$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LmM_cpC5G7iK4XBgtombZP1AuDE.roa File: LmM_cpC5G7iK4XBgtombZP1AuDE.roa (raw, json) Hash identifier: j8oc3S/i+iJGbqJ+WTedXUJuZXWjACpMJ5rwkMxMQQQ= Subject key identifier: 2E:63:3F:72:90:B9:1B:B8:8A:E1:70:60:B6:89:9B:64:FD:40:B8:31 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 120A Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LmM_cpC5G7iK4XBgtombZP1AuDE.roa Signing time: Mon 26 Aug 2024 05:18:11 +0000 ROA not before: Mon 26 Aug 2024 05:18:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17421 IP address blocks: 42.64.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4618 (0x120a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2E633F7290B91BB88AE17060B6899B64FD40B831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:06:cf:a6:bf:d0:5c:5f:cd:90:e1:b1:7d: 25:da:8f:0a:b8:ba:7c:ec:d8:a0:9d:b4:16:e7:a8: 14:59:47:67:e8:f6:ab:5f:25:c9:3b:a0:b2:e3:f1: fb:77:96:3c:92:93:4e:b4:5c:9a:7d:f8:af:25:46: cb:63:08:43:00:ca:9b:d1:26:06:cc:3b:cc:97:55: 72:73:06:c1:1f:ce:36:f0:4a:30:f2:2c:6f:8b:b9: 0f:eb:0c:57:27:a7:60:8e:58:b3:0e:55:e2:78:0b: 83:bc:15:f7:51:37:8a:55:41:1e:08:4a:16:42:29: 3e:0d:6a:bf:03:c5:92:45:e2:a4:2e:f0:50:91:1b: d7:67:40:70:c8:d6:0d:1e:c1:6d:8a:03:ba:ff:f1: 99:0d:58:e7:7a:25:09:2e:b7:88:2a:5c:9f:b2:52: b9:e2:8f:b7:98:34:9c:4c:cb:d8:55:cc:d8:06:4c: b0:a0:e4:a7:79:88:fd:f9:d3:1e:4b:d0:42:e0:4a: 58:e0:e2:b7:be:31:de:c7:e8:88:c2:23:99:20:0f: 28:3a:ae:2a:fb:ed:1f:c7:2b:ba:66:32:89:12:3c: a7:4b:3e:73:7c:f7:01:89:09:8b:5f:5a:6d:0d:97: 22:07:bc:37:57:78:d0:4b:39:d8:f2:28:b6:07:dc: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:63:3F:72:90:B9:1B:B8:8A:E1:70:60:B6:89:9B:64:FD:40:B8:31 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LmM_cpC5G7iK4XBgtombZP1AuDE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.64.0.0/12 Signature Algorithm: sha256WithRSAEncryption a9:ad:65:1a:b1:41:a1:73:9b:75:07:4a:7f:54:25:22:9a:3e: 37:30:7f:82:56:cd:1f:51:dd:8f:95:be:82:c5:4d:a5:2b:cd: 8b:4a:ca:09:c9:ec:5a:f4:36:af:46:5b:14:d0:b2:c5:47:4c: d1:2e:d9:ae:ba:76:d1:83:b3:6b:20:ac:65:4b:36:0c:65:6e: 57:d9:fe:3c:25:41:3a:54:16:a3:89:a0:1c:74:e6:1f:79:72: 3f:02:c3:02:e9:39:23:1e:04:0a:b5:c0:72:d5:2b:aa:d4:80: d5:37:dd:db:07:fc:8a:d6:ab:aa:3c:25:e2:29:15:53:45:36: 9d:3e:16:0b:69:19:59:fe:a0:23:04:a5:00:2c:d3:0a:af:01: ce:7a:b8:55:03:ee:b3:66:66:0e:59:a9:58:ce:1b:e8:6e:73: f2:da:aa:46:83:9a:34:9c:7e:1d:c1:52:d4:f6:ed:69:6e:c2: 66:15:b3:72:fc:83:31:1f:7e:0e:fc:1c:e5:d6:b3:eb:21:e8: 35:ad:02:5a:77:ea:14:7f:cf:e6:48:3b:31:0e:b1:e0:90:9a: 62:6e:32:b8:f6:ba:f7:a3:38:89:f6:88:3d:6c:f6:01:72:84: a2:21:32:a9:e2:49:39:79:ed:a4:9d:db:3e:c2:25:5f:89:2b: cc:ae:92:d8 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFNjMzRjcyOTBCOTFC Qjg4QUUxNzA2MEI2ODk5QjY0RkQ0MEI4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaZgbPpr/QXF/NkOGxfSXajwq4unzs2KCdtBbnqBRZR2fo9qtf Jck7oLLj8ft3ljySk060XJp9+K8lRstjCEMAypvRJgbMO8yXVXJzBsEfzjbwSjDy LG+LuQ/rDFcnp2COWLMOVeJ4C4O8FfdRN4pVQR4IShZCKT4Nar8DxZJF4qQu8FCR G9dnQHDI1g0ewW2KA7r/8ZkNWOd6JQkut4gqXJ+yUrnij7eYNJxMy9hVzNgGTLCg 5Kd5iP350x5L0ELgSljg4re+Md7H6IjCI5kgDyg6rir77R/HK7pmMokSPKdLPnN8 9wGJCYtfWm0NlyIHvDdXeNBLOdjyKLYH3LchAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQULmM/cpC5G7iK4XBgtombZP1AuDEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MbU1fY3BDNUc3aUs0WEJndG9t YlpQMUF1REUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEKkAw DQYJKoZIhvcNAQELBQADggEBAKmtZRqxQaFzm3UHSn9UJSKaPjcwf4JWzR9R3Y+V voLFTaUrzYtKygnJ7Fr0Nq9GWxTQssVHTNEu2a66dtGDs2sgrGVLNgxlblfZ/jwl QTpUFqOJoBx05h95cj8CwwLpOSMeBAq1wHLVK6rUgNU33dsH/IrWq6o8JeIpFVNF Np0+FgtpGVn+oCMEpQAs0wqvAc56uFUD7rNmZg5ZqVjOG+huc/LaqkaDmjScfh3B UtT27WluwmYVs3L8gzEffg78HOXWs+sh6DWtAlp36hR/z+ZIOzEOseCQmmJuMrj2 uvejOIn2iD1s9gFyhKIhMqniSTl57aSd2z7CJV+JK8yuktg= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:38 2024 by rpki-client on console-fra.rpki-client.org