$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9VPoymDBXs34wItDrcgx76Xd2vk.roa File: 9VPoymDBXs34wItDrcgx76Xd2vk.roa (raw, json) Hash identifier: jSN+mZCkQU8phFW9DUjdiuP3mZ+jUzHKDDYk34KM/s8= Subject key identifier: F5:53:E8:CA:60:C1:5E:CD:F8:C0:8B:43:AD:C8:31:EF:A5:DD:DA:F9 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11B7 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9VPoymDBXs34wItDrcgx76Xd2vk.roa Signing time: Mon 26 Aug 2024 05:17:51 +0000 ROA not before: Mon 26 Aug 2024 05:17:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 118.160.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4535 (0x11b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F553E8CA60C15ECDF8C08B43ADC831EFA5DDDAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:52:39:5a:30:da:34:ef:84:56:19:8a:ae: e7:9f:fa:3e:b3:29:79:d3:41:7c:ac:e6:b8:ab:89: c0:f0:99:4b:7e:6a:be:af:a8:5d:4c:15:bd:4a:d6: 19:a6:7b:6b:ac:7b:eb:88:4a:84:d5:49:ad:82:e7: 79:df:be:88:3e:b3:5c:b9:45:42:30:7e:14:95:80: a0:f1:d9:de:37:fa:28:65:c7:c1:d4:04:ed:75:2f: bd:32:75:ec:93:9b:4c:7d:e3:28:f3:f6:3e:cd:75: f6:e6:3e:42:84:1d:78:9f:d5:52:b9:c3:a0:ed:9e: bf:da:90:f4:53:35:b8:a9:d6:3b:94:be:e8:c5:28: 3c:3c:44:b6:0b:9a:2a:d8:fd:7d:bb:8f:03:15:91: 7f:d7:a1:ed:ec:a3:bf:bd:eb:5a:ce:c0:6a:3c:2c: a6:16:2a:51:ba:46:3e:67:26:db:f9:b8:c8:0c:ac: f0:46:b6:35:f4:97:31:d8:dc:0c:7c:aa:a3:27:06: 8a:a7:f8:b8:bd:c2:be:86:21:31:f0:24:42:ec:b8: 06:d0:1e:32:b0:eb:e3:6f:27:a7:d0:ab:41:9d:5b: fa:70:16:a1:10:81:7e:85:38:6c:13:1b:f1:24:49: 3c:9c:1b:36:c9:a9:f0:0c:e3:9a:59:94:0c:75:61: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:53:E8:CA:60:C1:5E:CD:F8:C0:8B:43:AD:C8:31:EF:A5:DD:DA:F9 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9VPoymDBXs34wItDrcgx76Xd2vk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.160.0.0/13 Signature Algorithm: sha256WithRSAEncryption 7d:a5:c7:11:b8:55:6c:25:51:7d:a9:5d:63:a6:62:a5:72:ef: 2f:46:12:03:61:eb:a1:1e:ea:2a:a3:6a:ff:12:dd:30:27:18: 58:76:aa:90:70:18:c8:4b:8c:fc:cb:12:3a:4c:1c:f6:6b:1d: e3:c9:54:c5:cf:ed:36:43:c5:67:4c:94:a8:06:1a:f7:a7:cf: 88:62:98:ec:75:fb:55:8e:24:90:bd:9a:be:68:d1:03:e6:65: e5:28:aa:29:5f:42:29:ac:42:3d:a2:e7:8a:9a:16:f2:04:b6: bb:92:ae:38:e6:6e:77:e1:7c:60:ff:6a:54:87:1d:27:30:d7: 23:d7:54:3d:3e:dd:a1:5c:af:15:cf:a6:24:29:39:43:7e:2c: d8:15:68:ff:e1:f3:cb:d7:3f:b9:cf:31:69:c6:50:7f:ac:90: 57:5c:e5:d1:bb:cf:b1:cf:61:8b:1e:34:d1:b7:7a:b1:e7:ca: 35:e7:36:8f:b3:88:fe:0e:91:50:11:a7:5e:cb:c8:ef:72:2f: 7d:3a:49:2f:9e:7a:bb:35:e0:c4:65:80:fe:8f:0b:bf:e2:d1: af:29:72:fb:fd:8c:7c:22:66:71:a7:63:d7:7c:e6:76:1c:93: 18:1d:ac:ef:da:ae:91:50:37:c9:c5:d0:58:10:d2:49:9b:8a: 5b:6d:0a:ac -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1NTNFOENBNjBDMTVF Q0RGOEMwOEI0M0FEQzgzMUVGQTVERERBRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiuVI5WjDaNO+EVhmKruef+j6zKXnTQXys5riricDwmUt+ar6v qF1MFb1K1hmme2use+uISoTVSa2C53nfvog+s1y5RUIwfhSVgKDx2d43+ihlx8HU BO11L70ydeyTm0x94yjz9j7NdfbmPkKEHXif1VK5w6Dtnr/akPRTNbip1juUvujF KDw8RLYLmirY/X27jwMVkX/Xoe3so7+961rOwGo8LKYWKlG6Rj5nJtv5uMgMrPBG tjX0lzHY3Ax8qqMnBoqn+Li9wr6GITHwJELsuAbQHjKw6+NvJ6fQq0GdW/pwFqEQ gX6FOGwTG/EkSTycGzbJqfAM45pZlAx1YXiJAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU9VPoymDBXs34wItDrcgx76Xd2vkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC85VlBveW1EQlhzMzR3SXREcmNn eDc2WGQydmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDdqAw DQYJKoZIhvcNAQELBQADggEBAH2lxxG4VWwlUX2pXWOmYqVy7y9GEgNh66Ee6iqj av8S3TAnGFh2qpBwGMhLjPzLEjpMHPZrHePJVMXP7TZDxWdMlKgGGvenz4himOx1 +1WOJJC9mr5o0QPmZeUoqilfQimsQj2i54qaFvIEtruSrjjmbnfhfGD/alSHHScw 1yPXVD0+3aFcrxXPpiQpOUN+LNgVaP/h88vXP7nPMWnGUH+skFdc5dG7z7HPYYse NNG3erHnyjXnNo+ziP4OkVARp17LyO9yL306SS+eers14MRlgP6PC7/i0a8pcvv9 jHwiZnGnY9d85nYckxgdrO/arpFQN8nF0FgQ0kmbilttCqw= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:06 2024 by rpki-client on console-ams.rpki-client.org