$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7ckwTMFC6OlrDp1D8oW8Uafteeg.roa File: 7ckwTMFC6OlrDp1D8oW8Uafteeg.roa (raw, json) Hash identifier: oU45bUwX5YG91YIVliqVToW/GM8r0HEJ56H0C+v/6q4= Subject key identifier: ED:C9:30:4C:C1:42:E8:E9:6B:0E:9D:43:F2:85:BC:51:A7:ED:79:E8 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11A2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7ckwTMFC6OlrDp1D8oW8Uafteeg.roa Signing time: Mon 26 Aug 2024 05:17:45 +0000 ROA not before: Mon 26 Aug 2024 05:17:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7481 IP address blocks: 210.62.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4514 (0x11a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EDC9304CC142E8E96B0E9D43F285BC51A7ED79E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:61:08:48:76:74:be:a0:44:16:16:23:3d: da:a3:a1:f9:3d:0f:95:78:63:25:d9:f7:70:fd:0a: b0:d1:1d:cd:58:c0:8c:e1:26:56:0b:5a:f3:8e:39: 5b:71:55:9c:3b:2d:e8:44:b0:a1:f2:3e:e9:7c:fe: d4:e7:28:ee:40:25:56:59:48:77:fe:10:10:2e:72: 13:02:11:89:f4:d3:84:09:69:70:29:cb:a9:da:d2: 88:60:48:ae:54:e5:c8:a1:56:c9:4c:4b:56:4a:b8: 62:68:9c:67:fe:bc:e4:45:30:e6:3d:c7:26:7c:e7: 9f:27:33:77:03:6c:8a:2b:3f:11:cb:79:7c:36:3b: 78:58:89:8c:1b:06:f8:1f:72:1b:e4:12:3f:1a:ff: 62:48:60:b0:df:df:99:a4:c7:3c:16:8b:b7:d3:41: 45:93:fc:33:50:78:23:bc:1a:1b:1d:33:29:3d:e3: 7f:26:4b:52:38:0b:95:52:22:28:f3:a4:20:f6:c4: d7:b3:99:12:67:c2:c1:cf:4b:07:81:3f:b9:48:06: 49:e2:73:e9:89:4e:44:66:f0:a4:21:0f:4d:13:a2: 70:4e:ea:4d:ef:fe:cc:fd:2b:a8:82:78:3a:f3:26: e7:3b:89:6a:1f:ad:a1:65:ee:a0:8b:68:05:cd:18: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C9:30:4C:C1:42:E8:E9:6B:0E:9D:43:F2:85:BC:51:A7:ED:79:E8 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7ckwTMFC6OlrDp1D8oW8Uafteeg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.255.0/24 Signature Algorithm: sha256WithRSAEncryption 86:89:a3:d8:99:99:5f:a5:a5:45:ee:21:18:8d:d3:2f:8a:60: d1:59:e7:e0:85:a0:80:74:19:9f:ba:41:01:de:4f:59:f8:83: cf:2f:d9:b1:60:ea:51:05:f8:55:c7:9a:c9:15:f2:c4:d4:1a: bb:75:ed:73:f8:3c:8a:d9:96:c6:cd:f4:8e:db:0a:21:a3:bb: 4e:83:cc:1a:d8:c5:94:37:da:cd:72:40:29:1a:a0:20:8c:e4: 79:45:c9:b6:d3:fa:fb:c2:f0:ca:c9:c2:d7:72:07:4c:e4:b7: f0:7a:4f:50:07:76:cd:77:87:b7:c7:af:d2:e0:97:f0:18:a2: f1:79:31:10:47:80:a6:6b:1e:ed:ef:11:35:12:eb:c6:cf:f7: 16:27:27:aa:c8:b7:88:2d:cd:d4:c8:ab:c5:b7:64:c6:2e:ac: 03:fe:fa:04:f0:2f:ff:7c:bb:ac:1c:a2:6d:4a:61:78:38:19: 7c:00:21:0c:f7:9b:73:6b:f2:a4:a8:19:4b:6e:8f:dc:0b:cf: ac:15:6e:73:f3:72:3e:bf:64:41:85:b5:51:9a:e8:c6:c0:83: a8:e2:e1:1a:b5:53:e8:11:0a:c9:d8:2b:8d:50:91:b5:8a:1a: b3:59:b0:4e:b4:ca:a3:29:3f:70:3e:8c:ee:30:cc:e1:f7:6d: 23:b2:13:29 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVEQzkzMDRDQzE0MkU4 RTk2QjBFOUQ0M0YyODVCQzUxQTdFRDc5RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9iWEISHZ0vqBEFhYjPdqjofk9D5V4YyXZ93D9CrDRHc1YwIzh JlYLWvOOOVtxVZw7LehEsKHyPul8/tTnKO5AJVZZSHf+EBAuchMCEYn004QJaXAp y6na0ohgSK5U5cihVslMS1ZKuGJonGf+vORFMOY9xyZ8558nM3cDbIorPxHLeXw2 O3hYiYwbBvgfchvkEj8a/2JIYLDf35mkxzwWi7fTQUWT/DNQeCO8GhsdMyk9438m S1I4C5VSIijzpCD2xNezmRJnwsHPSweBP7lIBknic+mJTkRm8KQhD00TonBO6k3v /sz9K6iCeDrzJuc7iWofraFl7qCLaAXNGGALAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU7ckwTMFC6OlrDp1D8oW8UafteegwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC83Y2t3VE1GQzZPbHJEcDFEOG9X OFVhZnRlZWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j7/ MA0GCSqGSIb3DQEBCwUAA4IBAQCGiaPYmZlfpaVF7iEYjdMvimDRWefghaCAdBmf ukEB3k9Z+IPPL9mxYOpRBfhVx5rJFfLE1Bq7de1z+DyK2ZbGzfSO2woho7tOg8wa 2MWUN9rNckApGqAgjOR5Rcm20/r7wvDKycLXcgdM5Lfwek9QB3bNd4e3x6/S4Jfw GKLxeTEQR4Cmax7t7xE1EuvGz/cWJyeqyLeILc3UyKvFt2TGLqwD/voE8C//fLus HKJtSmF4OBl8ACEM95tza/KkqBlLbo/cC8+sFW5z83I+v2RBhbVRmujGwIOo4uEa tVPoEQrJ2CuNUJG1ihqzWbBOtMqjKT9wPozuMMzh920jshMp -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:06 2024 by rpki-client on console-ams.rpki-client.org