$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/5yRV-lDyC5u5RT_knsFKeSvK1XY.roa File: 5yRV-lDyC5u5RT_knsFKeSvK1XY.roa (raw, json) Hash identifier: JAQh6fLMwbEImwfF8qOC90KRrON+LKwjH3yT8wWGmjw= Subject key identifier: E7:24:55:FA:50:F2:0B:9B:B9:45:3F:E4:9E:C1:4A:79:2B:CA:D5:76 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11CB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5yRV-lDyC5u5RT_knsFKeSvK1XY.roa Signing time: Mon 26 Aug 2024 05:17:57 +0000 ROA not before: Mon 26 Aug 2024 05:17:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131621 IP address blocks: 2001:b032:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4555 (0x11cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E72455FA50F20B9BB9453FE49EC14A792BCAD576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:09:7f:80:30:1b:2f:36:89:24:ba:1b:1f: 59:98:0d:d7:28:05:8c:02:17:1e:a1:b4:81:fb:36: 41:63:96:74:9c:24:23:da:98:63:cc:33:13:27:15: 9b:96:eb:f1:85:cd:cb:e8:51:68:d0:db:a7:2f:66: d2:1a:83:d8:bf:51:12:04:17:df:5e:5c:d1:b8:39: 8f:b7:a6:4c:88:98:2d:c7:7e:7a:03:44:43:22:0f: 96:96:45:61:ab:ef:d9:12:da:7e:06:e7:5e:9a:4e: 63:91:88:23:d3:82:eb:80:0d:55:c7:ae:2a:64:73: 16:bd:50:fc:c1:24:17:93:d9:96:07:8d:c9:df:ba: 51:5d:9c:b3:c7:c7:ed:3a:25:d4:b0:82:8f:64:9f: cc:0f:11:88:b5:23:22:61:c0:3b:8a:d3:ca:58:ee: 31:32:74:20:54:b5:38:9b:4f:41:08:4d:a1:57:48: 4d:a0:67:63:93:61:d3:ad:d2:0d:d1:bd:37:76:7c: 7a:13:38:4f:5a:fa:69:05:cc:10:b3:be:3e:4b:fe: 1a:0b:12:a3:7f:ce:90:88:6a:09:a3:b0:c3:80:23: e2:af:e5:85:63:ab:e7:97:97:61:f4:bd:45:59:00: 98:76:d6:76:2b:09:e6:95:1d:db:eb:2d:57:20:2a: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:24:55:FA:50:F2:0B:9B:B9:45:3F:E4:9E:C1:4A:79:2B:CA:D5:76 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5yRV-lDyC5u5RT_knsFKeSvK1XY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b032:103::/48 Signature Algorithm: sha256WithRSAEncryption ad:9d:07:a0:ce:75:4f:7f:65:48:ce:5e:2c:d2:8e:23:87:be: 2b:ad:3d:64:51:05:b9:0f:db:08:90:e4:ef:2b:5e:1d:78:06: bb:51:17:b9:39:e8:c0:54:14:e8:dc:c5:fa:39:c6:d4:3f:f2: e3:b8:70:25:ac:df:40:6d:cf:86:50:41:4a:14:9a:ad:f2:fd: f7:14:5c:31:5e:06:e7:c8:d3:4d:bf:3e:8b:fe:83:43:33:88: be:95:3c:fe:30:3f:13:79:66:61:17:7b:5f:a9:6b:3d:f5:5f: 69:f4:2d:4c:5f:9b:86:dd:f8:c2:bc:9f:24:a9:d7:18:d1:88: a3:01:55:2c:f4:b3:2b:2b:c3:3d:d7:66:7e:d7:e0:f6:88:04: a9:e2:5d:ad:3c:73:9a:65:dd:58:20:d7:74:cf:ec:9e:7e:50: 6f:ad:c9:3b:50:c6:ab:4c:51:c3:d9:d3:58:27:26:d7:49:70: 45:8f:a1:52:fc:8e:05:be:e2:2b:91:97:3a:fb:c1:80:e8:26: f5:53:17:a1:a5:49:06:ae:c3:d7:5d:2a:12:ff:8c:d1:03:1a: 04:4b:a8:43:21:15:f2:2d:44:e1:83:54:ce:08:12:aa:b5:31: 93:22:24:f9:62:8d:50:80:c5:e8:f7:8f:c5:d9:ca:ca:7d:7a: bc:e4:df:e9 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU3MjQ1NUZBNTBGMjBC OUJCOTQ1M0ZFNDlFQzE0QTc5MkJDQUQ1NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx6gl/gDAbLzaJJLobH1mYDdcoBYwCFx6htIH7NkFjlnScJCPa mGPMMxMnFZuW6/GFzcvoUWjQ26cvZtIag9i/URIEF99eXNG4OY+3pkyImC3HfnoD REMiD5aWRWGr79kS2n4G516aTmORiCPTguuADVXHripkcxa9UPzBJBeT2ZYHjcnf ulFdnLPHx+06JdSwgo9kn8wPEYi1IyJhwDuK08pY7jEydCBUtTibT0EITaFXSE2g Z2OTYdOt0g3RvTd2fHoTOE9a+mkFzBCzvj5L/hoLEqN/zpCIagmjsMOAI+Kv5YVj q+eXl2H0vUVZAJh21nYrCeaVHdvrLVcgKtxxAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU5yRV+lDyC5u5RT/knsFKeSvK1XYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC81eVJWLWxEeUM1dTVSVF9rbnNG S2VTdksxWFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw MgEDMA0GCSqGSIb3DQEBCwUAA4IBAQCtnQegznVPf2VIzl4s0o4jh74rrT1kUQW5 D9sIkOTvK14deAa7URe5OejAVBTo3MX6OcbUP/LjuHAlrN9Abc+GUEFKFJqt8v33 FFwxXgbnyNNNvz6L/oNDM4i+lTz+MD8TeWZhF3tfqWs99V9p9C1MX5uG3fjCvJ8k qdcY0YijAVUs9LMrK8M912Z+1+D2iASp4l2tPHOaZd1YINd0z+yeflBvrck7UMar TFHD2dNYJybXSXBFj6FS/I4FvuIrkZc6+8GA6Cb1UxehpUkGrsPXXSoS/4zRAxoE S6hDIRXyLUThg1TOCBKqtTGTIiT5Yo1QgMXo94/F2crKfXq85N/p -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:06 2024 by rpki-client on console-ams.rpki-client.org