$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/npo3SxIW-3bKjMFYmkGG4Kd62hc.roa File: npo3SxIW-3bKjMFYmkGG4Kd62hc.roa (raw, json) Hash identifier: FpBCKffgbP1pwYPihhSAJ2aaZ6MUtbxqJ1Y5OCV5ovk= Subject key identifier: 9E:9A:37:4B:12:16:FB:76:CA:8C:C1:58:9A:41:86:E0:A7:7A:DA:17 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1742 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/npo3SxIW-3bKjMFYmkGG4Kd62hc.roa Signing time: Wed 12 Feb 2025 01:36:32 +0000 ROA not before: Wed 12 Feb 2025 01:36:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 137280 IP address blocks: 203.69.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5954 (0x1742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9E9A374B1216FB76CA8CC1589A4186E0A77ADA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:7d:70:36:9b:74:8a:ef:db:88:bc:36:b7: 0f:d6:b7:6d:99:88:e1:1c:72:fc:af:6b:60:15:32: 85:3d:0c:2e:cc:6c:5a:78:06:bf:5f:1c:a8:0c:10: 5f:e3:36:0f:58:e8:bf:b7:b6:2a:ec:dc:49:56:cc: 4d:ad:6e:2c:db:4b:9b:c0:87:e0:84:91:31:bd:ea: 0d:3b:f8:be:7c:a4:a8:65:95:3e:b2:6a:58:e9:72: 18:88:be:0c:9b:d3:f4:18:d0:af:aa:00:3b:81:55: 0b:41:c6:a2:67:ae:68:ba:57:1a:51:2f:b7:93:5f: 7a:20:be:e8:63:d6:30:0b:24:78:ad:48:2d:2d:e7: ef:de:74:f3:9b:f3:2b:6c:f9:71:60:d9:1a:81:f9: bd:c0:a0:1c:95:45:29:2b:f9:98:56:92:52:9b:90: 19:90:45:2a:90:a5:a1:a5:32:db:11:4c:3a:9f:0d: 6c:9c:cc:79:a5:d3:76:b2:3d:86:b4:bd:66:9e:90: 70:00:b4:c6:9a:a4:13:a7:dd:4b:44:9f:52:51:ca: 01:b4:c3:77:d9:de:2b:8b:c3:e8:e5:5e:ad:e4:cf: 6f:dd:71:80:55:dc:cb:c1:1b:5f:94:a0:c3:d3:4d: 85:5e:44:93:32:59:6a:13:96:74:00:9e:b9:92:19: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9A:37:4B:12:16:FB:76:CA:8C:C1:58:9A:41:86:E0:A7:7A:DA:17 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/npo3SxIW-3bKjMFYmkGG4Kd62hc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.33.0/24 Signature Algorithm: sha256WithRSAEncryption 91:69:57:b6:c5:5c:c3:3a:3f:99:d7:61:95:50:16:8a:0c:4d: 02:f9:41:a8:45:55:84:d1:e4:54:c3:b5:30:ed:7b:fe:b5:5a: c8:6f:c9:38:41:ec:42:ff:a9:67:f5:fa:9b:6a:e6:23:d1:9c: c8:8b:a2:1a:8d:f0:01:31:e2:5f:bf:3f:e2:f2:72:c8:03:36: 7f:fe:33:a8:3f:2f:8e:80:ec:42:7b:47:b9:00:1b:4b:5d:fc: 9f:26:81:65:4b:ea:4f:a2:ba:e5:8e:5f:90:35:62:0d:25:70: 09:f4:6e:91:56:ce:d1:2e:b1:e3:fa:7f:19:df:4f:94:fc:f0: 8c:88:b9:c4:58:12:a2:54:e2:e0:24:f5:8c:53:2d:63:1e:4e: cf:a8:28:94:b9:c5:eb:57:bc:e8:cc:ef:80:f2:02:fc:b8:72: a3:fd:5b:f0:bc:bc:8b:71:c8:55:24:8d:5e:4a:c4:7d:9d:13: a6:03:0c:5a:f3:00:a2:71:3b:22:c4:a3:86:5b:d9:91:7a:ae: 22:f2:f5:27:43:81:30:ee:bd:bc:71:8d:72:c6:c0:2f:36:76: cf:c4:4b:40:d7:2f:a3:2f:b4:a6:4d:ec:ee:fe:37:36:60:bb: 56:f7:88:74:b1:d2:34:d7:39:ce:0c:a6:2e:87:5e:a6:56:b2: 0e:a6:12:37 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlFOUEzNzRCMTIxNkZC NzZDQThDQzE1ODlBNDE4NkUwQTc3QURBMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSiH1wNpt0iu/biLw2tw/Wt22ZiOEccvyva2AVMoU9DC7MbFp4 Br9fHKgMEF/jNg9Y6L+3tirs3ElWzE2tbizbS5vAh+CEkTG96g07+L58pKhllT6y aljpchiIvgyb0/QY0K+qADuBVQtBxqJnrmi6VxpRL7eTX3ogvuhj1jALJHitSC0t 5+/edPOb8yts+XFg2RqB+b3AoByVRSkr+ZhWklKbkBmQRSqQpaGlMtsRTDqfDWyc zHml03ayPYa0vWaekHAAtMaapBOn3UtEn1JRygG0w3fZ3iuLw+jlXq3kz2/dcYBV 3MvBG1+UoMPTTYVeRJMyWWoTlnQAnrmSGZqbAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUnpo3SxIW+3bKjMFYmkGG4Kd62hcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ucG8zU3hJVy0zYktqTUZZbWtH RzRLZDYyaGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Uh MA0GCSqGSIb3DQEBCwUAA4IBAQCRaVe2xVzDOj+Z12GVUBaKDE0C+UGoRVWE0eRU w7Uw7Xv+tVrIb8k4QexC/6ln9fqbauYj0ZzIi6IajfABMeJfvz/i8nLIAzZ//jOo Py+OgOxCe0e5ABtLXfyfJoFlS+pPorrljl+QNWINJXAJ9G6RVs7RLrHj+n8Z30+U /PCMiLnEWBKiVOLgJPWMUy1jHk7PqCiUucXrV7zozO+A8gL8uHKj/VvwvLyLcchV JI1eSsR9nROmAwxa8wCicTsixKOGW9mReq4i8vUnQ4Ew7r28cY1yxsAvNnbPxEtA 1y+jL7SmTezu/jc2YLtW94h0sdI01znODKYuh16mVrIOphI3 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net