBwR+VUEhsFM4o2qq+N1S1X sBrcd5ri7P/Kic+o7e5XSHOa0goUy4BDHjA2VcE98y0aWiqnQHyRk+uHPUrg1d6n OGAjnwonKgDJtYv5JOzjznVzVOI8GXkXWcFE0qYKpkhaxQO716+5I7d2cyfzuw2B +IqOEic2bZmXyHCRYI9vWgPnzGOPRC3AN/M5AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUjU4b6jxu/NSKCXq38So5K2iF2NwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9qVTRiNmp4dV9OU0tDWHEzOFNv NUsyaUYyTncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCPeAw DQYJKoZIhvcNAQELBQADggEBAFBnuUrw88Wp31EtL0642/0zq4dfqnmoCdL/JkX+ NeHtDgy6qSieRwF8se1E/z2ak6u1/R6a0AJXyRZJBwhCq1faH23Z+12tTYYz9fEI l6e0Iqy9/iaXgFFgkDe6I2vmUmCidMOe0YtKXlPJ6cO8CRpI4EJrzrPAcC2bRZep yw0U5FecgXRooVXDuwnmpcFRwytK1F44qalmV/GmhXUimmhKhBRrHFQ7tZQPayqj CXinUv+iyj1VbAy96A/17bgu0+6IhT/6dlfRX9cFmEqjom7lXkDWe21oRe48IGBD j0rKmKSQx1B1bOZlPp+vFzhoJuoeqs0vvJFQffeFZHc8HSA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net