$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/kjMc05eqrAvprRc8rNFOaxbG1mU.roa File: kjMc05eqrAvprRc8rNFOaxbG1mU.roa (raw, json) Hash identifier: 3frkvwZDixzsEUfHEZn0lSAGzQ+YzGHPwj4Dz/Poahw= Subject key identifier: 92:33:1C:D3:97:AA:AC:0B:E9:AD:17:3C:AC:D1:4E:6B:16:C6:D6:65 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 172F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/kjMc05eqrAvprRc8rNFOaxbG1mU.roa Signing time: Wed 12 Feb 2025 01:36:28 +0000 ROA not before: Wed 12 Feb 2025 01:36:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 59.112.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5935 (0x172f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=92331CD397AAAC0BE9AD173CACD14E6B16C6D665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:de:0c:ce:3e:c7:fe:f5:65:ab:a6:74:d4: 51:4c:50:c9:c0:0f:76:eb:f1:b8:c4:96:f8:25:a7: 59:a7:bd:27:af:73:bc:67:a3:71:2d:2b:13:f1:1d: a5:8d:1a:b9:4a:ef:a2:49:ed:f8:b6:82:8a:70:84: 77:59:43:f0:35:8d:e2:1f:3b:84:14:28:20:1c:d3: 26:94:2b:ce:29:83:54:55:15:69:fe:1e:00:06:b0: 2f:49:ac:9c:4b:f7:ed:80:94:7d:35:4d:90:f9:1f: 7c:4d:1e:7d:f7:bd:fc:82:b5:81:6b:fa:ef:33:7d: 20:b1:dc:08:25:67:48:7f:ad:26:a5:9a:db:4e:1f: 80:e1:30:bd:df:47:bf:60:92:c1:d1:f8:c6:74:79: 08:34:31:c2:4e:c4:bd:c3:6f:39:36:5c:97:24:7b: df:1c:c7:15:07:a4:18:64:92:e5:96:c8:1b:be:0f: 22:f1:e0:1d:d0:44:15:63:b5:10:6f:3d:f1:79:d9: fa:50:a0:28:47:65:ba:10:28:aa:96:44:27:06:e4: d6:64:c8:83:4d:2f:a1:2c:c5:1d:fc:0e:cc:fb:2c: 0c:a9:a1:06:0c:93:97:d7:ef:d0:73:02:6b:8a:46: 3f:9a:48:f2:0f:57:21:d7:11:7a:cf:7a:d4:fa:12: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:33:1C:D3:97:AA:AC:0B:E9:AD:17:3C:AC:D1:4E:6B:16:C6:D6:65 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/kjMc05eqrAvprRc8rNFOaxbG1mU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.112.0.0/13 Signature Algorithm: sha256WithRSAEncryption 46:20:61:6d:0f:3d:b0:59:24:fc:e1:33:ca:8a:5d:92:c3:26: d4:58:3b:a0:25:4f:7d:2c:f0:e5:7c:66:fa:6b:cd:4f:94:83: a4:64:d1:39:97:cb:46:49:6f:cb:fa:dd:57:41:86:4e:b5:07: 5e:9b:df:fb:f6:ec:a4:62:f3:67:6e:85:2f:48:2b:23:6a:18: b3:5f:10:7c:83:a0:d9:e8:09:71:11:d6:37:54:e9:5e:0f:84: fe:95:41:fa:f9:55:ea:d5:f7:33:e3:81:61:ae:ba:58:d6:b1: a2:68:8c:1b:a2:25:22:75:b3:20:15:05:47:21:cc:c2:70:18: 23:5e:34:80:25:ca:ac:a0:38:39:c1:d3:73:1b:2d:17:a1:90: 4f:22:e8:a3:f5:10:ae:32:fb:81:1d:8e:12:30:2c:82:71:7d: c9:90:f3:e4:b0:08:0c:95:03:4d:78:c1:1c:ba:f1:3b:21:7b: b9:ad:0e:17:16:8e:3b:9d:e2:1a:ef:58:67:c3:c8:2c:ed:7e: 2e:b9:e0:54:f9:41:33:5f:98:49:39:32:e0:53:a9:f1:05:09: 4d:b0:3c:33:ca:2d:d3:df:8b:e6:c8:05:8f:7d:c4:f2:f4:26: fc:89:aa:88:57:f5:4e:17:62:0c:f7:2b:af:56:63:71:d1:7c: 80:a9:24:6d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICFy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkyMzMxQ0QzOTdBQUFD MEJFOUFEMTczQ0FDRDE0RTZCMTZDNkQ2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrIt4Mzj7H/vVlq6Z01FFMUMnAD3br8bjElvglp1mnvSevc7xn o3EtKxPxHaWNGrlK76JJ7fi2gopwhHdZQ/A1jeIfO4QUKCAc0yaUK84pg1RVFWn+ HgAGsC9JrJxL9+2AlH01TZD5H3xNHn33vfyCtYFr+u8zfSCx3AglZ0h/rSalmttO H4DhML3fR79gksHR+MZ0eQg0McJOxL3Dbzk2XJcke98cxxUHpBhkkuWWyBu+DyLx 4B3QRBVjtRBvPfF52fpQoChHZboQKKqWRCcG5NZkyINNL6EsxR38Dsz7LAypoQYM k5fX79BzAmuKRj+aSPIPVyHXEXrPetT6EkeFAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUkjMc05eqrAvprRc8rNFOaxbG1mUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9rak1jMDVlcXJBdnByUmM4ck5G T2F4YkcxbVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDO3Aw DQYJKoZIhvcNAQELBQADggEBAEYgYW0PPbBZJPzhM8qKXZLDJtRYO6AlT30s8OV8 ZvprzU+Ug6Rk0TmXy0ZJb8v63VdBhk61B16b3/v27KRi82duhS9IKyNqGLNfEHyD oNnoCXER1jdU6V4PhP6VQfr5VerV9zPjgWGuuljWsaJojBuiJSJ1syAVBUchzMJw GCNeNIAlyqygODnB03MbLRehkE8i6KP1EK4y+4EdjhIwLIJxfcmQ8+SwCAyVA014 wRy68Tshe7mtDhcWjjud4hrvWGfDyCztfi654FT5QTNfmEk5MuBTqfEFCU2wPDPK LdPfi+bIBY99xPL0JvyJqohX9U4XYgz3K69WY3HRfICpJG0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net