$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-FrI4DHNaeWOOnOomEiJEtWLplI.roa File: -FrI4DHNaeWOOnOomEiJEtWLplI.roa (raw, json) Hash identifier: b4bu40zsfvfc+1t9BBqab9qkPdSTMV5XVgIP2AXmfuM= Subject key identifier: F8:5A:C8:E0:31:CD:69:E5:8E:3A:73:A8:98:48:89:12:D5:8B:A6:52 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11BE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-FrI4DHNaeWOOnOomEiJEtWLplI.roa Signing time: Mon 26 Aug 2024 05:17:53 +0000 ROA not before: Mon 26 Aug 2024 05:17:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 21859 IP address blocks: 210.61.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4542 (0x11be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F85AC8E031CD69E58E3A73A898488912D58BA652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:82:be:3d:bd:c3:fa:ba:2a:52:6d:49:70: 60:0d:e4:f0:50:dc:27:8f:72:5b:17:fd:6a:62:64: e3:65:ff:9c:d7:49:01:4b:49:f9:4c:3c:ee:b7:de: 3f:05:8b:f2:21:8e:8c:e3:34:b2:79:54:e3:0d:04: 71:2f:e8:f5:7c:db:0f:f2:55:56:c0:b9:4d:08:a6: c7:fd:68:90:1f:a3:8a:02:04:12:3d:72:e4:8e:4a: 0a:7d:22:87:ee:42:5f:0e:65:2e:64:03:58:84:94: d1:cb:65:1c:9d:d5:5f:48:4a:b8:f8:1d:0a:58:12: c0:69:52:ff:52:a3:99:e1:bd:ed:93:a7:a8:9a:71: 3c:e8:38:06:fd:29:3e:34:10:2b:e4:c6:02:37:af: b5:db:44:60:42:b3:24:ca:41:12:45:00:86:bf:b6: 29:27:23:bd:05:80:46:e7:84:01:bb:f6:c5:0e:65: a7:58:08:51:0e:f9:2d:7f:0d:a4:4c:44:81:03:ad: d2:ef:77:4d:69:8d:74:f8:2b:49:f5:20:7c:dc:41: 08:10:9c:f8:e7:4f:9b:89:32:53:0f:b0:10:4a:57: 29:21:b8:a8:e6:19:db:b1:aa:a9:07:de:c2:23:ca: 03:70:07:4f:3a:fa:dd:d1:b7:90:04:95:66:71:ed: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5A:C8:E0:31:CD:69:E5:8E:3A:73:A8:98:48:89:12:D5:8B:A6:52 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-FrI4DHNaeWOOnOomEiJEtWLplI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.104.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b9:f4:e3:7f:40:de:ab:17:d7:fe:c5:17:92:87:1c:46:82: 88:03:96:66:88:7a:0d:1e:9a:ab:91:99:35:fe:6d:8c:f7:72: e5:35:ac:be:4c:45:f7:e3:e5:e8:49:4e:af:7a:77:9a:39:c5: f4:6c:2d:2a:22:d4:bb:66:c9:e5:92:ad:09:26:10:30:5f:82: 88:02:1f:ae:49:85:d9:60:05:f0:a7:8a:14:2c:a6:15:f4:40: 76:98:7f:44:db:e2:7c:68:27:8b:24:ec:ec:2c:9a:7a:bd:95: ca:04:1f:cd:83:06:4b:ac:95:a6:0e:ef:e6:5e:bd:92:7b:72: e0:5f:8d:da:29:3e:4e:83:a0:92:d7:49:95:12:f5:f1:13:b2: 21:5e:60:d9:cc:41:63:5b:1c:d7:b4:1c:55:ee:06:be:dd:19: 5e:65:9b:79:48:0a:10:a1:e3:34:6f:a1:4c:17:76:e2:3d:35: f9:79:01:0a:b1:f7:61:c9:e9:dd:cc:7e:a2:0f:7b:43:fa:f7: f3:da:a0:9e:18:ee:6f:bb:4e:41:8e:68:73:d9:6a:b7:05:b3: 47:04:aa:9d:cc:17:bf:e6:ab:69:a0:7a:ea:35:94:ff:9a:1c: 31:1e:84:9c:05:c6:ed:88:1a:9c:ae:af:f4:9c:45:e6:5c:63: 6d:45:47:76 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4NUFDOEUwMzFDRDY5 RTU4RTNBNzNBODk4NDg4OTEyRDU4QkE2NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5xYK+Pb3D+roqUm1JcGAN5PBQ3CePclsX/WpiZONl/5zXSQFL SflMPO633j8Fi/IhjozjNLJ5VOMNBHEv6PV82w/yVVbAuU0Ipsf9aJAfo4oCBBI9 cuSOSgp9IofuQl8OZS5kA1iElNHLZRyd1V9ISrj4HQpYEsBpUv9So5nhve2Tp6ia cTzoOAb9KT40ECvkxgI3r7XbRGBCsyTKQRJFAIa/tiknI70FgEbnhAG79sUOZadY CFEO+S1/DaRMRIEDrdLvd01pjXT4K0n1IHzcQQgQnPjnT5uJMlMPsBBKVykhuKjm GduxqqkH3sIjygNwB086+t3Rt5AElWZx7UqjAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU+FrI4DHNaeWOOnOomEiJEtWLplIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8tRnJJNERITmFlV09Pbk9vbUVp SkV0V0xwbEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j1o MA0GCSqGSIb3DQEBCwUAA4IBAQA5ufTjf0DeqxfX/sUXkoccRoKIA5ZmiHoNHpqr kZk1/m2M93LlNay+TEX34+XoSU6veneaOcX0bC0qItS7Zsnlkq0JJhAwX4KIAh+u SYXZYAXwp4oULKYV9EB2mH9E2+J8aCeLJOzsLJp6vZXKBB/NgwZLrJWmDu/mXr2S e3LgX43aKT5Og6CS10mVEvXxE7IhXmDZzEFjWxzXtBxV7ga+3RleZZt5SAoQoeM0 b6FMF3biPTX5eQEKsfdhyendzH6iD3tD+vfz2qCeGO5vu05Bjmhz2Wq3BbNHBKqd zBe/5qtpoHrqNZT/mhwxHoScBcbtiBqcrq/0nEXmXGNtRUd2 -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:14 2024 by rpki-client on console-ams.rpki-client.org