$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pNAdt89yDjJ2XNtT7Z70Gzjd-kA.roa File: pNAdt89yDjJ2XNtT7Z70Gzjd-kA.roa (raw, json) Hash identifier: zPNqAHGZNNmx/H9dzgjd3vkMp9fjx6aKJ69AubK83nE= Subject key identifier: A4:D0:1D:B7:CF:72:0E:32:76:5C:DB:53:ED:9E:F4:1B:38:DD:FA:40 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17A5 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pNAdt89yDjJ2XNtT7Z70Gzjd-kA.roa Signing time: Wed 12 Feb 2025 01:36:55 +0000 ROA not before: Wed 12 Feb 2025 01:36:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 60.250.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6053 (0x17a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A4D01DB7CF720E32765CDB53ED9EF41B38DDFA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:6c:f6:3c:36:a0:80:c2:56:3a:87:cd:00: 77:59:e4:d9:4f:4d:7a:f3:c7:86:00:a5:26:9e:a3: 4a:88:81:4a:34:5f:47:d6:c1:fa:bf:71:97:0c:7c: a7:4f:41:6e:32:79:26:dc:6d:e5:3f:0b:be:ec:26: 3f:67:8f:79:8a:09:05:8e:db:e6:8c:68:e9:5f:50: a9:d1:f6:9c:3a:07:ff:ce:60:fc:4f:45:9b:a4:24: 4f:81:d2:51:fb:ca:0f:7c:e7:4e:6b:00:47:82:58: df:70:a5:d4:b3:18:c3:1e:6d:a2:ca:b0:5c:19:53: 26:a9:b4:11:23:08:f1:a3:4f:a2:eb:d9:e7:d5:2c: 4f:e9:f3:ce:8d:bb:e1:35:16:23:0d:07:37:11:88: 76:76:54:e0:7a:bd:87:fd:22:26:6f:42:45:5f:c0: c5:d6:3c:19:e3:91:19:62:77:1e:1d:4d:0d:15:cc: c9:d3:c9:b5:95:28:a5:90:bc:78:c7:e3:9c:04:bc: b2:08:2b:71:db:d5:99:5c:c2:8a:3a:73:4d:83:51: af:e0:04:fb:4e:49:24:30:cb:27:02:82:7e:03:80: 89:4d:c0:09:47:c5:43:fa:4b:05:5b:ef:cb:5a:04: 7e:0b:c7:ce:50:18:f3:5f:14:f2:d8:64:3c:b0:8d: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D0:1D:B7:CF:72:0E:32:76:5C:DB:53:ED:9E:F4:1B:38:DD:FA:40 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pNAdt89yDjJ2XNtT7Z70Gzjd-kA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.250.0.0/15 Signature Algorithm: sha256WithRSAEncryption 53:22:0a:33:11:d6:62:26:b3:65:2d:c9:55:28:15:86:8d:e6: af:8f:e4:b6:d5:c2:ef:2a:0d:a7:93:45:62:c2:66:f3:74:23: 5b:a2:35:ef:9a:0c:81:ef:66:53:7d:c2:f5:33:dc:85:f3:b1: 2b:ce:d5:07:96:72:00:f1:79:5d:d2:42:3d:15:f2:e0:2c:46: 05:26:32:6f:55:2a:75:0d:36:ef:d8:60:9b:d8:c4:e3:01:b0: 58:05:d7:63:b7:18:a1:ef:5f:71:4a:cf:36:6a:ac:4b:18:3c: a8:4e:f4:d5:75:5c:72:04:ea:bf:fc:21:a1:30:0a:eb:13:8b: 35:9a:d1:db:52:67:e6:df:93:f2:99:e7:4d:7d:8f:22:1b:c9: 8e:0f:db:2c:62:e6:40:50:1c:1d:7b:62:4d:92:29:49:a3:22: 64:17:69:e6:e7:d6:ab:60:9b:57:d6:33:c6:7a:36:5f:35:b9: 3d:5a:2f:23:ad:e1:ff:9e:8e:d0:af:47:07:a1:31:2b:a3:a8: c8:d5:be:0a:d6:94:1d:63:c9:d9:da:ae:d5:10:2b:5c:5a:40: 55:ab:1d:a8:54:c0:ce:3d:a5:eb:95:7f:4b:d8:e0:82:a5:db: d4:d9:fb:49:85:33:8a:1a:a0:79:d3:be:ce:2e:f1:cb:54:18: 54:1b:10:71 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0RDAxREI3Q0Y3MjBF MzI3NjVDREI1M0VEOUVGNDFCMzhEREZBNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVc2z2PDaggMJWOofNAHdZ5NlPTXrzx4YApSaeo0qIgUo0X0fW wfq/cZcMfKdPQW4yeSbcbeU/C77sJj9nj3mKCQWO2+aMaOlfUKnR9pw6B//OYPxP RZukJE+B0lH7yg98505rAEeCWN9wpdSzGMMebaLKsFwZUyaptBEjCPGjT6Lr2efV LE/p886Nu+E1FiMNBzcRiHZ2VOB6vYf9IiZvQkVfwMXWPBnjkRlidx4dTQ0VzMnT ybWVKKWQvHjH45wEvLIIK3Hb1Zlcwoo6c02DUa/gBPtOSSQwyycCgn4DgIlNwAlH xUP6SwVb78taBH4Lx85QGPNfFPLYZDywjcRrAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUpNAdt89yDjJ2XNtT7Z70Gzjd+kAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wTkFkdDg5eURqSjJYTnRUN1o3 MEd6amQta0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBPPow DQYJKoZIhvcNAQELBQADggEBAFMiCjMR1mIms2UtyVUoFYaN5q+P5LbVwu8qDaeT RWLCZvN0I1uiNe+aDIHvZlN9wvUz3IXzsSvO1QeWcgDxeV3SQj0V8uAsRgUmMm9V KnUNNu/YYJvYxOMBsFgF12O3GKHvX3FKzzZqrEsYPKhO9NV1XHIE6r/8IaEwCusT izWa0dtSZ+bfk/KZ5019jyIbyY4P2yxi5kBQHB17Yk2SKUmjImQXaebn1qtgm1fW M8Z6Nl81uT1aLyOt4f+ejtCvRwehMSujqMjVvgrWlB1jydnartUQK1xaQFWrHahU wM49peuVf0vY4IKl29TZ+0mFM4oaoHnTvs4u8ctUGFQbEHE= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net