$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa File: hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa (raw, json) Hash identifier: hnRAgA5tioWM6eUHykz79dm43Ev/n4g0/tX6dyIVNDA= Subject key identifier: 86:4B:19:EE:64:3B:6D:B4:20:99:7A:92:72:04:88:82:A2:C5:35:F5 Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 0703 Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa Signing time: Mon 10 Feb 2025 14:22:51 +0000 ROA not before: Mon 10 Feb 2025 14:22:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 2401:95c0:2d03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Feb 10 14:22:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=864B19EE643B6DB420997A9272048882A2C535F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:b0:f8:ff:42:3a:ac:74:a1:56:6e:6c:f5: 26:fe:c5:0c:34:bd:a5:ae:26:41:36:3e:72:b7:27: ff:9d:dc:87:4c:7c:92:10:3b:2d:08:54:6c:07:ed: 95:97:ab:7a:cf:18:a7:fc:3e:7d:2b:40:88:fe:71: a8:a3:d0:24:0e:79:53:84:b1:b4:23:de:a1:f3:1f: 0e:cf:48:1a:31:3e:2c:8c:74:6f:15:8f:74:e1:f6: 02:64:89:01:05:53:30:2b:06:91:c1:b1:58:d4:31: a4:15:50:66:f6:09:8b:e4:ff:f0:b2:7b:c2:14:6a: bb:7b:dd:47:ac:db:1e:96:cc:cd:03:f1:2e:c0:9d: 88:1c:cf:a8:3c:7f:af:48:d2:79:a0:97:d5:9d:02: 29:96:4f:d1:2a:b1:4a:28:e1:e5:60:93:46:34:5f: 1c:71:58:3c:7f:04:31:3f:f6:43:7c:9c:b4:16:2e: 51:66:da:0d:f4:f5:91:74:bd:f6:9d:23:c2:19:bd: 88:31:b5:a2:cb:70:bd:37:a6:2d:30:da:ec:90:a4: b2:89:89:13:56:ea:25:45:39:16:c1:62:6c:dd:11: c5:49:35:c1:62:07:ca:f4:c4:01:68:38:6a:da:3a: ff:87:90:6d:2e:c5:38:aa:ba:82:0c:ec:fc:4b:16: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4B:19:EE:64:3B:6D:B4:20:99:7A:92:72:04:88:82:A2:C5:35:F5 X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:95c0:2d03::/48 Signature Algorithm: sha256WithRSAEncryption 1e:09:dd:1d:14:16:43:0d:0c:61:aa:e3:d3:4d:12:4b:38:1c: bb:70:de:9b:2b:98:07:ed:1b:9f:53:25:8d:4f:3a:97:d4:4c: c4:4f:68:33:74:7c:cb:a6:4d:2e:26:11:fb:8d:2c:64:b5:59: 13:8a:e4:39:04:06:13:f4:83:47:99:7f:06:69:bd:b6:a1:4e: d7:e8:81:a7:c4:18:61:3c:e7:c6:a4:8f:77:13:6b:e2:ca:30: 76:37:59:0d:dc:17:a8:78:39:87:a5:fc:5e:14:97:52:5c:03: 37:fa:0e:2a:79:96:bd:cf:27:c1:b1:a9:8c:28:71:5e:0a:39: 84:84:6f:05:c9:57:99:34:8f:ec:66:2f:ed:cd:c3:eb:fe:b9: de:f6:fe:5f:89:11:50:30:66:ca:a9:77:20:76:fd:e8:d1:a7: 6d:c0:88:6b:dd:b8:4f:90:c7:5b:c6:d6:e0:f2:a1:ff:e6:af: 7d:46:f2:84:d2:ce:3d:2c:e7:1b:b8:4c:26:7d:bd:25:e5:1a: 27:63:18:0b:bd:a7:8b:a0:3c:e6:8b:a2:f0:14:29:9c:89:8b: 61:41:35:8a:cd:13:ca:84:6e:ca:35:fd:94:bb:23:e2:2f:d3: ad:1c:38:6c:84:41:ec:6c:50:0f:71:79:bf:c5:84:55:b5:19: 87:7c:98:36 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTAyMTAx NDIyNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg2NEIxOUVFNjQzQjZE QjQyMDk5N0E5MjcyMDQ4ODgyQTJDNTM1RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDew7D4/0I6rHShVm5s9Sb+xQw0vaWuJkE2PnK3J/+d3IdMfJIQ Oy0IVGwH7ZWXq3rPGKf8Pn0rQIj+caij0CQOeVOEsbQj3qHzHw7PSBoxPiyMdG8V j3Th9gJkiQEFUzArBpHBsVjUMaQVUGb2CYvk//Cye8IUart73Ues2x6WzM0D8S7A nYgcz6g8f69I0nmgl9WdAimWT9EqsUoo4eVgk0Y0XxxxWDx/BDE/9kN8nLQWLlFm 2g309ZF0vfadI8IZvYgxtaLLcL03pi0w2uyQpLKJiRNW6iVFORbBYmzdEcVJNcFi B8r0xAFoOGraOv+HkG0uxTiquoIM7PxLFvDRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhksZ7mQ7bbQgmXqScgSIgqLFNfUwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL2hrc1o3bVE3YmJRZ21YcVNj Z1NJZ3FMRk5mVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AZXALQMwDQYJKoZIhvcNAQELBQADggEBAB4J3R0UFkMNDGGq49NNEks4HLtw3psr mAftG59TJY1POpfUTMRPaDN0fMumTS4mEfuNLGS1WROK5DkEBhP0g0eZfwZpvbah TtfogafEGGE858akj3cTa+LKMHY3WQ3cF6h4OYel/F4Ul1JcAzf6Dip5lr3PJ8Gx qYwocV4KOYSEbwXJV5k0j+xmL+3Nw+v+ud72/l+JEVAwZsqpdyB2/ejRp23AiGvd uE+Qx1vG1uDyof/mr31G8oTSzj0s5xu4TCZ9vSXlGidjGAu9p4ugPOaLovAUKZyJ i2FBNYrNE8qEbso1/ZS7I+Iv060cOGyEQexsUA9xeb/FhFW1GYd8mDY= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net