$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JYhrSuUBRjLuZpOz9TVsdPBL2Vk.roa File: JYhrSuUBRjLuZpOz9TVsdPBL2Vk.roa (raw, json) Hash identifier: BuMHK8XBIvMWd+uyzR2Nh/zsMZkTugpVwiiNInueUV8= Subject key identifier: 25:88:6B:4A:E5:01:46:32:EE:66:93:B3:F5:35:6C:74:F0:4B:D9:59 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11CC Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JYhrSuUBRjLuZpOz9TVsdPBL2Vk.roa Signing time: Mon 26 Aug 2024 05:17:57 +0000 ROA not before: Mon 26 Aug 2024 05:17:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10126 IP address blocks: 114.30.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4556 (0x11cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=25886B4AE5014632EE6693B3F5356C74F04BD959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:16:96:d0:cf:0a:3a:c9:66:8d:3e:f3:59: ec:67:cd:e4:b0:c5:87:41:7f:ef:8d:e1:34:64:d9: 20:0a:2e:00:ac:bd:48:74:32:6c:d3:02:b0:74:e3: 73:d0:e5:53:6f:6b:f6:73:a1:92:10:2a:56:60:84: d0:11:19:b2:ce:99:43:37:82:fc:c4:1a:c3:be:48: 88:0d:a5:7a:9f:ec:b0:a1:31:af:48:f2:2a:46:f1: c7:22:dd:fd:b2:db:a5:02:91:90:65:d1:97:c3:8c: 28:4a:89:05:96:da:eb:38:ec:2b:b1:40:e1:96:39: 54:12:40:0a:94:dc:03:74:68:21:89:44:77:49:61: 30:ea:3d:17:0a:87:a3:90:e6:b4:1f:37:3a:7b:19: cb:de:3f:c6:6d:d9:08:19:9f:9e:d6:a8:01:36:c2: bd:93:1b:38:fb:8c:68:f5:08:55:2f:ed:ba:01:94: 09:91:4c:4c:c9:33:a6:64:40:a8:5a:1d:3d:2e:20: fe:10:5a:9a:55:09:86:b8:11:13:22:c2:82:a4:56: 27:b0:e6:25:6a:93:d7:b9:ae:fb:40:9c:15:05:6a: 39:5f:a8:d3:69:93:75:8a:75:76:8c:cd:7c:14:ce: 65:a9:e9:54:31:74:a1:9b:76:9e:eb:a2:9c:d3:92: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:88:6B:4A:E5:01:46:32:EE:66:93:B3:F5:35:6C:74:F0:4B:D9:59 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JYhrSuUBRjLuZpOz9TVsdPBL2Vk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.30.32.0/20 Signature Algorithm: sha256WithRSAEncryption 75:7e:7f:00:6d:cc:23:30:0e:10:0d:23:5a:70:58:7b:cc:fd: 00:4a:07:7c:48:b3:c2:01:24:e0:bf:9d:ab:d8:6d:23:62:f5: 89:47:24:de:19:14:8f:ef:51:24:e9:99:6b:bb:50:89:37:0c: d1:8f:47:18:a2:7f:3b:53:3e:40:16:16:d6:eb:9e:d1:62:10: 10:15:33:92:38:dc:bc:0a:71:a5:ed:d7:9c:cc:1c:a4:dc:9e: 14:be:50:c7:11:43:b9:57:92:4e:c0:10:c5:f4:9b:71:c6:b9: 82:28:51:d2:2b:9e:84:8d:90:5d:ad:43:b2:6b:78:af:32:a5: 3f:d8:a5:a5:36:d2:39:91:88:e7:e8:3a:c0:a3:ba:2f:51:ad: 8d:a9:29:fc:64:34:7e:5b:ca:b0:cd:59:f9:22:6c:22:fd:a8: 7f:c1:ec:2a:13:01:91:6f:0e:fe:c5:c8:d8:28:6d:95:af:25: 9f:d4:b3:5a:59:27:ed:07:74:b4:bf:9e:1c:41:cd:28:a2:f1: d1:4f:57:ca:15:01:38:86:22:1d:0f:c2:ed:c8:ef:a6:4e:ee: 05:2a:d2:b4:fa:b4:25:65:80:15:55:2d:8a:cc:b5:50:e0:6d: 75:15:83:e9:dd:fb:fc:87:75:28:d4:de:27:70:34:61:92:40: 18:da:79:26 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1ODg2QjRBRTUwMTQ2 MzJFRTY2OTNCM0Y1MzU2Qzc0RjA0QkQ5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCraRaW0M8KOslmjT7zWexnzeSwxYdBf++N4TRk2SAKLgCsvUh0 MmzTArB043PQ5VNva/ZzoZIQKlZghNARGbLOmUM3gvzEGsO+SIgNpXqf7LChMa9I 8ipG8cci3f2y26UCkZBl0ZfDjChKiQWW2us47CuxQOGWOVQSQAqU3AN0aCGJRHdJ YTDqPRcKh6OQ5rQfNzp7GcveP8Zt2QgZn57WqAE2wr2TGzj7jGj1CFUv7boBlAmR TEzJM6ZkQKhaHT0uIP4QWppVCYa4ERMiwoKkView5iVqk9e5rvtAnBUFajlfqNNp k3WKdXaMzXwUzmWp6VQxdKGbdp7ropzTkpM7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJYhrSuUBRjLuZpOz9TVsdPBL2VkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KWWhyU3VVQlJqTHVacE96OVRW c2RQQkwyVmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEch4g MA0GCSqGSIb3DQEBCwUAA4IBAQB1fn8AbcwjMA4QDSNacFh7zP0ASgd8SLPCASTg v52r2G0jYvWJRyTeGRSP71Ek6Zlru1CJNwzRj0cYon87Uz5AFhbW657RYhAQFTOS ONy8CnGl7deczByk3J4UvlDHEUO5V5JOwBDF9JtxxrmCKFHSK56EjZBdrUOya3iv MqU/2KWlNtI5kYjn6DrAo7ovUa2NqSn8ZDR+W8qwzVn5Imwi/ah/wewqEwGRbw7+ xcjYKG2VryWf1LNaWSftB3S0v54cQc0oovHRT1fKFQE4hiIdD8LtyO+mTu4FKtK0 +rQlZYAVVS2KzLVQ4G11FYPp3fv8h3Uo1N4ncDRhkkAY2nkm -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org