$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6O6klQGmZuO88ovdOt5QEwbv0QI.roa File: 6O6klQGmZuO88ovdOt5QEwbv0QI.roa (raw, json) Hash identifier: 2Vx5LKVXR6QKaZ5Nu1ftiHU1oZtvcnUMOVLJl7D6SC0= Subject key identifier: E8:EE:A4:95:01:A6:66:E3:BC:F2:8B:DD:3A:DE:50:13:06:EF:D1:02 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 120D Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6O6klQGmZuO88ovdOt5QEwbv0QI.roa Signing time: Mon 26 Aug 2024 05:18:12 +0000 ROA not before: Mon 26 Aug 2024 05:18:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 36040 IP address blocks: 2001:b032:c0ff:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4621 (0x120d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E8EEA49501A666E3BCF28BDD3ADE501306EFD102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:c5:66:43:7d:09:bf:36:07:39:57:e1:b6: 1b:2f:87:61:32:13:8b:0d:cc:94:69:1c:90:50:6e: df:36:f4:83:c7:e8:07:8e:03:0f:c6:37:d0:a4:a3: fb:0c:3b:6f:ea:1f:60:31:60:7e:23:c6:fa:c5:e3: 29:6e:a9:b2:d8:c8:13:c3:e5:dd:a0:c7:9c:04:df: 65:68:79:f3:c5:31:06:f2:10:64:7e:f8:34:7d:71: 50:66:48:4a:c3:2d:89:2d:5c:bf:de:a4:33:8f:73: 08:fd:41:6f:76:45:5b:6c:5d:50:ba:3d:2d:4e:80: 65:89:04:cd:2f:0b:47:eb:8e:78:42:dd:f9:c9:28: 92:64:7b:0f:64:81:6b:ee:d3:a8:75:28:20:d1:a5: ae:88:8f:ca:83:18:36:73:c8:6b:39:ce:c6:fc:2b: fb:93:02:a1:6c:e4:1f:b9:be:30:f0:54:17:26:b9: 70:b8:9e:80:39:c9:15:53:91:b3:eb:f1:62:d2:67: 06:ea:4b:35:cc:80:e7:7d:d3:ca:0d:4f:a4:90:e2: 9d:7e:23:d2:75:d6:34:29:70:56:2d:df:40:26:58: db:ba:39:da:bb:92:cf:f9:03:9b:d7:ff:40:61:8e: 7a:50:d6:90:12:be:fb:30:b7:42:a3:25:3a:d4:d3: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EE:A4:95:01:A6:66:E3:BC:F2:8B:DD:3A:DE:50:13:06:EF:D1:02 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6O6klQGmZuO88ovdOt5QEwbv0QI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b032:c0ff:1::/64 Signature Algorithm: sha256WithRSAEncryption 5c:91:65:56:64:f7:c3:7b:b9:00:5b:62:e3:a6:bb:41:d6:f2: e8:91:9d:2a:93:df:b8:45:d5:10:9f:6b:45:f4:ac:81:a5:40: 2d:86:19:a3:8b:08:c2:af:ac:2f:64:da:37:94:e4:ad:80:db: 0f:26:af:4c:ae:61:f8:86:b0:f7:dd:70:fd:fd:46:19:4f:2e: 52:82:2a:d1:b6:3a:f2:05:64:80:7e:40:8b:1b:11:d9:78:62: 28:5b:c6:9a:7c:8b:7d:87:05:2b:7c:47:3f:ff:5c:00:31:d5: a1:47:eb:90:d3:62:22:b6:ad:0b:3b:bd:db:50:42:7f:c2:b9: 20:b2:31:23:9d:10:db:68:6d:f0:d6:74:b4:b6:24:62:fd:e6: f9:56:ba:7b:fe:6b:16:74:bb:c5:fa:c8:c0:58:db:a4:ca:62: 04:bb:94:f8:74:dc:f8:a6:93:78:ce:c2:70:56:d0:a4:a1:60: 03:c9:54:fd:3b:d6:2a:1b:6b:01:33:45:3c:97:6e:91:bb:c3: 7f:a3:6c:cc:fa:f8:a8:73:fd:84:4d:b3:01:5c:fe:a2:e8:54: 2f:e5:77:61:52:1d:e0:2f:f3:3c:2d:1b:05:05:28:2f:e1:23: 3b:c2:e1:90:dc:97:e0:95:49:29:f1:d2:91:53:f9:8a:87:d6: 5b:fa:75:3f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4RUVBNDk1MDFBNjY2 RTNCQ0YyOEJERDNBREU1MDEzMDZFRkQxMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgGsVmQ30JvzYHOVfhthsvh2EyE4sNzJRpHJBQbt829IPH6AeO Aw/GN9Cko/sMO2/qH2AxYH4jxvrF4yluqbLYyBPD5d2gx5wE32VoefPFMQbyEGR+ +DR9cVBmSErDLYktXL/epDOPcwj9QW92RVtsXVC6PS1OgGWJBM0vC0frjnhC3fnJ KJJkew9kgWvu06h1KCDRpa6Ij8qDGDZzyGs5zsb8K/uTAqFs5B+5vjDwVBcmuXC4 noA5yRVTkbPr8WLSZwbqSzXMgOd908oNT6SQ4p1+I9J11jQpcFYt30AmWNu6Odq7 ks/5A5vX/0BhjnpQ1pASvvswt0KjJTrU04g/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU6O6klQGmZuO88ovdOt5QEwbv0QIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC82TzZrbFFHbVp1Tzg4b3ZkT3Q1 UUV3YnYwUUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw MsD/AAEwDQYJKoZIhvcNAQELBQADggEBAFyRZVZk98N7uQBbYuOmu0HW8uiRnSqT 37hF1RCfa0X0rIGlQC2GGaOLCMKvrC9k2jeU5K2A2w8mr0yuYfiGsPfdcP39RhlP LlKCKtG2OvIFZIB+QIsbEdl4Yihbxpp8i32HBSt8Rz//XAAx1aFH65DTYiK2rQs7 vdtQQn/CuSCyMSOdENtobfDWdLS2JGL95vlWunv+axZ0u8X6yMBY26TKYgS7lPh0 3Pimk3jOwnBW0KShYAPJVP071iobawEzRTyXbpG7w3+jbMz6+Khz/YRNswFc/qLo VC/ld2FSHeAv8zwtGwUFKC/hIzvC4ZDcl+CVSSnx0pFT+YqH1lv6dT8= -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:14 2024 by rpki-client on console-ams.rpki-client.org