$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Mg6PwFnO0obJenPa-QmkXmQTh1w.roa File: Mg6PwFnO0obJenPa-QmkXmQTh1w.roa (raw, json) Hash identifier: LtEsyDOHg/WtrmGhT/cOU4Sa2Rnf88hs9jwtjoezH6M= Subject key identifier: 32:0E:8F:C0:59:CE:D2:86:C9:7A:73:DA:F9:09:A4:5E:64:13:87:5C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1228 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mg6PwFnO0obJenPa-QmkXmQTh1w.roa Signing time: Wed 28 Aug 2024 03:00:51 +0000 ROA not before: Wed 28 Aug 2024 03:00:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9680 IP address blocks: 2001:b000:91::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4648 (0x1228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 28 03:00:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=320E8FC059CED286C97A73DAF909A45E6413875C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:b8:3e:b2:9e:06:d8:76:a3:48:9c:ba:64: 25:4c:30:5e:1d:ec:ef:06:7c:73:83:b6:60:a2:9b: 79:e9:18:b2:13:77:59:fb:2b:b0:c7:ad:a6:06:14: 60:e2:2b:30:e0:6a:85:07:f3:26:d6:97:60:99:c9: 6b:61:50:63:3f:36:0a:2d:a2:46:2e:a0:5d:04:4d: be:d1:45:bb:2e:33:f9:df:22:e4:33:bd:0e:53:93: 8c:66:7d:c3:65:f9:a1:4e:76:d6:3c:9f:04:1a:b5: ba:7b:52:87:d4:80:df:47:8a:b3:12:6e:9f:f0:bb: 26:05:57:c1:e5:be:83:1f:a4:09:9d:82:cb:ca:17: e7:9f:69:9e:6e:c3:c8:49:0b:a2:de:77:d7:5c:b0: 21:dc:5d:b5:6a:c5:8c:83:4a:2d:ae:c3:40:37:75: f8:e3:b4:94:6c:83:8f:38:bf:98:57:86:4d:c8:5a: 15:47:51:e4:5f:c8:75:ac:20:fb:da:38:bb:45:06: 48:54:65:14:55:d1:78:a4:e6:4c:e8:c0:43:01:cb: a4:38:1c:b9:50:3a:2e:19:df:2c:88:b1:ce:41:9e: 53:68:0a:6b:4d:c9:6c:23:21:d9:96:64:5f:87:1e: e5:f7:54:a8:57:fe:2a:50:28:23:7d:08:53:76:41: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0E:8F:C0:59:CE:D2:86:C9:7A:73:DA:F9:09:A4:5E:64:13:87:5C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mg6PwFnO0obJenPa-QmkXmQTh1w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000:91::/48 Signature Algorithm: sha256WithRSAEncryption 3b:5e:59:0e:e1:8b:00:7f:20:a0:1a:9e:5c:21:28:b0:3f:20: 14:0f:8f:d3:93:3f:d6:91:dd:95:f1:dd:d8:78:ba:bb:49:75: b1:71:14:48:21:db:45:29:4d:fb:ed:fc:e9:1b:ca:6f:55:7b: c0:09:b0:b5:62:c9:14:a7:fd:68:70:4a:ad:26:40:24:27:d8: 2a:e1:63:ab:5d:42:29:51:5c:06:40:e2:89:28:9e:7f:02:01: fb:cd:5d:2a:cd:04:89:a3:df:b8:23:88:a8:01:00:28:eb:e3: 9b:55:f6:45:64:b9:a0:48:c5:dc:d1:b6:ce:83:96:d3:c9:6e: fc:b3:b2:1d:89:e1:6d:95:c4:5c:ff:16:9c:f4:2a:67:f8:51: 4e:2c:41:04:03:0e:bd:db:6c:ea:74:f0:91:2c:93:7c:c6:cb: d8:59:43:ab:ba:b3:bd:11:ff:6b:d1:5a:40:67:4b:8c:f2:71: fb:2b:e9:df:53:28:6c:3a:54:b3:8e:4b:20:87:b6:f0:18:15: 6b:11:ca:11:38:36:eb:35:ac:cd:a3:7f:ae:0b:c7:32:df:fa: c4:e2:cc:ef:f1:04:00:5c:51:2e:3e:51:18:95:85:bf:55:b3: 7c:c6:2d:97:82:be:8b:24:9b:f0:d1:e1:53:29:9d:3b:22:a0: 3c:81:35:ee -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4Mjgw MzAwNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyMEU4RkMwNTlDRUQy ODZDOTdBNzNEQUY5MDlBNDVFNjQxMzg3NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpOrg+sp4G2HajSJy6ZCVMMF4d7O8GfHODtmCim3npGLITd1n7 K7DHraYGFGDiKzDgaoUH8ybWl2CZyWthUGM/NgotokYuoF0ETb7RRbsuM/nfIuQz vQ5Tk4xmfcNl+aFOdtY8nwQatbp7UofUgN9HirMSbp/wuyYFV8HlvoMfpAmdgsvK F+efaZ5uw8hJC6Led9dcsCHcXbVqxYyDSi2uw0A3dfjjtJRsg484v5hXhk3IWhVH UeRfyHWsIPvaOLtFBkhUZRRV0Xik5kzowEMBy6Q4HLlQOi4Z3yyIsc5BnlNoCmtN yWwjIdmWZF+HHuX3VKhX/ipQKCN9CFN2QbHlAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUMg6PwFnO0obJenPa+QmkXmQTh1wwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9NZzZQd0ZuTzBvYkplblBhLVFt a1htUVRoMXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw AACRMA0GCSqGSIb3DQEBCwUAA4IBAQA7XlkO4YsAfyCgGp5cISiwPyAUD4/Tkz/W kd2V8d3YeLq7SXWxcRRIIdtFKU377fzpG8pvVXvACbC1YskUp/1ocEqtJkAkJ9gq 4WOrXUIpUVwGQOKJKJ5/AgH7zV0qzQSJo9+4I4ioAQAo6+ObVfZFZLmgSMXc0bbO g5bTyW78s7IdieFtlcRc/xac9Cpn+FFOLEEEAw6922zqdPCRLJN8xsvYWUOrurO9 Ef9r0VpAZ0uM8nH7K+nfUyhsOlSzjksgh7bwGBVrEcoRODbrNazNo3+uC8cy3/rE 4szv8QQAXFEuPlEYlYW/VbN8xi2Xgr6LJJvw0eFTKZ07IqA8gTXu -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:38 2024 by rpki-client on console-fra.rpki-client.org