$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa File: RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa (raw, json) Hash identifier: zW3xdB79UPX94+kTkJXIAnMrLfGUlr0fjvgJQFQ+Ess= Subject key identifier: 46:51:68:DD:D4:6D:44:D3:20:A2:AE:4F:9B:53:24:9C:A8:6C:91:0E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11C2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa Signing time: Mon 26 Aug 2024 05:17:54 +0000 ROA not before: Mon 26 Aug 2024 05:17:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 203.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4546 (0x11c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=465168DDD46D44D320A2AE4F9B53249CA86C910E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:34:3f:ab:21:f4:15:1d:8a:38:d8:5d:7f:ab: 44:59:ab:02:05:f4:cd:61:e8:a9:0f:e1:49:18:79: 08:46:76:cf:f5:56:3b:e1:86:f2:07:88:41:31:03: 45:12:8a:98:44:4c:63:de:46:f8:cd:09:c8:03:b1: 43:6f:b4:06:83:7b:f0:63:d4:e9:5d:02:9c:8b:61: 38:cc:b3:ab:98:4b:58:d2:86:8f:ca:b3:8a:79:19: 10:04:b5:68:bf:ff:c3:6d:5c:d8:c2:d7:57:56:a3: b4:38:ea:35:e3:0b:9b:bb:5f:bd:01:08:5a:9a:71: 71:d0:16:6c:c1:c4:e5:6f:77:0b:ab:86:ed:a5:98: be:f6:78:5e:16:22:b4:89:19:6f:07:32:36:80:8e: fe:6f:03:69:6a:d1:04:04:8d:7d:ea:3f:40:43:c4: 45:f2:92:6f:49:0e:8a:43:86:6a:fc:f0:c4:4c:76: b7:10:eb:0a:cf:97:da:45:77:cd:e0:92:1f:47:85: 66:92:39:09:07:a7:b2:a5:a8:65:ab:39:a4:05:fb: 35:e8:05:1b:c2:74:07:2d:e5:90:9f:23:36:8d:d0: 38:29:f7:42:c0:39:ce:81:f2:b4:39:7f:b2:32:d9: 5f:e5:cb:9b:29:b3:42:17:93:57:a1:a1:76:b6:c2: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:51:68:DD:D4:6D:44:D3:20:A2:AE:4F:9B:53:24:9C:A8:6C:91:0E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.75.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:4e:3d:c0:f2:8c:a6:ae:14:c2:2a:d9:6c:ca:83:25:b0:10: 0c:c8:e9:39:da:2a:cc:61:95:ca:ed:a5:3a:8c:02:6b:b1:88: 17:50:df:a6:31:fe:50:e1:ce:4e:34:f1:a4:00:de:51:f7:82: 4d:71:2d:18:06:c2:f3:ee:11:b7:01:51:f7:90:3d:a2:e4:b9: b5:a3:df:89:a0:14:95:d5:9d:31:da:fa:df:a8:df:5c:de:3c: 98:e7:9a:3b:00:a1:45:d2:c5:e4:40:c8:ed:b7:bf:90:5a:83: 5b:52:b3:dd:45:4d:74:bb:d4:ac:07:e2:28:4d:b7:9e:87:00: 64:3c:c8:00:85:27:07:ed:2b:4c:19:77:8d:37:93:01:9d:11: d5:67:d6:85:af:d6:a7:79:54:dc:cc:59:bc:e3:7c:75:88:4d: 02:fd:20:2e:65:3b:f1:c9:70:23:d2:c2:e7:36:7f:5e:33:70: 55:0c:b3:64:f0:ec:4a:e3:6a:9a:2a:86:64:64:ba:84:da:59: f8:41:b6:9f:28:d8:3a:a3:8e:0f:54:2c:95:ac:34:83:a6:33: e8:25:d9:dc:e6:fb:9e:ca:3c:08:23:23:8b:69:3f:0e:88:2d: 22:eb:19:d1:28:56:4a:bd:77:72:05:e1:53:ef:69:34:38:99: 5b:fc:5c:f4 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ2NTE2OERERDQ2RDQ0 RDMyMEEyQUU0RjlCNTMyNDlDQTg2QzkxMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxND+rIfQVHYo42F1/q0RZqwIF9M1h6KkP4UkYeQhGds/1Vjvh hvIHiEExA0USiphETGPeRvjNCcgDsUNvtAaDe/Bj1OldApyLYTjMs6uYS1jSho/K s4p5GRAEtWi//8NtXNjC11dWo7Q46jXjC5u7X70BCFqacXHQFmzBxOVvdwurhu2l mL72eF4WIrSJGW8HMjaAjv5vA2lq0QQEjX3qP0BDxEXykm9JDopDhmr88MRMdrcQ 6wrPl9pFd83gkh9HhWaSOQkHp7KlqGWrOaQF+zXoBRvCdAct5ZCfIzaN0Dgp90LA Oc6B8rQ5f7Iy2V/ly5sps0IXk1ehoXa2wnQhAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQURlFo3dRtRNMgoq5Pm1MknKhskQ4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9SbEZvM2RSdFJOTWdvcTVQbTFN a25LaHNrUTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0sw DQYJKoZIhvcNAQELBQADggEBAAZOPcDyjKauFMIq2WzKgyWwEAzI6TnaKsxhlcrt pTqMAmuxiBdQ36Yx/lDhzk408aQA3lH3gk1xLRgGwvPuEbcBUfeQPaLkubWj34mg FJXVnTHa+t+o31zePJjnmjsAoUXSxeRAyO23v5Bag1tSs91FTXS71KwH4ihNt56H AGQ8yACFJwftK0wZd403kwGdEdVn1oWv1qd5VNzMWbzjfHWITQL9IC5lO/HJcCPS wuc2f14zcFUMs2Tw7ErjapoqhmRkuoTaWfhBtp8o2Dqjjg9ULJWsNIOmM+gl2dzm +57KPAgjI4tpPw6ILSLrGdEoVkq9d3IF4VPvaTQ4mVv8XPQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org