$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GyFBUDvhvnLay1HvHT_w1sbMwIA.roa File: GyFBUDvhvnLay1HvHT_w1sbMwIA.roa (raw, json) Hash identifier: LECMa+bkOS+canveOt0JsfdZ4BX0+63ZeVtaCNyUoV0= Subject key identifier: 1B:21:41:50:3B:E1:BE:72:DA:CB:51:EF:1D:3F:F0:D6:C6:CC:C0:80 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1177 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GyFBUDvhvnLay1HvHT_w1sbMwIA.roa Signing time: Mon 26 Aug 2024 05:17:33 +0000 ROA not before: Mon 26 Aug 2024 05:17:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 54994 IP address blocks: 203.74.117.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4471 (0x1177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1B2141503BE1BE72DACB51EF1D3FF0D6C6CCC080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:08:36:f6:a7:fc:3a:82:aa:1f:c3:01:54: 83:b4:a9:fa:10:3a:0e:d3:7d:67:2d:37:62:71:7d: 70:2f:49:b0:70:05:16:06:ad:13:35:19:79:6e:41: ce:af:e1:a5:35:36:33:2c:25:95:2d:44:30:75:dc: 9f:eb:24:e9:1e:43:3c:b1:1d:86:3a:8b:ca:32:7b: c1:69:ec:4a:c3:e6:f3:36:ff:1f:5b:e0:3e:91:2d: 9e:a4:69:10:d9:5e:e8:ed:55:25:59:0d:09:d0:5e: c4:37:50:3d:06:cf:38:f0:3e:a2:c3:30:ea:9e:a4: 84:f0:e1:26:af:76:bf:23:ac:d8:de:8a:51:d3:d4: 22:de:ed:93:ab:29:ea:ab:4f:13:21:da:d4:55:d9: 83:15:f4:66:62:58:86:f4:02:c9:92:71:c3:7f:c5: 56:b0:56:a1:ba:40:ec:46:01:93:92:1d:2c:b9:d1: 26:7d:a5:b6:d9:a3:72:23:be:cc:55:95:b1:24:c0: 50:f9:8d:2e:3a:90:f0:30:4a:ef:8b:36:4e:7a:61: 64:1b:ec:9e:99:ae:48:2a:1f:47:94:b9:3d:6b:2a: f6:d7:a0:96:db:a6:a4:68:44:a6:e2:b3:14:7a:27: 36:0a:22:71:19:cb:99:23:8a:93:3a:ae:b4:73:89: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:21:41:50:3B:E1:BE:72:DA:CB:51:EF:1D:3F:F0:D6:C6:CC:C0:80 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GyFBUDvhvnLay1HvHT_w1sbMwIA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.117.128/27 Signature Algorithm: sha256WithRSAEncryption 94:45:ea:9b:8e:85:be:69:f3:f5:c2:3d:5b:20:7c:1d:53:4a: 6a:38:4b:af:30:85:7f:7a:54:7c:3b:41:c6:2e:a8:cd:52:d2: eb:83:6f:b6:b0:a7:05:d7:d7:1f:a0:4b:d1:e8:24:2f:4e:ed: 1b:88:10:20:95:0a:56:3d:15:a4:08:d2:f2:6e:bf:53:eb:64: 3f:16:a0:1c:20:7e:3a:a3:8e:91:e0:bf:02:4d:97:89:fa:b5: 83:84:d7:e2:15:8c:3b:b3:76:58:94:1b:57:6a:12:f1:e2:47: d2:4d:28:bb:b2:19:4b:6f:0a:bb:a3:84:79:a2:89:8f:19:33: d0:28:7e:5f:ca:26:84:5c:3d:fa:f2:f6:5c:f7:ef:9c:b0:ee: 7d:5e:71:e2:bc:49:6d:2f:2c:0e:ad:29:15:7b:fd:b6:3d:85: 6f:32:be:54:3a:74:1a:30:14:61:85:22:09:3b:ba:b9:76:d7: ca:aa:ac:b2:ae:a0:cb:0f:5b:2d:cd:27:c2:90:f3:4f:44:35: cd:75:ce:83:a5:e1:c0:ba:cd:d1:7f:27:83:49:cd:f5:b2:0c: e1:0b:f5:ac:ab:98:4a:06:fa:0e:c0:20:d7:3a:b0:18:51:ae: ef:8d:7a:b3:da:6c:3d:82:29:75:07:af:47:ff:6d:08:d9:d4: 07:e2:a3:fd -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCMjE0MTUwM0JFMUJF NzJEQUNCNTFFRjFEM0ZGMEQ2QzZDQ0MwODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvcAg29qf8OoKqH8MBVIO0qfoQOg7TfWctN2JxfXAvSbBwBRYG rRM1GXluQc6v4aU1NjMsJZUtRDB13J/rJOkeQzyxHYY6i8oye8Fp7ErD5vM2/x9b 4D6RLZ6kaRDZXujtVSVZDQnQXsQ3UD0GzzjwPqLDMOqepITw4Savdr8jrNjeilHT 1CLe7ZOrKeqrTxMh2tRV2YMV9GZiWIb0AsmSccN/xVawVqG6QOxGAZOSHSy50SZ9 pbbZo3IjvsxVlbEkwFD5jS46kPAwSu+LNk56YWQb7J6ZrkgqH0eUuT1rKvbXoJbb pqRoRKbisxR6JzYKInEZy5kjipM6rrRzicb9AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUGyFBUDvhvnLay1HvHT/w1sbMwIAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9HeUZCVUR2aHZuTGF5MUh2SFRf dzFzYk13SUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0p1 gDANBgkqhkiG9w0BAQsFAAOCAQEAlEXqm46Fvmnz9cI9WyB8HVNKajhLrzCFf3pU fDtBxi6ozVLS64NvtrCnBdfXH6BL0egkL07tG4gQIJUKVj0VpAjS8m6/U+tkPxag HCB+OqOOkeC/Ak2Xifq1g4TX4hWMO7N2WJQbV2oS8eJH0k0ou7IZS28Ku6OEeaKJ jxkz0Ch+X8omhFw9+vL2XPfvnLDufV5x4rxJbS8sDq0pFXv9tj2FbzK+VDp0GjAU YYUiCTu6uXbXyqqssq6gyw9bLc0nwpDzT0Q1zXXOg6XhwLrN0X8ng0nN9bIM4Qv1 rKuYSgb6DsAg1zqwGFGu7416s9psPYIpdQevR/9tCNnUB+Kj/Q== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org