$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/s-dsAocyTa5G_gN8Y5EwAwilIM8.roa File: s-dsAocyTa5G_gN8Y5EwAwilIM8.roa (raw, json) Hash identifier: tkldwl20t4x/ZL+rsDmYQKhO9k6Jy03o55PvByaM4Js= Subject key identifier: B3:E7:6C:02:87:32:4D:AE:46:FE:03:7C:63:91:30:03:08:A5:20:CF Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1774 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/s-dsAocyTa5G_gN8Y5EwAwilIM8.roa Signing time: Wed 12 Feb 2025 01:36:43 +0000 ROA not before: Wed 12 Feb 2025 01:36:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10126 IP address blocks: 175.111.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6004 (0x1774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B3E76C0287324DAE46FE037C6391300308A520CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:28:05:4c:85:67:9f:d7:7e:3d:16:63:03: 12:5c:39:f0:29:ca:b1:7f:7c:2f:62:d1:4d:0c:c1: 1b:a6:f6:e9:f4:be:da:5b:82:cd:72:f5:41:da:9b: 7f:e1:3e:21:af:0a:dd:1b:b0:91:e5:a5:16:97:9d: c8:03:42:7c:58:8b:9b:8b:0e:3a:29:7b:82:19:4d: 59:98:eb:72:1b:ea:17:1c:e6:c8:a0:c1:f9:8b:c1: 5e:24:9d:9b:99:7f:2f:cb:6e:c9:47:aa:d2:3a:0f: d4:85:92:91:12:7f:cc:40:4c:23:67:44:58:3c:13: 3e:cc:91:cb:1a:77:19:3f:77:39:d9:87:b4:3d:9c: 18:ba:b0:c4:fb:c3:98:d6:ad:ef:c8:7a:84:8d:4f: bf:89:36:41:26:11:d7:68:85:61:89:69:72:a2:17: 1f:f8:1e:d5:13:a9:07:4f:54:44:8f:f7:4e:e9:09: bb:d5:e9:91:aa:18:09:00:b2:be:b9:da:cc:8f:b0: 92:17:12:8c:b6:9c:c3:c9:9d:91:70:01:d4:ab:f0: d4:ee:fd:ba:65:56:d1:de:6d:4e:53:f7:c8:c0:83: 17:f2:91:d1:01:d6:53:04:b2:66:9c:65:d6:47:8b: 7f:9b:77:de:31:f6:a0:69:cb:68:32:b3:23:6b:6d: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E7:6C:02:87:32:4D:AE:46:FE:03:7C:63:91:30:03:08:A5:20:CF X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/s-dsAocyTa5G_gN8Y5EwAwilIM8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.192.0/18 Signature Algorithm: sha256WithRSAEncryption 77:d9:5c:3c:d4:1e:58:48:64:85:4e:61:27:e7:ec:0c:40:5c: 62:cd:17:ab:00:4f:e4:ef:0c:3a:96:da:fd:80:f2:9a:f6:49: 2f:d2:25:24:d8:29:0b:ff:c1:ab:36:21:a5:e7:52:bf:33:33: 4c:4a:20:d6:37:3c:95:9b:0c:41:35:47:ca:18:d2:be:c6:5a: 92:1d:0d:03:20:fb:99:32:f3:78:44:a8:91:ca:0a:d8:71:40: 6c:6d:9f:42:09:9c:16:42:6e:d6:be:d0:d5:2a:84:25:38:83: 91:4e:eb:cf:5d:20:de:33:e1:4c:56:84:46:42:4a:34:3c:78: b0:2d:46:cc:a4:b6:c5:b9:2b:45:09:41:46:d9:f0:1c:07:4a: 9b:57:0b:37:20:80:29:e7:c8:77:01:09:f9:dc:9f:3e:56:aa: 4a:57:ba:f9:08:41:66:62:55:51:47:98:bb:4f:f9:e3:18:8c: 74:e1:aa:3b:5c:0a:35:35:e8:4f:fc:46:eb:b0:df:af:1c:77: 9c:d1:3b:66:b6:12:f2:2b:7c:7c:66:43:4f:39:09:df:21:b8: 07:5a:86:b7:38:c1:cf:cb:36:76:e6:3a:48:4a:17:3d:72:28: 59:8d:2d:df:6b:0d:cc:90:89:19:2b:5b:b8:87:16:5a:a7:56: 06:ac:16:cb -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzRTc2QzAyODczMjRE QUU0NkZFMDM3QzYzOTEzMDAzMDhBNTIwQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFigFTIVnn9d+PRZjAxJcOfApyrF/fC9i0U0MwRum9un0vtpb gs1y9UHam3/hPiGvCt0bsJHlpRaXncgDQnxYi5uLDjope4IZTVmY63Ib6hcc5sig wfmLwV4knZuZfy/LbslHqtI6D9SFkpESf8xATCNnRFg8Ez7Mkcsadxk/dznZh7Q9 nBi6sMT7w5jWre/IeoSNT7+JNkEmEddohWGJaXKiFx/4HtUTqQdPVESP907pCbvV 6ZGqGAkAsr652syPsJIXEoy2nMPJnZFwAdSr8NTu/bplVtHebU5T98jAgxfykdEB 1lMEsmacZdZHi3+bd94x9qBpy2gysyNrbUENAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUs+dsAocyTa5G/gN8Y5EwAwilIM8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9zLWRzQW9jeVRhNUdfZ044WTVF d0F3aWxJTTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGr2/A MA0GCSqGSIb3DQEBCwUAA4IBAQB32Vw81B5YSGSFTmEn5+wMQFxizRerAE/k7ww6 ltr9gPKa9kkv0iUk2CkL/8GrNiGl51K/MzNMSiDWNzyVmwxBNUfKGNK+xlqSHQ0D IPuZMvN4RKiRygrYcUBsbZ9CCZwWQm7WvtDVKoQlOIORTuvPXSDeM+FMVoRGQko0 PHiwLUbMpLbFuStFCUFG2fAcB0qbVws3IIAp58h3AQn53J8+VqpKV7r5CEFmYlVR R5i7T/njGIx04ao7XAo1NehP/EbrsN+vHHec0TtmthLyK3x8ZkNPOQnfIbgHWoa3 OMHPyzZ25jpIShc9cihZjS3faw3MkIkZK1u4hxZap1YGrBbL -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:16 2025 by rpki-client