$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Rw167yBO5jWjHAQ1BkFwRlxhTn0.roa File: Rw167yBO5jWjHAQ1BkFwRlxhTn0.roa (raw, json) Hash identifier: Xz9Hmn/tnrwKiWSJg+jzzujFuIaDkyFpMRPiR61rkds= Subject key identifier: 47:0D:7A:EF:20:4E:E6:35:A3:1C:04:35:06:41:70:46:5C:61:4E:7D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 118E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Rw167yBO5jWjHAQ1BkFwRlxhTn0.roa Signing time: Mon 26 Aug 2024 05:17:40 +0000 ROA not before: Mon 26 Aug 2024 05:17:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17714 IP address blocks: 114.30.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4494 (0x118e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=470D7AEF204EE635A31C0435064170465C614E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:72:df:a2:0b:12:90:49:3a:a0:81:a2:e1: 31:de:c6:44:0f:74:1f:ae:e7:f3:b4:42:8d:ef:06: 78:da:bd:06:9a:38:2c:9b:bc:a9:d0:6f:53:78:6f: 92:82:04:88:a2:36:c2:d2:44:bd:6a:7b:c9:5f:39: da:5a:85:de:99:ab:0b:93:48:42:b9:ee:9e:ae:01: 5c:42:53:f1:23:6b:ef:2b:34:e5:d8:f1:c8:26:01: 3b:6b:2f:b7:d2:c8:f8:62:c4:c3:bf:3c:5c:07:61: ac:81:ad:f0:6a:94:97:18:c0:45:61:c5:c4:57:c2: 3f:2b:bc:d2:dc:09:2d:3b:1f:38:bf:a1:7e:2f:4f: 60:67:a2:96:20:29:3a:6c:e7:ff:ef:5a:1d:cd:41: 9f:e0:65:96:db:5b:96:9d:e6:d0:81:c1:3d:80:23: 87:03:bb:45:4a:eb:0c:e8:98:38:a7:c7:0c:6a:7a: 37:0b:f9:38:03:34:f3:29:15:3c:26:4e:08:89:3d: f4:74:61:61:08:40:33:08:01:7a:18:42:06:89:8b: 6e:d3:9b:e2:06:0e:ae:36:be:75:95:c9:37:71:de: c2:95:4d:b5:2d:31:9b:ec:ed:98:09:3d:e2:37:6f: 92:c8:f8:06:2c:02:7a:e3:48:d6:13:33:7d:48:92: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:7A:EF:20:4E:E6:35:A3:1C:04:35:06:41:70:46:5C:61:4E:7D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Rw167yBO5jWjHAQ1BkFwRlxhTn0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.30.35.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:43:96:92:9d:99:f6:b1:74:9e:d2:ef:cd:d1:ee:56:d2:26: 1c:c9:66:14:c0:d0:26:a3:2c:d2:bc:fb:94:f4:0d:09:47:2d: 15:f0:7a:1e:6b:79:02:21:90:0f:92:59:40:a8:12:55:c7:15: 82:7b:7c:60:80:8a:06:76:66:d5:0d:e9:54:17:14:c7:64:29: 68:f0:ba:9c:a7:4e:0b:87:71:c5:26:ec:0a:f2:5d:c8:6d:d4: a3:65:fb:85:af:56:9b:f3:6c:76:5b:ed:b6:2a:1b:0e:41:e9: 49:fc:0d:dd:4c:bd:fd:04:ab:61:0e:ea:97:7c:8a:a5:b3:e4: c3:6d:c8:1a:ab:78:37:3f:e7:3a:e9:cb:bf:21:c6:c1:59:5e: b3:f2:6f:2c:39:14:c0:08:6e:47:e5:b1:c1:b7:1e:35:e1:76: b2:5d:f9:5b:b3:87:20:98:fa:f3:5b:a6:35:12:5c:f7:03:65: 56:03:af:f8:69:d6:80:62:1d:fa:b4:26:27:9d:35:52:83:e7: d6:85:f4:2a:4b:34:0c:d8:2d:f2:6a:aa:23:0e:57:af:88:59: 33:f7:f6:4c:a8:af:6a:41:1b:d8:d6:ca:ab:96:bf:4b:40:99: 07:53:a0:2b:a7:0e:a7:8c:ee:ca:05:39:14:a3:e2:70:de:a3: 5d:6c:01:71 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ3MEQ3QUVGMjA0RUU2 MzVBMzFDMDQzNTA2NDE3MDQ2NUM2MTRFN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaVXLfogsSkEk6oIGi4THexkQPdB+u5/O0Qo3vBnjavQaaOCyb vKnQb1N4b5KCBIiiNsLSRL1qe8lfOdpahd6ZqwuTSEK57p6uAVxCU/Eja+8rNOXY 8cgmATtrL7fSyPhixMO/PFwHYayBrfBqlJcYwEVhxcRXwj8rvNLcCS07Hzi/oX4v T2BnopYgKTps5//vWh3NQZ/gZZbbW5ad5tCBwT2AI4cDu0VK6wzomDinxwxqejcL +TgDNPMpFTwmTgiJPfR0YWEIQDMIAXoYQgaJi27Tm+IGDq42vnWVyTdx3sKVTbUt MZvs7ZgJPeI3b5LI+AYsAnrjSNYTM31IkhnFAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURw167yBO5jWjHAQ1BkFwRlxhTn0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9SdzE2N3lCTzVqV2pIQVExQmtG d1JseGhUbjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAch4j MA0GCSqGSIb3DQEBCwUAA4IBAQCbQ5aSnZn2sXSe0u/N0e5W0iYcyWYUwNAmoyzS vPuU9A0JRy0V8Hoea3kCIZAPkllAqBJVxxWCe3xggIoGdmbVDelUFxTHZClo8Lqc p04Lh3HFJuwK8l3IbdSjZfuFr1ab82x2W+22KhsOQelJ/A3dTL39BKthDuqXfIql s+TDbcgaq3g3P+c66cu/IcbBWV6z8m8sORTACG5H5bHBtx414XayXflbs4cgmPrz W6Y1Elz3A2VWA6/4adaAYh36tCYnnTVSg+fWhfQqSzQM2C3yaqojDleviFkz9/ZM qK9qQRvY1sqrlr9LQJkHU6Arpw6njO7KBTkUo+Jw3qNdbAFx -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org