$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/M0Dev59ztJUA5SmcovJexBh2HAM.roa File: M0Dev59ztJUA5SmcovJexBh2HAM.roa (raw, json) Hash identifier: aypTV2m/sV61qmrNoDhZpzZtwyv3heXQsRTjGooAB8Y= Subject key identifier: 33:40:DE:BF:9F:73:B4:95:00:E5:29:9C:A2:F2:5E:C4:18:76:1C:03 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17A7 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/M0Dev59ztJUA5SmcovJexBh2HAM.roa Signing time: Wed 12 Feb 2025 01:36:55 +0000 ROA not before: Wed 12 Feb 2025 01:36:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 800 IP address blocks: 175.111.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6055 (0x17a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3340DEBF9F73B49500E5299CA2F25EC418761C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:4a:58:fc:fa:f6:14:f1:b0:69:da:ad:90: b1:c2:cd:3a:9d:83:44:b0:b6:d6:ec:91:52:fc:90: 5a:23:df:da:3a:9b:c4:c4:83:5b:63:78:11:cf:b6: 8f:05:fd:41:39:98:40:ef:a6:89:ef:2f:4e:28:4d: e6:6f:bd:fb:64:33:de:e1:43:05:57:2b:ed:4e:95: 87:20:a0:5c:1d:4a:17:01:f7:ae:61:05:49:01:57: b7:2e:43:45:67:db:37:a5:94:a0:4f:c1:74:de:d2: a2:6c:e3:64:d7:26:68:73:2f:7e:f6:ed:2d:11:57: 58:c5:65:2f:63:ff:b0:12:ef:81:f2:8d:60:02:60: ad:b8:eb:cc:e8:ab:4a:fa:4a:5e:90:c3:42:24:54: 66:e9:77:33:33:c3:0c:95:ef:64:ce:f7:d1:80:4b: af:73:15:53:74:26:fa:ff:c6:d3:70:df:fe:ba:b0: eb:c4:d8:24:f6:99:f3:c2:4d:6e:6d:5a:bf:9b:e3: 9a:f6:c2:33:b0:b2:e9:2c:32:04:72:c6:3d:3d:76: 8d:7e:2a:bf:e1:10:5e:61:62:c0:95:e8:7a:c4:6c: 33:a6:93:fa:ee:e7:64:1e:da:dd:0c:e1:78:8a:18: d0:c6:5a:c9:0c:4b:4c:40:5b:61:55:e8:8c:d1:e4: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:DE:BF:9F:73:B4:95:00:E5:29:9C:A2:F2:5E:C4:18:76:1C:03 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/M0Dev59ztJUA5SmcovJexBh2HAM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.237.0/24 Signature Algorithm: sha256WithRSAEncryption c5:6d:c2:9a:a2:ea:4b:e3:59:10:d8:da:36:8d:1b:01:25:f5: 18:40:85:22:6f:6f:49:e1:1b:82:ef:21:a6:6b:33:c3:f8:38: df:7b:52:84:d2:b0:60:18:fb:68:c4:f5:34:e8:98:6f:34:16: af:d3:cf:2b:85:86:e3:03:b0:d6:5d:b4:e0:5c:43:7b:53:1c: 4b:ec:cb:eb:aa:63:91:5e:3b:06:d2:f1:e5:07:d6:c9:9a:4a: fd:c2:32:a4:ba:b2:57:f1:75:aa:54:c7:00:82:1a:7e:97:59: fb:b4:da:0f:f7:d0:80:85:0f:b7:cb:7a:6b:40:fe:49:de:4f: 3c:f3:13:41:36:59:42:79:ee:a9:d7:b4:75:18:fe:2c:d5:03: ce:c5:34:51:ef:9b:f9:28:bf:17:d6:ce:32:8d:29:ac:db:94: c1:97:82:e5:bb:11:6c:47:1b:58:00:b5:6d:f4:0e:de:b3:ba: 24:51:a0:27:b6:96:fd:d9:2f:4f:18:57:7e:7d:92:ef:14:5b: cb:fa:70:ae:a9:22:ca:58:33:26:ae:5c:ff:60:1a:2a:e0:7c: 83:40:7b:e2:06:02:d3:2d:df:6d:92:88:c0:10:a2:ff:64:71: 82:96:53:40:82:33:db:53:07:c4:3e:67:c3:e5:e2:2c:6f:7b: 20:c9:51:66 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzNDBERUJGOUY3M0I0 OTUwMEU1Mjk5Q0EyRjI1RUM0MTg3NjFDMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLrkpY/Pr2FPGwadqtkLHCzTqdg0SwttbskVL8kFoj39o6m8TE g1tjeBHPto8F/UE5mEDvponvL04oTeZvvftkM97hQwVXK+1OlYcgoFwdShcB965h BUkBV7cuQ0Vn2zellKBPwXTe0qJs42TXJmhzL3727S0RV1jFZS9j/7AS74HyjWAC YK2468zoq0r6Sl6Qw0IkVGbpdzMzwwyV72TO99GAS69zFVN0Jvr/xtNw3/66sOvE 2CT2mfPCTW5tWr+b45r2wjOwsuksMgRyxj09do1+Kr/hEF5hYsCV6HrEbDOmk/ru 52Qe2t0M4XiKGNDGWskMS0xAW2FV6IzR5Pg7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUM0Dev59ztJUA5SmcovJexBh2HAMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9NMERldjU5enRKVUE1U21jb3ZK ZXhCaDJIQU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/t MA0GCSqGSIb3DQEBCwUAA4IBAQDFbcKaoupL41kQ2No2jRsBJfUYQIUib29J4RuC 7yGmazPD+Djfe1KE0rBgGPtoxPU06JhvNBav088rhYbjA7DWXbTgXEN7UxxL7Mvr qmORXjsG0vHlB9bJmkr9wjKkurJX8XWqVMcAghp+l1n7tNoP99CAhQ+3y3prQP5J 3k888xNBNllCee6p17R1GP4s1QPOxTRR75v5KL8X1s4yjSms25TBl4LluxFsRxtY ALVt9A7es7okUaAntpb92S9PGFd+fZLvFFvL+nCuqSLKWDMmrlz/YBoq4HyDQHvi BgLTLd9tkojAEKL/ZHGCllNAgjPbUwfEPmfD5eIsb3sgyVFm -----END CERTIFICATE-----Generated at Sat Apr 26 12:41:21 2025 by rpki-client