$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ytKYJlZrgo278QDKzoJVY9u-e9M.roa File: ytKYJlZrgo278QDKzoJVY9u-e9M.roa (raw, json) Hash identifier: DfD+nZX1HNQ+2xKCXkAQ1BzCQXwLGG7hkenAriQ5qLo= Subject key identifier: CA:D2:98:26:56:6B:82:8D:BB:F1:00:CA:CE:82:55:63:DB:BE:7B:D3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 178C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ytKYJlZrgo278QDKzoJVY9u-e9M.roa Signing time: Wed 12 Feb 2025 01:36:48 +0000 ROA not before: Wed 12 Feb 2025 01:36:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 203.74.67.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6028 (0x178c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CAD29826566B828DBBF100CACE825563DBBE7BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:f5:78:0b:83:aa:72:91:8f:29:c7:e6:a3: c1:84:1a:28:d0:c2:c3:7c:f1:7c:d3:9a:1a:c8:40: 4d:8f:06:f1:5d:d2:1f:15:58:0d:31:af:a7:50:07: 0b:f6:30:a9:64:29:c7:f4:e2:20:8a:af:bd:08:24: 45:53:66:93:12:89:5b:89:fc:bc:c8:89:fc:9a:3c: ff:b3:e0:98:10:23:c3:b5:29:70:77:62:5e:a6:1a: 20:1d:22:26:ed:53:4e:61:15:e4:e2:01:c2:ea:cb: 44:6d:6e:03:0a:d2:29:1d:99:72:4b:d8:8d:99:08: 82:08:3e:88:d9:3e:0b:4f:85:fd:e9:c4:a2:e1:d7: d4:e6:4e:5c:62:6f:da:5d:36:2f:84:a3:c3:b4:a4: 2a:d5:e3:82:f5:d4:fa:38:9a:b7:b6:65:c5:04:4d: 6e:75:7d:f0:29:e6:88:e4:fe:cd:b3:03:6b:a3:e4: b6:81:12:e8:da:ca:16:98:40:c5:76:fd:01:a5:24: 6b:8a:5b:a0:36:32:17:dd:27:7b:89:b0:bd:2e:ef: fc:15:ce:71:4f:62:64:84:27:44:e5:19:6b:3e:9f: de:95:fe:c0:19:92:92:17:1e:71:0f:a6:f1:1f:9f: a3:5e:b1:df:cb:1a:de:3b:23:bf:14:20:31:89:61: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:98:26:56:6B:82:8D:BB:F1:00:CA:CE:82:55:63:DB:BE:7B:D3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ytKYJlZrgo278QDKzoJVY9u-e9M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.67.0/25 Signature Algorithm: sha256WithRSAEncryption 5f:38:e8:0a:5d:e1:f4:90:94:be:47:cc:61:35:e6:91:e2:52: 5e:0e:c3:20:3a:39:8f:5b:d6:9a:30:2b:c4:89:ab:41:8f:e8: 60:84:cd:c8:e1:13:46:dc:aa:84:8f:fa:1b:b6:30:c3:51:ac: fd:cb:49:2f:61:0b:a8:e6:88:fa:73:1d:48:29:71:4f:1b:6e: 9e:11:12:b1:f5:f8:2c:d7:f2:64:50:ca:fd:7d:fa:38:56:e0: c0:d8:69:7e:32:f9:62:17:19:e4:c0:17:c1:0f:5f:b6:24:cc: 54:b5:22:5c:08:e1:c1:2d:ec:85:14:6e:19:21:46:b5:3d:28: 4b:82:93:96:d4:9d:6a:93:79:a8:e9:11:23:34:a9:08:16:50: ce:84:93:07:8f:e2:0b:c5:1b:f9:e8:59:8e:2b:57:a0:dd:ac: 20:8a:97:fb:24:0b:5b:8b:cf:e8:cf:a3:55:90:52:ba:fb:7d: e0:28:8b:e0:0e:b4:a4:74:8d:32:0c:74:d3:b7:3a:a2:c6:0d: ce:d2:62:0f:9c:95:18:36:20:ca:da:c1:90:e5:ef:0e:4a:a5: 4f:9b:8b:95:2a:e7:8a:72:20:4e:e7:49:6e:2d:b8:8f:7a:91: 9f:99:5b:6c:99:da:ec:1c:40:1b:48:cc:c0:09:b6:94:62:2e: 80:03:78:83 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICF4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBRDI5ODI2NTY2Qjgy OERCQkYxMDBDQUNFODI1NTYzREJCRTdCRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC77fV4C4OqcpGPKcfmo8GEGijQwsN88XzTmhrIQE2PBvFd0h8V WA0xr6dQBwv2MKlkKcf04iCKr70IJEVTZpMSiVuJ/LzIifyaPP+z4JgQI8O1KXB3 Yl6mGiAdIibtU05hFeTiAcLqy0RtbgMK0ikdmXJL2I2ZCIIIPojZPgtPhf3pxKLh 19TmTlxib9pdNi+Eo8O0pCrV44L11Po4mre2ZcUETW51ffAp5ojk/s2zA2uj5LaB EujayhaYQMV2/QGlJGuKW6A2MhfdJ3uJsL0u7/wVznFPYmSEJ0TlGWs+n96V/sAZ kpIXHnEPpvEfn6Nesd/LGt47I78UIDGJYbEJAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUytKYJlZrgo278QDKzoJVY9u+e9MwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC95dEtZSmxacmdvMjc4UURLem9K Vlk5dS1lOU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0pD ADANBgkqhkiG9w0BAQsFAAOCAQEAXzjoCl3h9JCUvkfMYTXmkeJSXg7DIDo5j1vW mjArxImrQY/oYITNyOETRtyqhI/6G7Yww1Gs/ctJL2ELqOaI+nMdSClxTxtunhES sfX4LNfyZFDK/X36OFbgwNhpfjL5YhcZ5MAXwQ9ftiTMVLUiXAjhwS3shRRuGSFG tT0oS4KTltSdapN5qOkRIzSpCBZQzoSTB4/iC8Ub+ehZjitXoN2sIIqX+yQLW4vP 6M+jVZBSuvt94CiL4A60pHSNMgx007c6osYNztJiD5yVGDYgytrBkOXvDkqlT5uL lSrninIgTudJbi24j3qRn5lbbJna7BxAG0jMwAm2lGIugAN4gw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:38 2025 by rpki-client on console.sobornost.net