$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/4wJfqhbgeHKnDAev2hwCCzMcels.roa File: 4wJfqhbgeHKnDAev2hwCCzMcels.roa (raw, json) Hash identifier: F2VjR4tR5ci0fnS8K10sxLgnwyNuygYzvROo3Q0EBU8= Subject key identifier: E3:02:5F:AA:16:E0:78:72:A7:0C:07:AF:DA:1C:02:0B:33:1C:7A:5B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11C5 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4wJfqhbgeHKnDAev2hwCCzMcels.roa Signing time: Mon 26 Aug 2024 05:17:55 +0000 ROA not before: Mon 26 Aug 2024 05:17:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 103.25.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4549 (0x11c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E3025FAA16E07872A70C07AFDA1C020B331C7A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:0d:21:5a:3c:01:42:9b:ba:fb:67:75:7a: 76:ff:64:77:03:df:36:02:0d:5e:70:58:c0:53:f5: f1:a9:ec:b6:62:03:4e:57:ae:40:5c:0b:b5:f2:ab: a8:7f:33:f6:ea:2d:66:a2:74:40:9d:e7:1c:ac:c2: 37:0d:e3:0b:08:5a:75:94:55:7f:cb:97:0d:4a:c1: 42:2d:74:b0:83:21:49:92:f5:cc:df:2a:05:bd:61: 6e:8e:b8:7a:ee:d1:cf:97:7b:8e:8a:2b:33:01:5a: dc:2f:08:0d:1a:5a:58:f5:0f:e8:99:1b:7f:b5:72: 97:7d:73:d5:04:3a:79:9c:3c:50:b5:e1:68:51:ee: e5:92:e7:55:97:da:13:cd:a2:45:cf:be:a4:3d:bb: 69:70:46:22:29:90:c9:b3:f5:b4:82:36:d2:c1:84: ad:b0:e2:40:20:70:02:46:90:9c:85:4e:7b:bd:f0: 98:59:f5:57:8d:0b:f2:08:00:a0:12:2c:fe:36:2b: 40:fb:70:56:8c:58:be:cb:80:73:d4:c1:a0:45:27: d0:23:1b:a7:b8:cb:f3:7c:79:8e:f5:28:2a:b4:95: d9:ac:bb:68:e0:91:3a:1f:62:be:52:67:e4:1f:f8: aa:a4:08:1a:e7:fc:c8:a2:01:8a:5c:a5:77:26:07: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:02:5F:AA:16:E0:78:72:A7:0C:07:AF:DA:1C:02:0B:33:1C:7A:5B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4wJfqhbgeHKnDAev2hwCCzMcels.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.25.236.0/22 Signature Algorithm: sha256WithRSAEncryption 99:df:ee:20:57:ff:c3:af:31:97:15:06:97:bc:97:31:07:78: 99:62:d0:f1:2e:6b:35:ec:8b:40:85:b2:28:37:8c:42:4e:c1: 3e:9b:31:9e:71:34:ba:5e:62:d3:c8:e9:5b:96:6f:91:8f:f1: 31:0b:cf:e6:5d:af:7e:bc:b9:fc:a1:4d:d4:72:03:2e:6e:a6: bc:ce:e0:ed:a5:b6:d0:c5:ae:ef:50:96:5b:fd:1d:d1:00:38: 3f:5e:2d:0e:31:f1:f0:46:c3:93:96:08:e7:b1:c9:57:6c:1c: 03:42:58:b5:ec:9c:af:be:30:5a:1b:ee:28:13:83:db:27:90: c8:dc:98:66:57:a4:d5:b5:50:36:6f:e7:bd:0d:33:ba:38:01: 95:95:2f:85:22:0f:79:25:ac:56:b1:9b:69:07:b1:da:10:c9: 48:bf:ab:a8:d2:34:78:14:8c:ab:7b:d8:34:0c:2d:90:8d:54: 8f:fb:1e:f9:44:32:6f:71:b8:d6:63:39:03:66:24:6b:45:bd: 65:43:f9:be:3a:b8:98:6e:56:cf:05:6f:9c:ee:5b:0d:19:c0: 84:a5:dc:dd:1a:94:f3:fd:67:d3:81:9a:ad:42:d7:16:99:47: 4f:b8:40:b1:a6:7d:d1:85:91:be:df:7a:ce:66:2f:8c:a4:65: c4:48:bc:d6 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzMDI1RkFBMTZFMDc4 NzJBNzBDMDdBRkRBMUMwMjBCMzMxQzdBNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFgw0hWjwBQpu6+2d1enb/ZHcD3zYCDV5wWMBT9fGp7LZiA05X rkBcC7Xyq6h/M/bqLWaidECd5xyswjcN4wsIWnWUVX/Llw1KwUItdLCDIUmS9czf KgW9YW6OuHru0c+Xe46KKzMBWtwvCA0aWlj1D+iZG3+1cpd9c9UEOnmcPFC14WhR 7uWS51WX2hPNokXPvqQ9u2lwRiIpkMmz9bSCNtLBhK2w4kAgcAJGkJyFTnu98JhZ 9VeNC/IIAKASLP42K0D7cFaMWL7LgHPUwaBFJ9AjG6e4y/N8eY71KCq0ldmsu2jg kTofYr5SZ+Qf+KqkCBrn/MiiAYpcpXcmB14dAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU4wJfqhbgeHKnDAev2hwCCzMcelswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC80d0pmcWhiZ2VIS25EQWV2Mmh3 Q0N6TWNlbHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxns MA0GCSqGSIb3DQEBCwUAA4IBAQCZ3+4gV//DrzGXFQaXvJcxB3iZYtDxLms17ItA hbIoN4xCTsE+mzGecTS6XmLTyOlblm+Rj/ExC8/mXa9+vLn8oU3UcgMubqa8zuDt pbbQxa7vUJZb/R3RADg/Xi0OMfHwRsOTlgjnsclXbBwDQli17JyvvjBaG+4oE4Pb J5DI3JhmV6TVtVA2b+e9DTO6OAGVlS+FIg95JaxWsZtpB7HaEMlIv6uo0jR4FIyr e9g0DC2QjVSP+x75RDJvcbjWYzkDZiRrRb1lQ/m+OriYblbPBW+c7lsNGcCEpdzd GpTz/WfTgZqtQtcWmUdPuECxpn3RhZG+33rOZi+MpGXESLzW -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org