$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa File: Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa (raw, json) Hash identifier: pstoMKVC4GpbMj1rgq034KElkiq8BaQexuPIrOZzr5s= Subject key identifier: 3E:08:70:D8:E9:02:11:8C:5E:D6:94:D9:F9:22:52:79:2D:F8:70:E4 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1220 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa Signing time: Mon 26 Aug 2024 05:18:16 +0000 ROA not before: Mon 26 Aug 2024 05:18:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 220.128.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3E0870D8E902118C5ED694D9F92252792DF870E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:f7:2b:2c:2b:39:7d:85:00:73:14:cd:8d: ef:d2:01:74:d9:26:a7:00:29:72:92:0c:69:ed:6c: 9c:50:70:9e:50:76:11:1f:3f:3d:40:87:19:b4:01: 68:ef:ff:80:84:39:b0:8c:5b:ca:b8:60:86:3f:9a: 5b:bf:1d:00:2c:e0:6c:11:3e:27:4d:d1:d6:6b:72: f1:0e:ef:02:ba:d3:3d:c9:18:f4:e1:67:05:46:05: 6d:39:c4:14:5f:77:a3:fb:8f:1a:5d:3b:b2:a8:aa: 5a:46:73:d1:17:01:30:be:3c:c3:61:a2:69:16:b7: a1:06:e0:61:f8:d3:43:f5:9b:09:bb:6b:4d:e4:a0: d8:17:0c:3b:7a:2e:df:7b:d2:26:5a:eb:26:26:66: 50:23:6a:63:dc:f1:16:c0:51:28:0e:40:8d:f6:61: 7d:3a:0a:f8:c9:20:b9:aa:bd:b0:e8:9a:a0:f4:3d: fa:10:52:cc:39:b3:89:fb:44:04:6b:af:41:e3:e9: a5:ba:81:00:c0:d7:eb:61:2b:f7:82:38:a4:8a:42: 01:73:b8:33:b4:60:bd:f3:c0:32:b7:81:6d:d3:23: a9:b4:08:4d:9c:dd:13:72:4e:20:70:e0:35:14:6a: 97:4c:7b:f0:c3:99:c8:b2:56:0e:cc:56:d8:cc:36: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:08:70:D8:E9:02:11:8C:5E:D6:94:D9:F9:22:52:79:2D:F8:70:E4 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.79.0/24 Signature Algorithm: sha256WithRSAEncryption bb:0f:db:bc:f9:a6:6d:61:c9:75:49:e3:cc:4b:72:36:58:c6: 84:87:74:64:fc:44:cf:16:42:3d:d9:6a:2d:5e:91:eb:88:5e: 78:52:aa:6f:23:36:a3:e6:7c:46:12:85:2c:b1:47:ce:d9:04: f0:c8:fa:54:ce:8a:76:bd:09:9e:f0:8d:51:60:7c:1c:eb:40: 5b:59:a2:e0:48:c8:96:98:d1:3a:35:86:92:78:0b:09:25:02: 09:75:df:c6:c8:40:99:2c:d8:be:a3:50:75:53:82:c5:90:a0: e4:19:f2:e8:34:48:c1:54:48:25:e8:df:bd:e8:c1:97:55:70: a3:d5:e5:9a:8f:e8:1e:a5:0d:5a:c4:83:1e:f6:9d:33:bd:ba: 18:b8:fc:f6:5d:7c:40:05:0f:67:d8:6d:97:de:c9:2f:bb:d6: 15:72:77:46:5c:ee:da:1d:35:fe:4e:ba:43:7c:84:8a:2c:ba: 25:ae:98:d3:00:8c:0d:d6:8b:0a:b3:b1:ab:5f:a4:f4:72:27: 44:38:7b:2f:91:58:b5:02:d3:fb:d4:eb:30:9d:56:d7:bc:3b: 54:25:b4:1c:17:8f:db:e2:b1:e5:1e:75:8c:25:90:d5:02:fd: 70:13:57:d7:8b:15:b9:69:f1:3f:28:20:02:91:9d:b5:99:aa: 0c:73:29:3a -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFMDg3MEQ4RTkwMjEx OEM1RUQ2OTREOUY5MjI1Mjc5MkRGODcwRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdh/crLCs5fYUAcxTNje/SAXTZJqcAKXKSDGntbJxQcJ5QdhEf Pz1Ahxm0AWjv/4CEObCMW8q4YIY/mlu/HQAs4GwRPidN0dZrcvEO7wK60z3JGPTh ZwVGBW05xBRfd6P7jxpdO7KoqlpGc9EXATC+PMNhomkWt6EG4GH400P1mwm7a03k oNgXDDt6Lt970iZa6yYmZlAjamPc8RbAUSgOQI32YX06CvjJILmqvbDomqD0PfoQ Usw5s4n7RARrr0Hj6aW6gQDA1+thK/eCOKSKQgFzuDO0YL3zwDK3gW3TI6m0CE2c 3RNyTiBw4DUUapdMe/DDmciyVg7MVtjMNs7XAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUPghw2OkCEYxe1pTZ+SJSeS34cOQwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9QZ2h3Mk9rQ0VZeGUxcFRaLVNK U2VTMzRjT1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBP MA0GCSqGSIb3DQEBCwUAA4IBAQC7D9u8+aZtYcl1SePMS3I2WMaEh3Rk/ETPFkI9 2WotXpHriF54UqpvIzaj5nxGEoUssUfO2QTwyPpUzop2vQme8I1RYHwc60BbWaLg SMiWmNE6NYaSeAsJJQIJdd/GyECZLNi+o1B1U4LFkKDkGfLoNEjBVEgl6N+96MGX VXCj1eWaj+gepQ1axIMe9p0zvboYuPz2XXxABQ9n2G2X3skvu9YVcndGXO7aHTX+ TrpDfISKLLolrpjTAIwN1osKs7GrX6T0cidEOHsvkVi1AtP71OswnVbXvDtUJbQc F4/b4rHlHnWMJZDVAv1wE1fXixW5afE/KCACkZ21maoMcyk6 -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org