$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vEUaZzvCkN9N-f8qsCM4-r76toQ.roa File: vEUaZzvCkN9N-f8qsCM4-r76toQ.roa (raw, json) Hash identifier: wkde6JOHtsrCEEhCuAooZawq2Fnfe5PB5HU+7JndEZs= Subject key identifier: BC:45:1A:67:3B:C2:90:DF:4D:F9:FF:2A:B0:23:38:FA:BE:FA:B6:84 Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Certificate serial: 0DDA Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vEUaZzvCkN9N-f8qsCM4-r76toQ.roa Signing time: Wed 12 Feb 2025 01:36:22 +0000 ROA not before: Wed 12 Feb 2025 01:36:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9680 IP address blocks: 168.95.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3546 (0xdda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Validity Not Before: Feb 12 01:36:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BC451A673BC290DF4DF9FF2AB02338FABEFAB684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:06:af:10:e0:7e:04:d5:5d:66:51:27:32:40: 9d:34:87:6f:4c:ea:26:cd:a1:c6:7d:2a:8d:e6:7e: ce:14:30:e2:f1:a8:cd:12:47:03:8d:e8:be:32:af: ab:a3:5a:1c:48:ff:11:e5:24:62:9c:bc:75:b8:95: 25:e4:e2:c0:06:b5:81:d8:08:13:48:34:77:f0:8a: 56:ef:4c:37:16:ed:33:fd:a5:f3:19:f3:d1:f3:b1: 7a:ab:5b:d7:74:6a:11:e9:a7:66:0c:85:4c:29:ad: 7e:1e:49:64:ce:89:69:c2:29:b5:3a:76:9a:87:b9: b6:9a:68:7f:5a:c0:91:fb:09:cc:c2:5d:a1:b0:ee: cd:49:38:d0:be:3e:d1:90:4a:77:d5:a1:7e:a7:31: bf:94:42:33:62:4c:b8:fb:d7:39:85:45:2f:c7:e8: a1:95:cf:4b:ed:a7:12:e2:70:e9:b9:77:d8:9a:47: 0b:0f:25:25:ae:05:7a:7f:69:1b:ca:53:c2:56:0b: aa:15:67:fa:06:dd:18:2c:f6:56:aa:b3:a3:ed:4b: 8b:80:05:db:28:db:39:1f:ea:1a:b5:91:04:84:57: 51:e9:fc:d4:89:9d:2d:1b:8e:39:d9:1b:a2:7f:e9: 39:bb:95:e4:03:57:f5:63:74:46:71:1d:20:01:3c: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:1A:67:3B:C2:90:DF:4D:F9:FF:2A:B0:23:38:FA:BE:FA:B6:84 X509v3 Authority Key Identifier: keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vEUaZzvCkN9N-f8qsCM4-r76toQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 168.95.245.0/24 Signature Algorithm: sha256WithRSAEncryption 06:a4:5d:82:07:d8:50:0c:31:ba:52:7b:65:a2:11:20:6e:9d: 7f:27:e1:13:16:17:59:15:2f:07:4a:aa:18:b7:f8:c2:b5:ee: cc:9c:a1:0c:ae:b8:f0:5e:f4:e3:65:82:18:c0:93:2c:8a:4e: d1:d1:1b:ab:d0:bb:01:1b:b2:85:48:b2:0a:98:da:55:17:b4: 69:e6:d5:f4:03:08:2a:70:ac:52:ea:22:e7:3a:d6:a7:11:10: b0:97:3c:2c:20:33:1b:c2:9a:42:b5:d5:b5:59:b1:f2:69:83: 93:b5:1f:84:c4:92:73:dd:f8:b6:37:84:63:62:25:91:1c:33: bc:4e:af:06:2c:50:0c:ab:e0:81:fd:cf:7c:1b:12:90:25:0c: 0e:80:d7:48:a0:3e:1c:f3:7f:78:f5:aa:7f:ee:f2:59:64:f2: d0:b1:d2:68:38:cb:fb:75:ec:38:c8:b2:34:1e:99:3d:12:1d: b2:fd:98:df:46:f5:71:8b:58:ee:25:21:4d:15:97:69:1a:e1: 0d:68:4c:2c:3f:c2:df:e6:51:31:e8:52:c1:0b:ec:87:ff:8c: bc:a4:22:e0:f1:a2:e9:7f:71:3f:c6:04:ff:1a:3e:85:1c:b0: d8:b0:dc:e1:4b:08:8f:ea:bf:d2:f1:a1:70:44:a9:75:5e:2a: 07:99:89:e0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3 NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yNTAyMTIw MTM2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDNDUxQTY3M0JDMjkw REY0REY5RkYyQUIwMjMzOEZBQkVGQUI2ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5Bq8Q4H4E1V1mUScyQJ00h29M6ibNocZ9Ko3mfs4UMOLxqM0S RwON6L4yr6ujWhxI/xHlJGKcvHW4lSXk4sAGtYHYCBNINHfwilbvTDcW7TP9pfMZ 89HzsXqrW9d0ahHpp2YMhUwprX4eSWTOiWnCKbU6dpqHubaaaH9awJH7CczCXaGw 7s1JONC+PtGQSnfVoX6nMb+UQjNiTLj71zmFRS/H6KGVz0vtpxLicOm5d9iaRwsP JSWuBXp/aRvKU8JWC6oVZ/oG3Rgs9laqs6PtS4uABdso2zkf6hq1kQSEV1Hp/NSJ nS0bjjnZG6J/6Tm7leQDV/VjdEZxHSABPIafAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUvEUaZzvCkN9N+f8qsCM4+r76toQwHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC92RVVhWnp2Q2tOOU4tZjhxc0NN NC1yNzZ0b1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF/1 MA0GCSqGSIb3DQEBCwUAA4IBAQAGpF2CB9hQDDG6UntlohEgbp1/J+ETFhdZFS8H SqoYt/jCte7MnKEMrrjwXvTjZYIYwJMsik7R0Rur0LsBG7KFSLIKmNpVF7Rp5tX0 AwgqcKxS6iLnOtanERCwlzwsIDMbwppCtdW1WbHyaYOTtR+ExJJz3fi2N4RjYiWR HDO8Tq8GLFAMq+CB/c98GxKQJQwOgNdIoD4c83949ap/7vJZZPLQsdJoOMv7dew4 yLI0Hpk9Eh2y/ZjfRvVxi1juJSFNFZdpGuENaEwsP8Lf5lEx6FLBC+yH/4y8pCLg 8aLpf3E/xgT/Gj6FHLDYsNzhSwiP6r/S8aFwRKl1XioHmYng -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net