$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8T_CZRvhpTv3GNBpzhTfiIsX_J8.roa File: 8T_CZRvhpTv3GNBpzhTfiIsX_J8.roa (raw, json) Hash identifier: xmcLOZ30A/cVJc9/CrxF4WBRK14FQQAsGHz1J1PUzCc= Subject key identifier: F1:3F:C2:65:1B:E1:A5:3B:F7:18:D0:69:CE:14:DF:88:8B:17:FC:9F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 119C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8T_CZRvhpTv3GNBpzhTfiIsX_J8.roa Signing time: Mon 26 Aug 2024 05:17:43 +0000 ROA not before: Mon 26 Aug 2024 05:17:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 54994 IP address blocks: 203.74.117.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4508 (0x119c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F13FC2651BE1A53BF718D069CE14DF888B17FC9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e7:f7:90:5c:8d:64:a7:63:cf:f1:30:2a:d7: b1:0c:f8:fc:d9:bf:eb:f6:05:a8:98:f3:84:85:d6: cc:17:1b:93:f5:cd:20:c9:39:d2:0d:b5:41:e4:90: 87:78:17:75:3c:53:ad:ce:99:46:6b:cb:d5:06:0c: c0:ac:c2:14:30:eb:44:32:52:6c:40:b6:cd:cf:58: 4c:3d:c1:a1:de:8f:e2:67:1e:94:70:c7:8f:8e:e6: 1c:f7:eb:f3:bf:ab:6e:21:68:a8:bc:c6:78:b3:a8: 00:6a:8b:bf:64:ad:7b:bb:9f:46:aa:71:7b:53:b2: b0:5c:01:95:3c:a0:13:71:fb:53:9d:2c:c3:0c:66: 88:0c:3e:54:e6:a6:d0:3f:21:79:c6:dc:81:ab:ed: d4:9c:60:b1:31:d2:77:5e:e1:4b:4a:10:ba:50:bf: 38:70:b8:56:29:5d:d6:b5:0b:c5:8e:4e:8a:43:ef: 92:7e:e5:62:37:9c:f4:5d:ad:31:b6:eb:b2:82:d2: b3:91:9b:dd:b9:0b:c1:57:47:79:a1:60:a3:6a:e5: cb:4b:a8:9e:41:8d:05:a6:73:e7:f3:68:79:cd:51: 34:69:1c:75:62:91:f1:42:75:62:52:09:a2:fa:49: f0:c9:66:6e:2f:53:8e:b3:f4:9d:65:3d:4d:d3:1d: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3F:C2:65:1B:E1:A5:3B:F7:18:D0:69:CE:14:DF:88:8B:17:FC:9F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8T_CZRvhpTv3GNBpzhTfiIsX_J8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.117.0/25 Signature Algorithm: sha256WithRSAEncryption 3a:99:af:29:5d:13:f2:23:a8:fc:b5:2d:44:15:67:4e:c3:b9: 4d:78:1b:8d:e9:ae:fd:9b:85:de:19:c2:23:a7:b5:00:d1:82: 62:40:7b:0f:5e:9b:0e:4c:9c:79:58:f5:ad:0c:1e:ff:17:41: 09:e1:e6:0b:b5:a1:b5:61:7d:43:64:1a:64:30:97:e8:70:c1: 21:af:4b:57:5e:b1:50:84:83:be:2f:95:2e:99:fc:d9:67:d6: e9:89:29:03:e3:a7:17:6d:87:f9:da:2c:35:28:05:a7:26:6f: ad:23:47:46:56:32:e9:46:55:a7:9d:25:04:ef:33:9d:d6:fd: 3e:41:8b:53:ec:5e:1e:4c:bd:dc:b5:b5:46:ab:69:49:42:73: e8:82:f1:fb:6d:6a:40:91:0f:9c:e9:d9:cc:97:9b:d7:5f:a8: 89:91:53:45:15:d7:47:eb:73:b4:61:fb:49:8d:06:d1:6b:b9: ff:59:ee:64:b8:7f:73:72:08:1b:10:35:1f:ff:8e:18:a8:85: 69:6c:9f:a1:75:12:09:8c:8f:d0:92:b0:3b:98:23:63:79:44: ad:d7:ea:c9:02:18:0d:bd:27:e3:53:85:26:0c:8e:c3:aa:17: 3c:6a:41:a8:37:6b:e1:9b:ff:49:7a:9f:14:3b:ae:88:96:2f: 6f:3d:d7:ef -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxM0ZDMjY1MUJFMUE1 M0JGNzE4RDA2OUNFMTRERjg4OEIxN0ZDOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn5/eQXI1kp2PP8TAq17EM+PzZv+v2BaiY84SF1swXG5P1zSDJ OdINtUHkkId4F3U8U63OmUZry9UGDMCswhQw60QyUmxAts3PWEw9waHej+JnHpRw x4+O5hz36/O/q24haKi8xnizqABqi79krXu7n0aqcXtTsrBcAZU8oBNx+1OdLMMM ZogMPlTmptA/IXnG3IGr7dScYLEx0nde4UtKELpQvzhwuFYpXda1C8WOTopD75J+ 5WI3nPRdrTG267KC0rORm925C8FXR3mhYKNq5ctLqJ5BjQWmc+fzaHnNUTRpHHVi kfFCdWJSCaL6SfDJZm4vU46z9J1lPU3THaH3AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU8T/CZRvhpTv3GNBpzhTfiIsX/J8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC84VF9DWlJ2aHBUdjNHTkJwemhU ZmlJc1hfSjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0p1 ADANBgkqhkiG9w0BAQsFAAOCAQEAOpmvKV0T8iOo/LUtRBVnTsO5TXgbjemu/ZuF 3hnCI6e1ANGCYkB7D16bDkyceVj1rQwe/xdBCeHmC7WhtWF9Q2QaZDCX6HDBIa9L V16xUISDvi+VLpn82WfW6YkpA+OnF22H+dosNSgFpyZvrSNHRlYy6UZVp50lBO8z ndb9PkGLU+xeHky93LW1RqtpSUJz6ILx+21qQJEPnOnZzJeb11+oiZFTRRXXR+tz tGH7SY0G0Wu5/1nuZLh/c3IIGxA1H/+OGKiFaWyfoXUSCYyP0JKwO5gjY3lErdfq yQIYDb0n41OFJgyOw6oXPGpBqDdr4Zv/SXqfFDuuiJYvbz3X7w== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org