$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-zqYD6UFgL3ERUmG_-fe49xgwrU.roa File: -zqYD6UFgL3ERUmG_-fe49xgwrU.roa (raw, json) Hash identifier: GWqcmqBbWZPvdGAAJR3Wjbx5kyZLIfsELAfGjuU/3uM= Subject key identifier: FB:3A:98:0F:A5:05:80:BD:C4:45:49:86:FF:E7:DE:E3:DC:60:C2:B5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11BB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-zqYD6UFgL3ERUmG_-fe49xgwrU.roa Signing time: Mon 26 Aug 2024 05:17:53 +0000 ROA not before: Mon 26 Aug 2024 05:17:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 203.74.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4539 (0x11bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FB3A980FA50580BDC4454986FFE7DEE3DC60C2B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:0c:af:68:47:a7:93:81:2d:dc:3f:bd:20: 84:4d:11:f6:99:86:a7:1c:a3:1f:16:25:b2:27:e1: 6e:76:ad:e7:78:41:d4:ed:af:88:c8:6b:08:e6:18: 13:fe:e3:21:e1:79:f2:f5:a5:30:c0:d9:a4:2a:7e: 4d:57:ec:34:a8:0e:c9:f1:b3:03:f3:74:f8:6a:eb: 05:82:e6:45:7e:e6:b1:75:4f:23:8d:79:16:02:5c: 93:33:b4:1e:3e:69:ae:26:69:92:ed:04:ab:a0:93: b3:c4:24:ec:35:75:73:c7:dd:2b:7e:93:86:4f:19: d3:67:ce:0e:f5:42:f6:28:0c:67:5d:cb:6c:c1:ab: 1d:10:db:af:81:11:ef:2d:62:0b:2c:96:84:e5:af: 60:15:a9:c6:b5:cf:e7:9b:2a:d5:86:49:23:ee:16: 84:68:de:0b:06:9d:26:0b:0c:e1:28:82:ca:ea:48: 3c:ba:8d:2f:f7:e1:f1:2d:79:5c:10:41:55:b3:05: 9a:62:2e:5e:cf:f3:6a:1f:32:a1:6b:c4:2b:4e:2e: 00:28:87:d5:86:16:7c:55:07:e0:01:d1:b0:82:55: a4:dc:c1:cc:0b:5e:74:72:c3:72:31:e3:cd:97:fe: 98:7f:66:a2:b0:2c:dc:c8:95:24:3a:9e:eb:98:02: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3A:98:0F:A5:05:80:BD:C4:45:49:86:FF:E7:DE:E3:DC:60:C2:B5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-zqYD6UFgL3ERUmG_-fe49xgwrU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.95.0/24 Signature Algorithm: sha256WithRSAEncryption 08:15:57:11:ad:8b:6f:fd:61:1a:9e:6f:ab:4b:72:9b:8a:c7: 76:6a:19:ef:0e:8e:0e:32:3c:1f:92:34:f0:d8:e0:14:65:6a: 18:32:f5:41:bd:b6:65:33:af:47:a8:f3:f7:9b:b3:54:10:3a: 23:8d:14:65:ef:7e:38:f9:48:4d:df:82:d7:39:d7:0b:b7:4f: cb:da:3d:12:28:68:d5:17:b3:48:aa:9f:76:c9:34:1a:00:2d: 52:14:e0:50:50:a7:84:07:4d:cb:4c:18:f6:8a:93:8e:d7:a4: 4e:56:b7:8b:7f:53:3d:e4:52:04:04:aa:78:3a:27:55:50:1b: b0:bb:c5:8b:32:b7:25:07:b7:de:30:09:50:a7:13:52:f5:ca: a9:ea:0e:16:4a:45:c9:62:fb:fa:d0:73:13:7d:47:e4:18:67: 58:ad:aa:fd:f2:c1:01:fb:82:6a:c9:ee:0b:1c:2f:64:c0:63: db:19:f4:08:0d:33:6f:a9:72:f1:31:91:22:52:19:b5:7c:ec: f4:e2:7d:f3:f3:23:fa:ff:0e:a1:9c:9d:45:af:12:dc:8a:a2: 4e:5e:5a:e3:07:2f:87:f4:03:4e:1c:7f:24:bc:5e:72:a3:44: ce:87:5c:9d:d1:29:72:07:83:c2:4f:c1:09:e8:16:bc:db:83: 18:b8:3b:da -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZCM0E5ODBGQTUwNTgw QkRDNDQ1NDk4NkZGRTdERUUzREM2MEMyQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLggyvaEenk4Et3D+9IIRNEfaZhqccox8WJbIn4W52red4QdTt r4jIawjmGBP+4yHhefL1pTDA2aQqfk1X7DSoDsnxswPzdPhq6wWC5kV+5rF1TyON eRYCXJMztB4+aa4maZLtBKugk7PEJOw1dXPH3St+k4ZPGdNnzg71QvYoDGddy2zB qx0Q26+BEe8tYgssloTlr2AVqca1z+ebKtWGSSPuFoRo3gsGnSYLDOEogsrqSDy6 jS/34fEteVwQQVWzBZpiLl7P82ofMqFrxCtOLgAoh9WGFnxVB+AB0bCCVaTcwcwL XnRyw3Ix482X/ph/ZqKwLNzIlSQ6nuuYAg85AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU+zqYD6UFgL3ERUmG/+fe49xgwrUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8tenFZRDZVRmdMM0VSVW1HXy1m ZTQ5eGd3clUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0pf MA0GCSqGSIb3DQEBCwUAA4IBAQAIFVcRrYtv/WEanm+rS3Kbisd2ahnvDo4OMjwf kjTw2OAUZWoYMvVBvbZlM69HqPP3m7NUEDojjRRl7344+UhN34LXOdcLt0/L2j0S KGjVF7NIqp92yTQaAC1SFOBQUKeEB03LTBj2ipOO16ROVreLf1M95FIEBKp4OidV UBuwu8WLMrclB7feMAlQpxNS9cqp6g4WSkXJYvv60HMTfUfkGGdYrar98sEB+4Jq ye4LHC9kwGPbGfQIDTNvqXLxMZEiUhm1fOz04n3z8yP6/w6hnJ1FrxLciqJOXlrj By+H9ANOHH8kvF5yo0TOh1yd0SlyB4PCT8EJ6Ba824MYuDva -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:14 2024 by rpki-client on console-ams.rpki-client.org