$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa File: ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa (raw, json) Hash identifier: si44X6SmEuUTzQeehX8jf9YpHpn97D+69yCXthQn+Fw= Subject key identifier: 66:81:42:EA:64:75:C1:7D:21:36:2E:7E:75:6B:6A:8F:B3:C5:1A:CD Certificate issuer: /CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647 Certificate serial: 41 Authority key identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa Signing time: Mon 10 Feb 2025 14:22:48 +0000 ROA not before: Mon 10 Feb 2025 14:22:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 2.58.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647 Validity Not Before: Feb 10 14:22:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=668142EA6475C17D21362E7E756B6A8FB3C51ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:09:e9:04:62:7f:04:1e:b1:b2:f7:cb:fb: 24:09:07:7a:2d:8e:34:00:f6:de:ab:5f:8d:38:21: bf:70:0e:93:47:54:0f:c0:c5:a5:2b:db:cf:44:08: df:1f:38:04:05:e4:23:bc:e4:32:e3:d8:59:da:80: 46:7c:4d:99:5e:fd:6e:4f:5a:9b:1c:3c:af:4b:17: 68:ed:2f:b6:33:c1:6a:6a:24:41:02:f2:32:f4:af: 11:d2:d2:67:17:c2:96:0a:9e:81:20:5c:d2:73:20: 9a:93:e0:73:75:5a:6f:d2:f0:25:33:2e:b9:9a:67: d0:fb:14:7e:50:7c:01:f8:d4:68:63:f4:39:e0:bb: ab:19:07:6d:69:e8:cb:cd:47:3f:97:04:b7:d9:f7: d1:34:e4:a4:df:3f:f9:f6:0d:d2:58:31:00:52:2f: ca:a4:e2:7a:b1:99:dc:17:0b:f1:02:e1:8e:3e:05: bc:3c:4e:61:00:d7:8a:f4:aa:93:63:f6:81:76:ac: 77:c8:44:7d:7a:03:11:9b:7d:5e:94:54:cb:2a:ea: 12:28:3e:4f:a6:5e:7f:fb:ab:c0:ea:a8:24:d5:e5: e8:ad:e5:a5:fe:59:39:e8:dc:85:1c:e2:c3:0e:92: 7c:66:5c:c8:b3:a1:d6:3f:d2:6d:b5:3c:7d:db:23: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:42:EA:64:75:C1:7D:21:36:2E:7E:75:6B:6A:8F:B3:C5:1A:CD X509v3 Authority Key Identifier: keyid:BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 2.58.240.0/24 Signature Algorithm: sha256WithRSAEncryption d9:a5:8a:12:4c:96:7e:4a:e3:bf:5d:e5:ae:e4:e3:fb:6f:4f: 79:d8:08:ad:e2:cb:e5:8c:65:fc:c1:18:89:24:e9:80:b4:40: d5:9d:0b:31:f4:ee:55:cb:74:4c:8a:04:98:49:c9:1e:a7:fd: 58:6d:0a:e1:c4:bc:53:e7:8b:d2:75:da:42:a7:56:b9:64:09: 48:cf:b6:9d:33:52:a6:34:8f:90:59:9f:b7:2d:a5:3e:66:02: e0:27:ea:1a:95:2b:6e:1c:84:95:13:aa:43:79:cc:f3:c9:34: 4d:35:ad:50:f4:6a:f6:82:a0:5d:bc:e2:84:0a:ff:45:57:8c: 14:c7:e0:28:80:13:61:5a:d1:a9:02:4f:70:e6:a4:ee:df:6d: 41:10:03:34:e0:4f:f9:b5:fe:16:71:b5:5c:4e:35:ce:f1:ea: 10:2f:42:80:dd:4f:65:4f:d3:cb:2e:c4:2e:b6:79:3e:53:70: 4c:0d:f9:9c:4a:3a:84:7f:ad:a2:95:2b:7f:1f:48:3e:4f:38: 6d:5c:0e:2d:68:85:d1:6b:40:25:07:26:55:43:6d:e8:33:5f: aa:cd:ac:13:5d:12:10:99:38:46:ea:c9:8f:1b:d1:41:06:cc: f7:ec:f4:02:2b:7a:80:f8:c4:6d:0c:f7:ec:9b:a6:0b:b5:2c: 37:29:2f:2d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCQjg4 QTkxNzg1QTc4MkM4RUEzQ0RERUQzRTdDMUYwOURBNzlGNjQ3MB4XDTI1MDIxMDE0 MjI0OFoXDTI1MDgyNjAxNTcwM1owMzExMC8GA1UEAxMoNjY4MTQyRUE2NDc1QzE3 RDIxMzYyRTdFNzU2QjZBOEZCM0M1MUFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMrQCekEYn8EHrGy98v7JAkHei2ONAD23qtfjTghv3AOk0dUD8DF pSvbz0QI3x84BAXkI7zkMuPYWdqARnxNmV79bk9amxw8r0sXaO0vtjPBamokQQLy MvSvEdLSZxfClgqegSBc0nMgmpPgc3Vab9LwJTMuuZpn0PsUflB8AfjUaGP0OeC7 qxkHbWnoy81HP5cEt9n30TTkpN8/+fYN0lgxAFIvyqTierGZ3BcL8QLhjj4FvDxO YQDXivSqk2P2gXasd8hEfXoDEZt9XpRUyyrqEig+T6Zef/urwOqoJNXl6K3lpf5Z OejchRziww6SfGZcyLOh1j/SbbU8fdsjGtMCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBRmgULqZHXBfSE2Ln51a2qPs8UazTAfBgNVHSMEGDAWgBS7iKkXhaeCyOo83e0+ fB8J2nn2RzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IT1NUSU4v dTRpcEY0V25nc2pxUE4zdFBud2ZDZHA1OWtjLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS91NGlwRjRXbmdzanFQTjN0UG53ZkNkcDU5a2MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IT1NUSU4vWm9GQzZtUjF3WDBoTmk1LWRX dHFqN1BGR3MwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI6 8DANBgkqhkiG9w0BAQsFAAOCAQEA2aWKEkyWfkrjv13lruTj+29PedgIreLL5Yxl /MEYiSTpgLRA1Z0LMfTuVct0TIoEmEnJHqf9WG0K4cS8U+eL0nXaQqdWuWQJSM+2 nTNSpjSPkFmfty2lPmYC4CfqGpUrbhyElROqQ3nM88k0TTWtUPRq9oKgXbzihAr/ RVeMFMfgKIATYVrRqQJPcOak7t9tQRADNOBP+bX+FnG1XE41zvHqEC9CgN1PZU/T yy7ELrZ5PlNwTA35nEo6hH+topUrfx9IPk84bVwOLWiF0WtAJQcmVUNt6DNfqs2s E10SEJk4RurJjxvRQQbM9+z0Ait6gPjEbQz37JumC7UsNykvLQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net