$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wp-g4lrSoTCKIVwghKpJv6IORRs.roa File: wp-g4lrSoTCKIVwghKpJv6IORRs.roa (raw, json) Hash identifier: Igjr6MxSeasSe2AQ4kJWLIDYFbTiitt5KX6TdCgppi0= Subject key identifier: C2:9F:A0:E2:5A:D2:A1:30:8A:21:5C:20:84:AA:49:BF:A2:0E:45:1B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1763 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wp-g4lrSoTCKIVwghKpJv6IORRs.roa Signing time: Wed 12 Feb 2025 01:36:39 +0000 ROA not before: Wed 12 Feb 2025 01:36:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 43.255.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5987 (0x1763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C29FA0E25AD2A1308A215C2084AA49BFA20E451B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:29:83:2d:73:45:61:a9:ff:49:ab:19:46: 90:d3:bb:9c:51:cc:70:97:3f:91:1d:45:25:24:78: cf:ea:ca:7d:48:fa:7d:ff:18:75:7b:91:9a:f0:ca: 85:94:6f:f8:38:01:16:46:75:21:70:0b:04:d8:96: 9d:49:db:98:0e:3d:08:c1:1d:5b:97:70:de:79:14: 3c:1e:20:95:33:45:32:2b:e2:f8:16:ee:c7:5a:34: 27:04:c6:58:43:5d:be:34:cd:16:2c:27:de:14:a5: a1:74:2a:2e:00:c7:2d:b3:3e:12:76:5c:42:c6:3e: c8:0a:ce:69:a0:35:6d:8a:df:4e:cc:77:bf:65:1f: a9:d4:b8:38:1e:25:c1:be:bd:d0:bf:c3:72:72:0e: e8:5e:2d:d4:f5:79:90:4e:5c:92:d7:e0:f6:3a:96: 87:56:26:f4:0f:c3:09:0d:6d:da:d2:f8:88:5e:c2: 79:7c:f0:80:6e:f6:cd:f3:a3:1f:e5:d3:c2:d4:5c: 8e:ff:e3:53:a3:25:53:ca:de:87:09:9b:eb:3b:7c: ec:98:8a:c3:d4:d4:ad:09:0e:a3:da:ea:f8:3a:c1: e8:b9:69:2f:04:62:af:78:12:43:d0:cf:48:8e:6c: 92:00:0a:55:9f:a7:68:2b:d0:37:81:0c:e0:19:a5: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9F:A0:E2:5A:D2:A1:30:8A:21:5C:20:84:AA:49:BF:A2:0E:45:1B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wp-g4lrSoTCKIVwghKpJv6IORRs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.92.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:54:46:bf:9a:9b:82:78:28:0d:bb:96:49:ff:eb:eb:33:91: e2:b1:fc:26:8d:94:c7:98:70:47:d8:ae:dc:23:e8:71:58:85: 8c:8c:76:57:40:d8:8e:54:f4:79:8a:16:26:04:f5:14:7d:53: fc:68:3b:9f:7e:4f:d5:7e:49:73:58:c8:ab:7a:3e:6b:d7:fa: 96:48:58:c4:c5:33:a0:b8:d0:d4:4b:a5:be:eb:b3:39:25:cc: e5:fc:9b:1a:11:6f:3f:86:8d:ad:bc:01:04:ab:87:38:e6:9c: eb:90:a6:60:36:01:8b:4a:35:7d:f5:75:e6:f7:37:f7:a1:f8: a8:e5:f7:12:0e:78:b7:33:dc:9e:3c:84:23:28:cc:a5:6d:f3: 9e:a1:bc:8d:6d:54:90:fe:e1:d1:17:b4:25:3b:6a:f8:56:68: ff:dc:d8:e7:fd:34:53:22:73:91:3a:ea:68:8b:ce:ef:03:51: 23:e5:f0:15:e3:4f:4d:54:ac:cf:a6:4b:12:06:3e:67:cd:23: 32:75:b6:5d:99:e2:d6:aa:db:f4:3b:99:61:d1:a0:a9:60:3e: 47:b4:84:fd:4a:9e:a2:97:76:e8:fc:37:cf:b7:7f:4d:1c:96: 47:83:ff:42:77:57:77:cb:08:1f:b9:48:e9:32:19:ec:16:88: a3:fd:cc:16 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyOUZBMEUyNUFEMkEx MzA4QTIxNUMyMDg0QUE0OUJGQTIwRTQ1MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBhSmDLXNFYan/SasZRpDTu5xRzHCXP5EdRSUkeM/qyn1I+n3/ GHV7kZrwyoWUb/g4ARZGdSFwCwTYlp1J25gOPQjBHVuXcN55FDweIJUzRTIr4vgW 7sdaNCcExlhDXb40zRYsJ94UpaF0Ki4Axy2zPhJ2XELGPsgKzmmgNW2K307Md79l H6nUuDgeJcG+vdC/w3JyDuheLdT1eZBOXJLX4PY6lodWJvQPwwkNbdrS+Ihewnl8 8IBu9s3zox/l08LUXI7/41OjJVPK3ocJm+s7fOyYisPU1K0JDqPa6vg6wei5aS8E Yq94EkPQz0iObJIAClWfp2gr0DeBDOAZpdHjAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUwp+g4lrSoTCKIVwghKpJv6IORRswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93cC1nNGxyU29UQ0tJVndnaEtw SnY2SU9SUnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK/9c MA0GCSqGSIb3DQEBCwUAA4IBAQBLVEa/mpuCeCgNu5ZJ/+vrM5HisfwmjZTHmHBH 2K7cI+hxWIWMjHZXQNiOVPR5ihYmBPUUfVP8aDuffk/VfklzWMirej5r1/qWSFjE xTOguNDUS6W+67M5Jczl/JsaEW8/ho2tvAEEq4c45pzrkKZgNgGLSjV99XXm9zf3 ofio5fcSDni3M9yePIQjKMylbfOeobyNbVSQ/uHRF7QlO2r4Vmj/3Njn/TRTInOR Oupoi87vA1Ej5fAV409NVKzPpksSBj5nzSMydbZdmeLWqtv0O5lh0aCpYD5HtIT9 Sp6il3bo/DfPt39NHJZHg/9Cd1d3ywgfuUjpMhnsFoij/cwW -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net