$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LWZibrO5-PJughUVpKSETh8NCoE.roa File: LWZibrO5-PJughUVpKSETh8NCoE.roa (raw, json) Hash identifier: gmPTvt2AcOcsdEx9lUfUvnJ1MiNGn7Km6/IaV/iEUPc= Subject key identifier: 2D:66:62:6E:B3:B9:F8:F2:6E:82:15:15:A4:A4:84:4E:1F:0D:0A:81 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1197 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LWZibrO5-PJughUVpKSETh8NCoE.roa Signing time: Mon 26 Aug 2024 05:17:42 +0000 ROA not before: Mon 26 Aug 2024 05:17:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 203.69.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4503 (0x1197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2D66626EB3B9F8F26E821515A4A4844E1F0D0A81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:20:10:b5:80:68:51:a2:6c:03:9e:66:e0: 45:a0:db:5e:a4:df:83:36:64:68:81:60:e0:64:11: 00:90:15:c5:d4:21:9c:ce:91:af:eb:05:c2:c2:b2: 0c:89:c1:85:11:e2:10:a7:28:3e:86:ec:5c:aa:2e: 2b:33:4f:b3:c7:41:15:5d:41:50:49:b1:e1:5c:93: 0a:50:d0:33:80:ac:5e:f2:6b:67:68:b4:67:fa:33: d8:72:7f:5f:7e:f1:00:92:de:03:9f:e2:b2:90:0b: 60:1f:0c:3c:a5:fd:62:94:17:4a:92:c9:79:07:01: fc:b5:31:60:4f:c7:5c:e2:1b:9c:f8:ea:a4:e9:59: 7c:a1:cb:69:71:46:1e:8e:d0:e8:df:14:33:6c:d3: e0:67:61:79:12:4a:6e:8f:03:74:b9:e1:cb:e0:ac: 87:ab:7b:45:b8:6d:38:05:a7:64:27:8c:14:42:a5: 66:56:f3:10:ba:8c:76:40:58:88:0f:53:b8:5c:45: 6a:35:55:f2:c0:92:60:65:93:84:ba:d0:80:09:c7: 22:82:0a:df:04:38:93:f3:6e:3a:aa:c8:3d:7a:98: b6:12:01:79:0f:43:83:a1:99:ce:78:08:e5:4b:c5: bf:d0:41:a0:97:b6:4b:06:7d:01:97:9a:84:a7:92: 4e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:66:62:6E:B3:B9:F8:F2:6E:82:15:15:A4:A4:84:4E:1F:0D:0A:81 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LWZibrO5-PJughUVpKSETh8NCoE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.138.0/24 Signature Algorithm: sha256WithRSAEncryption 47:10:10:30:8d:47:39:80:d7:cb:77:00:9d:14:3b:87:0d:24: e8:1c:a5:3d:98:8e:bf:cb:69:7f:00:d2:de:64:8c:93:72:f5: 5c:50:6b:67:33:79:7b:19:ed:34:3c:98:8c:9b:5d:67:45:6d: a9:46:25:c7:ff:79:d5:2e:6e:c3:76:76:ef:71:76:7d:c1:14: e2:32:bf:20:6b:e5:da:83:a5:d4:3c:c3:20:a3:b2:f1:07:47: 76:1b:ae:7a:d9:38:14:3e:ea:c0:c1:28:29:f4:6b:bf:4d:b8: 8d:df:0a:cf:5b:e9:b8:c0:57:d5:1c:f8:56:4a:70:4c:e0:37: d6:c7:a6:5c:60:2a:5b:6c:0a:b4:e8:d8:09:b5:fd:7f:2e:6b: d3:f1:c9:87:2d:a2:c4:21:e8:da:ab:46:da:b0:7a:f2:4c:c1: 5d:49:6a:09:31:ed:64:07:8c:5c:6f:10:04:56:f9:04:01:77: a9:48:e8:d6:e7:ce:aa:f4:78:a5:62:c1:4c:7c:29:38:2a:be: cf:e8:b1:f0:0b:ac:2c:e5:67:d1:62:c3:1f:f3:a9:a5:3b:e6: 25:af:b0:2b:0b:33:77:ee:af:fa:56:14:84:34:ab:fa:c3:34: 38:ef:79:0a:cd:3f:61:d6:04:7c:58:c0:94:d5:41:b1:d7:63: 64:aa:cf:05 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJENjY2MjZFQjNCOUY4 RjI2RTgyMTUxNUE0QTQ4NDRFMUYwRDBBODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPxSAQtYBoUaJsA55m4EWg216k34M2ZGiBYOBkEQCQFcXUIZzO ka/rBcLCsgyJwYUR4hCnKD6G7FyqLiszT7PHQRVdQVBJseFckwpQ0DOArF7ya2do tGf6M9hyf19+8QCS3gOf4rKQC2AfDDyl/WKUF0qSyXkHAfy1MWBPx1ziG5z46qTp WXyhy2lxRh6O0OjfFDNs0+BnYXkSSm6PA3S54cvgrIere0W4bTgFp2QnjBRCpWZW 8xC6jHZAWIgPU7hcRWo1VfLAkmBlk4S60IAJxyKCCt8EOJPzbjqqyD16mLYSAXkP Q4Ohmc54COVLxb/QQaCXtksGfQGXmoSnkk47AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQULWZibrO5+PJughUVpKSETh8NCoEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MV1ppYnJPNS1QSnVnaFVWcEtT RVRoOE5Db0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0WK MA0GCSqGSIb3DQEBCwUAA4IBAQBHEBAwjUc5gNfLdwCdFDuHDSToHKU9mI6/y2l/ ANLeZIyTcvVcUGtnM3l7Ge00PJiMm11nRW2pRiXH/3nVLm7DdnbvcXZ9wRTiMr8g a+Xag6XUPMMgo7LxB0d2G6562TgUPurAwSgp9Gu/TbiN3wrPW+m4wFfVHPhWSnBM 4DfWx6ZcYCpbbAq06NgJtf1/LmvT8cmHLaLEIejaq0basHryTMFdSWoJMe1kB4xc bxAEVvkEAXepSOjW586q9HilYsFMfCk4Kr7P6LHwC6ws5WfRYsMf86mlO+Ylr7Ar CzN37q/6VhSENKv6wzQ473kKzT9h1gR8WMCU1UGx12Nkqs8F -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:15 2024 by rpki-client on console-ams.rpki-client.org