$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa File: GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa (raw, json) Hash identifier: SxumSyRHZ3xXzoXnqKl1EL1ZrI/kUhDWPvalMxoIQNk= Subject key identifier: 18:9E:9C:3F:D0:14:A9:B1:68:DA:1C:88:EA:24:D3:AD:2A:15:C5:48 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 117C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa Signing time: Mon 26 Aug 2024 05:17:35 +0000 ROA not before: Mon 26 Aug 2024 05:17:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 220.128.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4476 (0x117c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=189E9C3FD014A9B168DA1C88EA24D3AD2A15C548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:99:20:48:ee:e9:8f:69:ab:4a:18:a3:a5: 1d:9e:e3:3b:90:2d:71:8d:4e:3f:51:56:19:4e:27: 70:15:19:31:df:30:25:6e:3a:ba:62:10:65:a0:7a: ea:e8:26:63:d9:87:f2:25:11:20:89:9b:a6:88:9a: cd:fe:c4:73:96:98:f4:50:1c:a5:28:86:38:8b:12: 87:09:35:d4:9f:a3:2b:94:e4:99:31:2c:ea:4d:d6: ba:52:df:73:ec:00:a6:f5:be:0e:9b:f6:62:2c:2c: b6:4d:4b:5a:3d:c6:1a:48:38:4d:0f:2b:7b:27:bc: cf:26:b9:3b:ff:09:ea:f9:8d:05:b7:8a:47:e0:89: 58:db:ac:12:83:ff:d2:17:61:82:ca:ac:3c:c1:78: 9a:09:68:eb:3c:8c:d2:81:a8:4f:b7:14:59:fc:32: 5c:3c:6e:f7:a3:47:2f:36:bc:59:14:ca:7d:6a:5e: 26:7e:c8:1c:f4:9e:6d:ce:b9:2f:69:5d:60:31:27: 08:cb:8f:62:30:20:6a:0e:27:07:ee:27:b1:13:4a: 20:13:fa:a6:3d:39:c0:af:c1:5d:a8:42:e6:fc:ae: a1:32:1c:08:4c:d6:44:20:35:03:00:db:08:f8:01: 7f:28:00:c2:40:5f:b0:ba:b7:8e:60:3f:43:f6:59: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9E:9C:3F:D0:14:A9:B1:68:DA:1C:88:EA:24:D3:AD:2A:15:C5:48 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GJ6cP9AUqbFo2hyI6iTTrSoVxUg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.71.0/24 Signature Algorithm: sha256WithRSAEncryption 69:11:92:e0:6f:6e:7b:51:13:01:38:78:79:98:06:14:b6:0c: 5f:93:ae:a3:dd:ab:2c:72:6e:25:fd:05:c2:9e:84:28:91:9a: 81:7f:0d:3c:f9:8f:e3:8c:8b:15:10:d6:14:a7:33:e2:98:44: 1a:d6:cc:12:53:27:5b:8e:c7:20:45:bc:20:8a:7d:cd:9b:bc: 64:22:35:d3:c6:3b:f2:97:95:b0:25:f4:ec:58:e8:f5:2a:d4: 2d:29:45:2e:36:c1:d3:c9:18:6c:7a:d2:b5:c7:ca:bc:24:a0: a2:32:ec:88:77:bd:6f:f0:63:b0:ee:2c:1f:b5:73:05:b5:87: a9:1b:80:d9:17:32:18:06:c8:eb:3e:96:f2:39:20:f6:9f:ae: df:a3:4b:67:10:a5:88:ae:a8:ed:3f:8f:b8:e4:6d:21:24:e8: f9:72:2f:98:a8:3f:32:a0:69:49:c5:ba:69:10:c6:59:8e:7e: f1:51:e8:02:b9:ab:c0:b9:75:b2:b1:e4:96:9e:2f:b8:b5:31: 6a:97:ba:af:72:f5:18:7c:96:00:85:58:8f:cb:69:1c:d7:fc: 3b:f8:8f:1c:7f:7c:ad:42:21:91:2f:35:d2:55:78:33:18:20: bd:6e:a9:43:5a:1d:71:91:f9:db:ce:9f:e0:5f:7f:42:f2:6a: 6d:e1:a4:27 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4OUU5QzNGRDAxNEE5 QjE2OERBMUM4OEVBMjREM0FEMkExNUM1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaM5kgSO7pj2mrShijpR2e4zuQLXGNTj9RVhlOJ3AVGTHfMCVu OrpiEGWgeuroJmPZh/IlESCJm6aIms3+xHOWmPRQHKUohjiLEocJNdSfoyuU5Jkx LOpN1rpS33PsAKb1vg6b9mIsLLZNS1o9xhpIOE0PK3snvM8muTv/Cer5jQW3ikfg iVjbrBKD/9IXYYLKrDzBeJoJaOs8jNKBqE+3FFn8Mlw8bvejRy82vFkUyn1qXiZ+ yBz0nm3OuS9pXWAxJwjLj2IwIGoOJwfuJ7ETSiAT+qY9OcCvwV2oQub8rqEyHAhM 1kQgNQMA2wj4AX8oAMJAX7C6t45gP0P2WccDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUGJ6cP9AUqbFo2hyI6iTTrSoVxUgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9HSjZjUDlBVXFiRm8yaHlJNmlU VHJTb1Z4VWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBH MA0GCSqGSIb3DQEBCwUAA4IBAQBpEZLgb257URMBOHh5mAYUtgxfk66j3asscm4l /QXCnoQokZqBfw08+Y/jjIsVENYUpzPimEQa1swSUydbjscgRbwgin3Nm7xkIjXT xjvyl5WwJfTsWOj1KtQtKUUuNsHTyRhsetK1x8q8JKCiMuyId71v8GOw7iwftXMF tYepG4DZFzIYBsjrPpbyOSD2n67fo0tnEKWIrqjtP4+45G0hJOj5ci+YqD8yoGlJ xbppEMZZjn7xUegCuavAuXWyseSWni+4tTFql7qvcvUYfJYAhViPy2kc1/w7+I8c f3ytQiGRLzXSVXgzGCC9bqlDWh1xkfnbzp/gX39C8mpt4aQn -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org