$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/D1_UdVyDUWLxY7RTs3vq5g293E8.roa File: D1_UdVyDUWLxY7RTs3vq5g293E8.roa (raw, json) Hash identifier: JwFvabh+Of0h9duu38aCyLtKA8Ftio7MJyQaJScyjY0= Subject key identifier: 0F:5F:D4:75:5C:83:51:62:F1:63:B4:53:B3:7B:EA:E6:0D:BD:DC:4F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17AA Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/D1_UdVyDUWLxY7RTs3vq5g293E8.roa Signing time: Wed 12 Feb 2025 01:36:56 +0000 ROA not before: Wed 12 Feb 2025 01:36:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 218.160.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6058 (0x17aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0F5FD4755C835162F163B453B37BEAE60DBDDC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:cd:4a:e5:7d:a8:c4:9b:22:3d:42:ea:30: ff:26:b3:2d:51:14:f5:14:1a:84:ae:98:58:b4:4d: d0:c0:c3:14:d2:69:1e:c7:ca:55:4f:dd:76:ca:55: ea:b7:97:1c:be:27:d2:83:40:09:4f:8e:14:65:2b: d5:98:7e:e1:0b:c6:09:72:20:bb:d2:03:e0:b0:16: 82:0b:bd:be:27:d9:c8:9d:32:2c:18:2f:5c:c6:73: ff:9b:a3:25:f1:fe:3f:32:27:09:cc:c2:8a:a7:4c: 23:0f:1d:fa:d9:03:6f:cf:f4:20:76:32:d0:43:c0: fc:78:0e:a3:1f:fb:b2:a1:d7:4f:d6:a3:1b:aa:8c: 31:62:d2:b0:c8:e2:f0:c8:6c:32:79:2b:a4:a5:f7: 43:65:ee:30:a0:49:ad:89:a2:01:03:93:38:b9:77: 11:cc:21:28:87:49:bc:8e:40:0b:b3:25:d3:5c:8f: a7:ca:e0:6c:5b:74:96:8e:50:01:6e:3f:39:f5:0f: 93:f4:ae:e5:f9:bf:82:7c:9f:43:3e:71:71:ea:8e: b2:50:ab:b8:b4:4d:84:c2:20:fb:56:1e:42:a5:b8: 62:75:1b:88:5d:f7:a7:ac:1d:c3:5b:04:e4:67:42: 75:d9:19:b1:04:0d:e1:cc:d2:a7:65:a6:c5:cc:63: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5F:D4:75:5C:83:51:62:F1:63:B4:53:B3:7B:EA:E6:0D:BD:DC:4F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/D1_UdVyDUWLxY7RTs3vq5g293E8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.160.0.0/14 Signature Algorithm: sha256WithRSAEncryption 54:f3:44:3f:ba:28:e4:4f:9e:aa:86:9b:46:94:d0:d1:a3:d6: 7e:77:05:c6:fb:81:90:dd:6c:15:4d:a2:d8:b3:a8:f3:87:85: f5:c6:58:84:65:a7:25:cf:fc:43:89:46:cd:26:41:f6:75:ad: 88:1a:a8:75:b2:65:24:f3:33:2e:66:5a:a8:c5:3d:90:8b:a0: ce:7d:5c:6c:1c:df:b9:44:6c:c9:20:8e:a7:61:55:e0:4f:e4: 63:88:20:61:75:71:00:db:ad:cd:f1:f6:03:06:ab:35:f0:de: 25:31:34:9b:d7:03:00:98:37:17:eb:88:b7:17:00:c5:42:3e: 42:29:9f:73:16:d5:06:f0:2c:fc:31:ee:ee:18:b1:29:54:9e: 5c:67:d2:d9:ca:c5:eb:88:92:fa:66:7d:53:84:80:97:b6:ac: 9d:5e:93:19:50:e8:fc:df:85:9f:df:b8:37:d7:9c:33:2d:a9: 1e:4b:0a:3f:44:62:c0:2e:f3:75:76:ed:51:24:53:7a:89:08: a8:a7:a2:d8:1b:c5:2e:aa:93:01:eb:25:70:56:8a:0f:60:3e: 38:08:c0:31:49:94:16:4e:2c:6d:1f:3d:d5:72:bb:84:55:06: ee:5d:9e:dc:30:80:0f:63:ab:24:23:fa:8a:dc:ff:28:e8:45: d9:b4:78:17 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGNUZENDc1NUM4MzUx NjJGMTYzQjQ1M0IzN0JFQUU2MERCRERDNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIxs1K5X2oxJsiPULqMP8msy1RFPUUGoSumFi0TdDAwxTSaR7H ylVP3XbKVeq3lxy+J9KDQAlPjhRlK9WYfuELxglyILvSA+CwFoILvb4n2cidMiwY L1zGc/+boyXx/j8yJwnMwoqnTCMPHfrZA2/P9CB2MtBDwPx4DqMf+7Kh10/Woxuq jDFi0rDI4vDIbDJ5K6Sl90Nl7jCgSa2JogEDkzi5dxHMISiHSbyOQAuzJdNcj6fK 4GxbdJaOUAFuPzn1D5P0ruX5v4J8n0M+cXHqjrJQq7i0TYTCIPtWHkKluGJ1G4hd 96esHcNbBORnQnXZGbEEDeHM0qdlpsXMY5CZAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUD1/UdVyDUWLxY7RTs3vq5g293E8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9EMV9VZFZ5RFVXTHhZN1JUczN2 cTVnMjkzRTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC2qAw DQYJKoZIhvcNAQELBQADggEBAFTzRD+6KORPnqqGm0aU0NGj1n53Bcb7gZDdbBVN otizqPOHhfXGWIRlpyXP/EOJRs0mQfZ1rYgaqHWyZSTzMy5mWqjFPZCLoM59XGwc 37lEbMkgjqdhVeBP5GOIIGF1cQDbrc3x9gMGqzXw3iUxNJvXAwCYNxfriLcXAMVC PkIpn3MW1QbwLPwx7u4YsSlUnlxn0tnKxeuIkvpmfVOEgJe2rJ1ekxlQ6PzfhZ/f uDfXnDMtqR5LCj9EYsAu83V27VEkU3qJCKinotgbxS6qkwHrJXBWig9gPjgIwDFJ lBZOLG0fPdVyu4RVBu5dntwwgA9jqyQj+orc/yjoRdm0eBc= -----END CERTIFICATE-----Generated at Sun Apr 27 05:13:48 2025 by rpki-client