$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RkRrDy-h6-4wFv_0CFPODndsAAE.roa File: RkRrDy-h6-4wFv_0CFPODndsAAE.roa (raw, json) Hash identifier: +jYf5psgF0rcI/VE464vCKYpny9sERLcdeEwqpPY6gs= Subject key identifier: 46:44:6B:0F:2F:A1:EB:EE:30:16:FF:F4:08:53:CE:0E:77:6C:00:01 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11DE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RkRrDy-h6-4wFv_0CFPODndsAAE.roa Signing time: Mon 26 Aug 2024 05:18:01 +0000 ROA not before: Mon 26 Aug 2024 05:18:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 142005 IP address blocks: 210.242.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=46446B0F2FA1EBEE3016FFF40853CE0E776C0001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:26:f5:dd:a6:38:02:3e:e9:d1:da:5c:0a: 03:7f:02:11:7c:d0:d3:cc:b1:19:f5:a7:ee:d0:19: 62:0d:71:04:41:8b:47:d3:af:23:f4:80:26:e9:09: 9c:36:f0:1a:03:bd:60:a5:11:f4:d5:89:73:22:16: 1e:41:16:08:4d:5a:34:22:24:a1:4a:5d:cb:cd:d9: a3:43:dc:df:59:44:0a:ac:61:19:82:e3:8c:f0:9b: d0:88:f6:0a:e0:f5:f1:d2:ca:a7:ba:15:92:87:43: 86:88:ee:40:90:54:56:cb:29:f0:75:45:b4:6e:96: 36:99:e1:52:4a:77:48:6f:74:9e:f1:17:bc:c7:16: 7b:1f:45:4f:ce:c7:1b:54:bb:85:1e:80:2b:f5:61: 48:3d:14:1a:26:0a:99:b4:5e:90:5c:85:7c:64:98: 40:56:1d:41:66:b0:7b:a0:2b:b1:0b:3d:14:84:c0: 19:9c:07:af:eb:c1:aa:7c:d0:02:66:92:44:f7:cf: ca:11:11:24:a5:c0:79:17:3c:fb:fd:22:45:36:2c: cb:9c:5d:b1:37:b9:3d:70:7a:99:89:61:68:5a:dd: fc:f0:74:e0:90:d4:0b:e4:95:05:55:95:07:9f:fd: f9:b9:96:a1:bf:76:49:2b:d9:d6:a3:42:29:11:5f: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:44:6B:0F:2F:A1:EB:EE:30:16:FF:F4:08:53:CE:0E:77:6C:00:01 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RkRrDy-h6-4wFv_0CFPODndsAAE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.118.0/24 Signature Algorithm: sha256WithRSAEncryption 48:9a:a2:29:8d:81:a1:53:31:60:a0:88:e7:bc:f0:98:a8:2e: c3:96:d8:e0:b9:fd:f2:f6:7d:fd:c2:ee:cd:5a:da:7c:6c:0e: ba:13:50:84:ba:14:49:d1:dd:79:a7:b1:7f:31:b1:90:83:60: 01:8f:a1:9b:ca:6d:4b:d5:0d:76:c9:66:31:61:f7:79:84:bc: 90:8c:90:fd:33:47:36:3e:9b:c2:0d:9c:07:cf:bc:4f:a1:94: d8:fc:df:bc:1d:fd:99:bb:eb:f8:3e:81:74:1c:8c:22:d2:11: 8f:9a:49:b4:0f:62:c2:18:31:2f:d3:8b:7b:25:cb:50:5a:8e: 60:e9:a3:f7:15:08:d3:87:15:80:3e:ea:1c:47:8a:9d:7c:35: 54:a8:75:95:78:6a:2b:8b:75:97:00:a5:e2:e7:38:a6:6b:a4: 21:36:c9:3d:73:60:20:1d:a1:4d:e9:d8:4b:e3:65:fe:60:69: e2:78:64:50:13:22:da:ee:5d:0f:00:2f:de:cc:d4:4f:31:5b: 29:11:60:ee:65:dc:32:a2:27:c4:c3:82:52:fd:ca:1b:52:62: 7f:5f:c4:18:34:8a:d9:a7:2a:34:82:b1:77:2b:f5:2d:77:90: 25:2d:25:a2:42:78:60:66:d8:90:21:eb:b6:be:4a:eb:d2:aa: d8:90:13:91 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ2NDQ2QjBGMkZBMUVC RUUzMDE2RkZGNDA4NTNDRTBFNzc2QzAwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvcCb13aY4Aj7p0dpcCgN/AhF80NPMsRn1p+7QGWINcQRBi0fT ryP0gCbpCZw28BoDvWClEfTViXMiFh5BFghNWjQiJKFKXcvN2aND3N9ZRAqsYRmC 44zwm9CI9grg9fHSyqe6FZKHQ4aI7kCQVFbLKfB1RbRuljaZ4VJKd0hvdJ7xF7zH FnsfRU/OxxtUu4UegCv1YUg9FBomCpm0XpBchXxkmEBWHUFmsHugK7ELPRSEwBmc B6/rwap80AJmkkT3z8oRESSlwHkXPPv9IkU2LMucXbE3uT1wepmJYWha3fzwdOCQ 1AvklQVVlQef/fm5lqG/dkkr2dajQikRX2XHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURkRrDy+h6+4wFv/0CFPODndsAAEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Sa1JyRHktaDYtNHdGdl8wQ0ZQ T0RuZHNBQUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJ2 MA0GCSqGSIb3DQEBCwUAA4IBAQBImqIpjYGhUzFgoIjnvPCYqC7Dltjguf3y9n39 wu7NWtp8bA66E1CEuhRJ0d15p7F/MbGQg2ABj6Gbym1L1Q12yWYxYfd5hLyQjJD9 M0c2PpvCDZwHz7xPoZTY/N+8Hf2Zu+v4PoF0HIwi0hGPmkm0D2LCGDEv04t7JctQ Wo5g6aP3FQjThxWAPuocR4qdfDVUqHWVeGori3WXAKXi5zima6QhNsk9c2AgHaFN 6dhL42X+YGnieGRQEyLa7l0PAC/ezNRPMVspEWDuZdwyoifEw4JS/cobUmJ/X8QY NIrZpyo0grF3K/Utd5AlLSWiQnhgZtiQIeu2vkrr0qrYkBOR -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org