$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/37m55q8rPi-s8nFwCeVyCOSrtVA.roa File: 37m55q8rPi-s8nFwCeVyCOSrtVA.roa (raw, json) Hash identifier: hvvPH2UgnnsQfW8HNKz5oYib/Np/6lSmMwGI8+poTRg= Subject key identifier: DF:B9:B9:E6:AF:2B:3E:2F:AC:F2:71:70:09:E5:72:08:E4:AB:B5:50 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1196 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/37m55q8rPi-s8nFwCeVyCOSrtVA.roa Signing time: Mon 26 Aug 2024 05:17:42 +0000 ROA not before: Mon 26 Aug 2024 05:17:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 210.65.144.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4502 (0x1196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DFB9B9E6AF2B3E2FACF2717009E57208E4ABB550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:e7:6b:eb:c5:50:b3:2e:77:c8:2a:5c:2a: a2:0b:2e:3e:a3:90:cc:38:7e:4b:06:b0:7b:17:a3: 7b:2c:f6:5d:8e:0b:d0:0e:9d:fa:51:41:2f:88:d9: 5f:cd:69:59:84:41:12:7a:ce:cd:29:e3:85:86:d9: d0:41:44:e3:29:ee:d9:7c:2a:68:56:51:6c:2c:74: a3:b9:15:37:f2:10:76:aa:85:16:d0:17:48:4b:2f: 52:15:66:c1:1a:33:30:bf:31:63:79:27:1c:3e:2e: 62:6d:e4:ce:02:1b:b0:3a:c8:42:3f:a7:f7:4a:d8: 2d:5d:60:c4:0c:56:f5:f2:47:f5:fd:da:f6:90:14: 5c:71:07:ea:88:0a:23:6e:dc:76:5d:8c:0a:69:a6: 27:ef:e0:4d:55:a7:ac:ea:a3:39:e3:f2:b6:11:89: 38:d5:e9:2d:cf:a6:a7:8d:58:c7:f3:c7:f6:91:90: fc:db:8f:7b:b4:7e:97:88:33:4c:e5:a0:7b:3c:97: 9f:0b:ab:d1:c9:97:23:fe:f8:69:59:81:f7:b2:b7: 6c:68:71:ae:44:ec:9a:42:be:0d:bb:9a:b7:d1:69: 3f:41:df:68:28:cb:5d:c1:23:42:cc:ca:aa:62:65: 01:e3:f3:bc:3d:7b:60:98:44:69:81:c9:ba:94:50: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:B9:E6:AF:2B:3E:2F:AC:F2:71:70:09:E5:72:08:E4:AB:B5:50 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/37m55q8rPi-s8nFwCeVyCOSrtVA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.144.128/26 Signature Algorithm: sha256WithRSAEncryption 8e:c6:4d:a4:a8:11:3e:2f:db:fa:68:be:ad:22:29:84:6e:85: 85:09:1d:cb:86:79:4f:22:b0:d0:fd:88:c6:1a:43:79:d4:99: 73:e6:b6:dc:d9:48:36:c6:8c:4d:17:ea:33:23:dc:9c:71:8e: e8:57:0e:e6:29:7d:18:17:7f:41:ed:a4:dd:a5:ae:10:cc:a0: 2b:ad:06:20:0d:ff:8c:a1:e0:0e:e4:7d:1e:df:1b:ac:0f:8d: 22:12:31:bf:38:9f:e7:b1:7d:06:d9:77:d6:3b:7e:9d:be:44: 39:02:65:ca:7a:38:d2:27:86:93:a9:1a:6e:52:97:68:71:65: e7:de:45:b4:58:db:bc:56:13:0d:af:b0:e9:63:3e:df:ca:5f: 21:9b:91:b3:82:4d:af:79:78:cf:b1:d8:e3:86:5e:26:15:d1: 63:3b:d9:9c:10:d9:ec:15:67:28:72:1e:24:bc:cf:a1:1f:f4: b4:57:a0:74:84:83:5b:43:ae:d9:49:66:6f:69:cd:bb:ba:de: 06:8c:7f:27:e8:b9:6d:69:e3:d8:65:28:f0:36:2a:a7:e5:c6: 22:ce:f7:64:37:ae:f9:b3:47:70:9d:7c:c1:6f:b6:4d:fe:f3: 2e:3c:11:c0:51:63:93:41:fe:eb:4c:2b:32:f1:ea:0f:22:11: f3:6a:82:0a -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGQjlCOUU2QUYyQjNF MkZBQ0YyNzE3MDA5RTU3MjA4RTRBQkI1NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnCudr68VQsy53yCpcKqILLj6jkMw4fksGsHsXo3ss9l2OC9AO nfpRQS+I2V/NaVmEQRJ6zs0p44WG2dBBROMp7tl8KmhWUWwsdKO5FTfyEHaqhRbQ F0hLL1IVZsEaMzC/MWN5Jxw+LmJt5M4CG7A6yEI/p/dK2C1dYMQMVvXyR/X92vaQ FFxxB+qICiNu3HZdjApppifv4E1Vp6zqoznj8rYRiTjV6S3PpqeNWMfzx/aRkPzb j3u0fpeIM0zloHs8l58Lq9HJlyP++GlZgfeyt2xoca5E7JpCvg27mrfRaT9B32go y13BI0LMyqpiZQHj87w9e2CYRGmBybqUUPpfAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU37m55q8rPi+s8nFwCeVyCOSrtVAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8zN201NXE4clBpLXM4bkZ3Q2VW eUNPU3J0VkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0kGQ gDANBgkqhkiG9w0BAQsFAAOCAQEAjsZNpKgRPi/b+mi+rSIphG6FhQkdy4Z5TyKw 0P2IxhpDedSZc+a23NlINsaMTRfqMyPcnHGO6FcO5il9GBd/Qe2k3aWuEMygK60G IA3/jKHgDuR9Ht8brA+NIhIxvzif57F9Btl31jt+nb5EOQJlyno40ieGk6kablKX aHFl595FtFjbvFYTDa+w6WM+38pfIZuRs4JNr3l4z7HY44ZeJhXRYzvZnBDZ7BVn KHIeJLzPoR/0tFegdISDW0Ou2Ulmb2nNu7reBox/J+i5bWnj2GUo8DYqp+XGIs73 ZDeu+bNHcJ18wW+2Tf7zLjwRwFFjk0H+60wrMvHqDyIR82qCCg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:14 2024 by rpki-client on console-ams.rpki-client.org