$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/J64emD1yn67Xt1nJcSC-On5F5nU.roa File: J64emD1yn67Xt1nJcSC-On5F5nU.roa (raw, json) Hash identifier: L3kPz5WNt8c/Ihmr34+oLdOsrS7cpndqPZ1qAxsnrD4= Subject key identifier: 27:AE:1E:98:3D:72:9F:AE:D7:B7:59:C9:71:20:BE:3A:7E:45:E6:75 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11AF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J64emD1yn67Xt1nJcSC-On5F5nU.roa Signing time: Mon 26 Aug 2024 05:17:49 +0000 ROA not before: Mon 26 Aug 2024 05:17:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 221.120.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4527 (0x11af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=27AE1E983D729FAED7B759C97120BE3A7E45E675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:53:10:16:3a:11:ae:ad:9e:35:4f:df:ee: 8c:bd:f0:96:2f:28:fc:f5:16:7f:10:7b:56:50:dd: 58:00:c0:69:f6:2d:41:db:26:4c:0f:e3:80:b4:bc: 35:f1:a5:3e:ed:2c:5a:8c:c1:16:83:22:ee:de:06: f0:82:ff:78:f1:91:94:0f:5a:7c:c8:ce:25:11:eb: 61:92:70:4d:c4:be:8e:87:60:70:cc:9b:4f:48:60: d7:c2:73:fa:33:d5:9a:88:5c:2c:e2:56:f5:b8:df: b4:cc:3b:3f:1d:08:13:23:e7:f2:17:0a:55:9c:ac: b6:fb:7e:11:6d:39:d5:96:b4:35:aa:b2:fc:36:66: ab:f5:b6:38:6e:9a:6e:be:41:5b:72:e3:19:51:e1: e1:3c:ff:58:62:a9:2d:9c:a8:51:13:94:90:fd:d7: c1:c2:da:29:3f:7f:39:52:c7:e0:98:10:48:41:e5: 25:8d:60:fc:1f:b3:3c:b5:aa:e7:32:34:48:02:7e: a9:8a:c7:24:6d:33:e7:92:57:0a:03:3a:42:ba:4e: 1d:a0:26:ca:6b:f2:8b:b7:9b:72:ea:30:37:40:a2: 9c:83:f1:0d:6f:b9:d2:93:e5:89:34:5d:2e:f8:82: ef:f4:34:f7:a9:c4:d4:1b:f2:67:d5:e6:40:fd:04: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:1E:98:3D:72:9F:AE:D7:B7:59:C9:71:20:BE:3A:7E:45:E6:75 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J64emD1yn67Xt1nJcSC-On5F5nU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.120.25.0/24 Signature Algorithm: sha256WithRSAEncryption a5:e3:71:aa:c1:22:0a:d6:f4:79:8c:c9:b2:c2:6b:55:40:40: f7:c0:bb:ae:ac:95:fe:e5:92:b8:71:9f:32:b5:b4:63:ca:68: 03:ba:ac:cd:03:13:f1:be:cc:1f:68:ee:78:f6:e3:74:0c:d1: 1f:8a:85:91:95:c8:6f:9c:0f:a8:92:7f:bb:15:bd:10:b0:a5: 18:71:44:e5:2a:90:b1:0b:bb:53:ce:e5:59:1e:2e:82:0a:62: fa:60:6f:dd:93:fd:e1:21:f2:c5:3d:67:d3:c3:d0:0b:f9:d2: 9c:b3:d9:4b:a3:88:ea:6c:55:0a:e9:d4:66:77:82:0f:de:bd: 2c:a6:bc:20:e0:21:45:12:9b:38:f6:2b:a4:d9:3b:08:76:93: 59:34:6f:89:70:78:6f:03:35:57:7a:f0:5c:8a:6d:46:bb:7e: ae:91:16:9e:75:db:77:18:fc:a9:89:51:b9:04:85:fb:3a:94: 98:7c:21:4b:d6:e4:db:7f:08:2c:4d:96:61:1c:79:15:d7:b7: 87:67:ca:53:ad:d1:c3:7d:74:dc:6b:9c:3a:c9:95:90:fa:16: 75:b0:06:25:b4:e0:4e:96:c1:66:1d:72:f3:c5:f8:d3:d1:24: c2:ae:d0:19:d3:15:83:ac:6f:2f:1e:dd:55:cc:c1:1c:f1:35: ca:0d:a3:8c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3QUUxRTk4M0Q3MjlG QUVEN0I3NTlDOTcxMjBCRTNBN0U0NUU2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1sVMQFjoRrq2eNU/f7oy98JYvKPz1Fn8Qe1ZQ3VgAwGn2LUHb JkwP44C0vDXxpT7tLFqMwRaDIu7eBvCC/3jxkZQPWnzIziUR62GScE3Evo6HYHDM m09IYNfCc/oz1ZqIXCziVvW437TMOz8dCBMj5/IXClWcrLb7fhFtOdWWtDWqsvw2 Zqv1tjhumm6+QVty4xlR4eE8/1hiqS2cqFETlJD918HC2ik/fzlSx+CYEEhB5SWN YPwfszy1qucyNEgCfqmKxyRtM+eSVwoDOkK6Th2gJspr8ou3m3LqMDdAopyD8Q1v udKT5Yk0XS74gu/0NPepxNQb8mfV5kD9BDKzAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJ64emD1yn67Xt1nJcSC+On5F5nUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KNjRlbUQxeW42N1h0MW5KY1ND LU9uNUY1blUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3XgZ MA0GCSqGSIb3DQEBCwUAA4IBAQCl43GqwSIK1vR5jMmywmtVQED3wLuurJX+5ZK4 cZ8ytbRjymgDuqzNAxPxvswfaO549uN0DNEfioWRlchvnA+okn+7Fb0QsKUYcUTl KpCxC7tTzuVZHi6CCmL6YG/dk/3hIfLFPWfTw9AL+dKcs9lLo4jqbFUK6dRmd4IP 3r0sprwg4CFFEps49iuk2TsIdpNZNG+JcHhvAzVXevBcim1Gu36ukRaeddt3GPyp iVG5BIX7OpSYfCFL1uTbfwgsTZZhHHkV17eHZ8pTrdHDfXTca5w6yZWQ+hZ1sAYl tOBOlsFmHXLzxfjT0STCrtAZ0xWDrG8vHt1VzMEc8TXKDaOM -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:06 2024 by rpki-client on console-ams.rpki-client.org