$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/0dpDOa-YDZGL0Nz_aNBuWlVrsO8.roa File: 0dpDOa-YDZGL0Nz_aNBuWlVrsO8.roa (raw, json) Hash identifier: RQhxFJBqOXJ0JUyv21Geug9F3enQw6j8UWgMIRoTgTI= Subject key identifier: D1:DA:43:39:AF:98:0D:91:8B:D0:DC:FF:68:D0:6E:5A:55:6B:B0:EF Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11F6 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0dpDOa-YDZGL0Nz_aNBuWlVrsO8.roa Signing time: Mon 26 Aug 2024 05:18:07 +0000 ROA not before: Mon 26 Aug 2024 05:18:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 137280 IP address blocks: 203.69.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4598 (0x11f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D1DA4339AF980D918BD0DCFF68D06E5A556BB0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:67:a7:ce:a1:f8:42:55:95:7f:8f:bc:64: 67:54:df:15:7b:b7:ed:fd:cc:67:f3:b6:7b:b0:cb: 63:51:76:f9:7a:c4:2a:ef:f1:87:db:e3:08:bc:e2: 7c:74:33:37:70:c6:15:60:9d:d3:9d:e1:99:1a:2f: 0b:98:1c:0c:f3:6a:dc:ac:fa:81:00:27:ac:8d:72: 09:c2:ee:3d:38:24:89:b1:c8:38:98:a8:99:83:19: 8a:ed:62:1e:65:ce:99:82:51:a1:0a:06:a4:95:a2: 07:28:5e:b4:b7:94:61:3e:d6:7a:b2:d0:52:52:60: 99:dc:d4:17:ce:87:74:d5:4e:8a:03:a5:eb:4f:26: 2d:79:78:3f:ab:07:d4:c9:f9:43:26:44:45:8a:59: 0c:ae:f8:44:15:eb:25:e6:d3:70:97:a8:f4:dc:3c: 67:1b:7c:26:01:10:c6:66:09:f6:73:5d:9c:dc:97: 41:4e:f7:ad:42:c5:1c:c5:72:d7:25:d0:5b:95:d2: bc:d1:45:85:43:9f:89:5a:85:30:23:9d:19:84:12: 16:c8:82:ec:fa:88:4d:3b:10:4d:4c:cd:d6:d0:3d: f2:78:53:23:8c:67:97:1b:04:a5:b5:cd:ec:83:c6: 53:47:21:f8:62:fd:7d:f3:c0:b7:6f:4c:27:c4:dc: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DA:43:39:AF:98:0D:91:8B:D0:DC:FF:68:D0:6E:5A:55:6B:B0:EF X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0dpDOa-YDZGL0Nz_aNBuWlVrsO8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.33.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e6:fc:ff:98:ce:98:3d:43:fb:86:fe:c0:34:7a:c0:91:b7: 61:92:b9:9a:da:e2:18:4e:c1:6c:86:d3:bf:1c:db:2a:59:c2: cc:17:35:4e:ad:76:d8:de:e0:41:9b:a3:15:0d:80:06:d0:49: 9e:77:12:b5:65:98:18:1d:b1:9d:7e:ba:6e:7c:b0:bb:36:89: 2f:5b:b8:d1:c3:bf:68:9e:74:d4:69:f0:48:ab:9f:ae:52:88: 60:04:7c:67:06:5e:b4:fd:63:d6:43:9e:d7:b6:74:ed:29:0f: 25:07:06:70:25:5f:ae:d1:99:4f:bd:70:25:91:93:2a:94:9b: 2b:91:79:34:5a:89:95:c8:ad:24:36:1c:5c:ba:9d:82:57:d0: 29:3c:81:29:17:bf:66:a6:a5:be:0d:01:3b:4b:56:54:8c:f4: 0a:68:02:12:24:97:4c:82:00:16:d2:1f:20:77:7a:56:1c:04: 51:f1:f1:49:44:5a:f2:9b:ad:65:27:c5:56:51:c4:48:f6:3e: ba:5b:b0:7a:6e:9a:d8:73:15:08:31:6d:a7:b2:17:63:45:10: 9a:8c:87:56:ca:7a:59:d7:df:8c:4e:d1:0b:fc:cf:07:91:b2: 89:8b:5f:68:32:a6:ee:f9:f4:72:30:42:5c:56:4f:7d:3c:98: 42:fc:ae:f8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxREE0MzM5QUY5ODBE OTE4QkQwRENGRjY4RDA2RTVBNTU2QkIwRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz0GenzqH4QlWVf4+8ZGdU3xV7t+39zGfztnuwy2NRdvl6xCrv 8Yfb4wi84nx0MzdwxhVgndOd4ZkaLwuYHAzzatys+oEAJ6yNcgnC7j04JImxyDiY qJmDGYrtYh5lzpmCUaEKBqSVogcoXrS3lGE+1nqy0FJSYJnc1BfOh3TVTooDpetP Ji15eD+rB9TJ+UMmREWKWQyu+EQV6yXm03CXqPTcPGcbfCYBEMZmCfZzXZzcl0FO 961CxRzFctcl0FuV0rzRRYVDn4lahTAjnRmEEhbIguz6iE07EE1MzdbQPfJ4UyOM Z5cbBKW1zeyDxlNHIfhi/X3zwLdvTCfE3L1fAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU0dpDOa+YDZGL0Nz/aNBuWlVrsO8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8wZHBET2EtWURaR0wwTnpfYU5C dVdsVnJzTzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Uh MA0GCSqGSIb3DQEBCwUAA4IBAQAm5vz/mM6YPUP7hv7ANHrAkbdhkrma2uIYTsFs htO/HNsqWcLMFzVOrXbY3uBBm6MVDYAG0EmedxK1ZZgYHbGdfrpufLC7NokvW7jR w79onnTUafBIq5+uUohgBHxnBl60/WPWQ57XtnTtKQ8lBwZwJV+u0ZlPvXAlkZMq lJsrkXk0WomVyK0kNhxcup2CV9ApPIEpF79mpqW+DQE7S1ZUjPQKaAISJJdMggAW 0h8gd3pWHARR8fFJRFrym61lJ8VWUcRI9j66W7B6bprYcxUIMW2nshdjRRCajIdW ynpZ19+MTtEL/M8HkbKJi19oMqbu+fRyMEJcVk99PJhC/K74 -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org