$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tLso2lTSuTP7guQyLuw9eBK-4lM.roa File: tLso2lTSuTP7guQyLuw9eBK-4lM.roa (raw, json) Hash identifier: F+sbggpdGdFrEEaUxNcIRoZ9mrtekm1RieM9Rb5E4ho= Subject key identifier: B4:BB:28:DA:54:D2:B9:33:FB:82:E4:32:2E:EC:3D:78:12:BE:E2:53 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1778 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tLso2lTSuTP7guQyLuw9eBK-4lM.roa Signing time: Wed 12 Feb 2025 01:36:44 +0000 ROA not before: Wed 12 Feb 2025 01:36:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 60.248.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6008 (0x1778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B4BB28DA54D2B933FB82E4322EEC3D7812BEE253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:25:ad:bc:56:90:2b:6c:9e:a8:3d:19:97: cf:84:07:e3:fc:30:60:52:bd:4d:07:18:d0:4e:06: 95:f9:3c:45:cf:2b:57:53:75:75:29:4f:d0:0a:64: 56:64:44:db:e2:3d:d5:6d:8c:9f:d2:13:f7:b5:5f: f0:91:56:95:bd:bd:fd:bd:c8:5c:8b:cd:f0:34:40: e3:c3:50:d0:bc:29:08:78:c5:5a:2b:7c:c6:44:98: fa:07:7b:b8:19:58:ec:e4:81:b8:16:51:5b:d9:40: de:03:b4:5a:7a:d3:8b:15:8e:20:99:b0:62:c7:72: 22:2a:83:cc:9a:7b:45:e7:b8:e0:e8:61:cc:33:77: 2b:de:23:c4:f9:74:f4:a7:ea:02:64:85:c1:43:98: ca:72:80:8f:2d:98:49:ec:0e:cf:38:80:52:19:59: ac:85:5a:55:e7:7f:36:a6:12:32:c5:3f:0f:b6:51: 5f:e2:21:04:bd:45:6a:d3:9f:87:e8:30:55:a9:ce: 6a:81:35:52:db:71:3f:cc:26:f1:ae:79:3b:40:87: 5f:8d:e0:ab:a7:71:b6:7f:ab:55:06:8d:68:f1:e6: 11:4e:fb:69:e7:95:a7:fd:20:b5:a1:33:d3:c9:1d: 73:47:d9:85:96:df:4c:3c:ad:b8:05:ab:e2:90:ac: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:28:DA:54:D2:B9:33:FB:82:E4:32:2E:EC:3D:78:12:BE:E2:53 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tLso2lTSuTP7guQyLuw9eBK-4lM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:1f:4d:fd:5f:95:ce:b2:e0:08:11:dc:52:73:16:dd:d3:39: fb:19:70:78:a7:28:fd:0b:0f:f9:4c:cd:96:64:1d:a3:59:89: 2a:2b:35:60:6e:07:61:73:58:4f:6b:db:b2:67:56:dc:7b:fc: f3:05:42:1c:ab:a0:9f:b6:0d:08:9f:fd:6d:0d:f3:63:ac:5c: 2d:84:ab:1e:a3:42:41:dc:04:e6:a7:60:f0:59:c0:18:1f:fe: b1:98:3d:fc:2b:b8:7b:2f:07:57:9f:e6:14:8e:1b:9e:14:6c: a8:45:25:54:19:7e:97:f6:c1:ba:b5:ff:2b:ae:f0:85:92:1c: ea:7f:3b:12:b9:b7:fd:cb:ea:3b:d9:8f:b0:47:d3:ff:7a:eb: 3c:20:52:fe:af:4f:3b:f9:ed:f5:1d:c1:4c:8f:6b:14:c6:d4: 2b:fe:0f:a2:d8:cd:7b:e6:8e:c2:3d:47:fd:a7:c2:e2:22:02: 2d:ce:19:36:69:d8:40:5a:fa:c6:5a:22:9c:31:3b:14:5b:a6: 17:20:bd:77:fd:47:cc:12:7f:2c:74:89:9a:03:88:b4:2b:05: 6e:95:46:ba:fe:1f:a7:80:c4:c1:40:67:93:93:f1:49:25:7b: d3:61:25:31:96:da:3a:6a:21:a5:56:00:eb:62:16:80:be:94: ae:56:a3:ae -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0QkIyOERBNTREMkI5 MzNGQjgyRTQzMjJFRUMzRDc4MTJCRUUyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVqiWtvFaQK2yeqD0Zl8+EB+P8MGBSvU0HGNBOBpX5PEXPK1dT dXUpT9AKZFZkRNviPdVtjJ/SE/e1X/CRVpW9vf29yFyLzfA0QOPDUNC8KQh4xVor fMZEmPoHe7gZWOzkgbgWUVvZQN4DtFp604sVjiCZsGLHciIqg8yae0XnuODoYcwz dyveI8T5dPSn6gJkhcFDmMpygI8tmEnsDs84gFIZWayFWlXnfzamEjLFPw+2UV/i IQS9RWrTn4foMFWpzmqBNVLbcT/MJvGueTtAh1+N4KuncbZ/q1UGjWjx5hFO+2nn laf9ILWhM9PJHXNH2YWW30w8rbgFq+KQrGj1AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUtLso2lTSuTP7guQyLuw9eBK+4lMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC90THNvMmxUU3VUUDdndVF5THV3 OWVCSy00bE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPPgw DQYJKoZIhvcNAQELBQADggEBACYfTf1flc6y4AgR3FJzFt3TOfsZcHinKP0LD/lM zZZkHaNZiSorNWBuB2FzWE9r27JnVtx7/PMFQhyroJ+2DQif/W0N82OsXC2Eqx6j QkHcBOanYPBZwBgf/rGYPfwruHsvB1ef5hSOG54UbKhFJVQZfpf2wbq1/yuu8IWS HOp/OxK5t/3L6jvZj7BH0/966zwgUv6vTzv57fUdwUyPaxTG1Cv+D6LYzXvmjsI9 R/2nwuIiAi3OGTZp2EBa+sZaIpwxOxRbphcgvXf9R8wSfyx0iZoDiLQrBW6VRrr+ H6eAxMFAZ5OT8Ukle9NhJTGW2jpqIaVWAOtiFoC+lK5Wo64= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net