$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/S5OQhuklTNl5p1vAvO6o-RI_XaE.roa File: S5OQhuklTNl5p1vAvO6o-RI_XaE.roa (raw, json) Hash identifier: 6tZiffAZEHjeL8O02UYVeU4wpV3rzhnevGsxPgfVdKs= Subject key identifier: 4B:93:90:86:E9:25:4C:D9:79:A7:5B:C0:BC:EE:A8:F9:12:3F:5D:A1 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11F7 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S5OQhuklTNl5p1vAvO6o-RI_XaE.roa Signing time: Mon 26 Aug 2024 05:18:07 +0000 ROA not before: Mon 26 Aug 2024 05:18:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 8068 IP address blocks: 61.220.60.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4599 (0x11f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4B939086E9254CD979A75BC0BCEEA8F9123F5DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:d9:db:9b:84:78:8b:5e:80:69:75:d8:ee: d8:05:4a:8e:e5:6f:a2:40:c4:ac:ba:26:92:13:2b: 4b:96:34:3a:a2:b5:43:ac:64:59:93:5d:24:d6:6c: 32:2e:cb:b5:57:eb:d6:92:db:60:7f:20:18:1c:72: 5d:3b:ba:24:f0:33:7a:50:d0:57:3c:13:3c:fd:e2: 3d:e2:fe:cb:f8:0d:31:8a:5f:4d:26:d3:68:8f:a8: bc:44:d1:3c:09:87:42:8a:33:9a:18:75:07:ac:70: 72:d4:e2:21:f8:b3:be:cf:1d:2c:40:f4:3f:2d:2f: 5f:da:0e:34:59:d5:bc:73:10:92:02:e1:66:bd:c7: 4f:ab:66:2c:8f:a9:79:81:82:a0:0b:1e:ac:97:e5: 86:87:d9:cc:aa:e2:5d:27:b0:a4:a5:7f:7a:e0:33: 56:e4:43:d0:21:41:9a:d4:ca:1e:b3:91:ad:25:5e: bc:65:53:a5:d9:ab:de:df:e8:ca:8e:30:66:40:4b: 1a:e7:c8:ec:f9:9c:6e:0e:22:15:97:fb:0f:e9:c8: 80:2b:ff:53:8e:47:f2:01:45:3e:ed:dd:8b:45:e5: 95:5d:d1:ff:d4:6e:b4:87:83:a1:c2:93:57:b4:bb: 32:41:d4:ad:63:f6:3a:d7:7c:7c:5a:89:c4:fd:fa: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:93:90:86:E9:25:4C:D9:79:A7:5B:C0:BC:EE:A8:F9:12:3F:5D:A1 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S5OQhuklTNl5p1vAvO6o-RI_XaE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.220.60.200/29 Signature Algorithm: sha256WithRSAEncryption a5:39:22:41:8b:5c:e4:f7:ec:7b:db:68:06:f4:89:20:e5:bf: 24:f4:42:fc:58:dc:e2:8b:3d:a8:67:ea:83:b3:54:e3:67:f4: 55:ad:12:ae:d2:b3:a1:dd:e6:32:6c:b6:02:2a:18:9d:11:61: 84:ec:b7:33:57:bc:09:dc:bf:c6:3d:3c:44:db:e9:ae:9f:be: 88:f3:b8:84:67:ec:2b:6e:a4:23:3c:0a:a1:7a:f0:f8:84:62: 89:e0:55:43:32:dc:d9:8d:86:31:69:a7:d9:4f:13:b0:06:b4: a8:4b:c3:71:a6:3c:b2:e0:f3:8d:62:47:f5:a4:b8:5a:8f:7b: 9c:ca:c5:53:bc:1d:2e:19:2a:93:6d:86:39:cc:23:92:f3:0e: 12:e2:8f:c2:78:f2:b7:5c:48:24:7b:7b:d1:f2:67:6c:df:db: 2d:ab:1a:f3:a6:7e:e6:78:f3:46:53:c8:e5:7e:54:09:f1:8a: 35:1a:26:44:ec:8c:2f:03:5f:a1:f0:cd:92:4d:2a:b3:39:1e: ab:d9:8c:db:da:1d:c8:90:07:0f:92:66:67:fb:d5:45:34:84: 7e:03:c8:0a:5b:93:80:0c:16:b3:16:eb:56:fc:5a:fc:ba:76: c2:7d:a7:29:ce:a2:c0:fc:08:46:2e:a8:bb:44:3e:69:7d:08: 48:14:f3:00 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCOTM5MDg2RTkyNTRD RDk3OUE3NUJDMEJDRUVBOEY5MTIzRjVEQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiXdnbm4R4i16AaXXY7tgFSo7lb6JAxKy6JpITK0uWNDqitUOs ZFmTXSTWbDIuy7VX69aS22B/IBgccl07uiTwM3pQ0Fc8Ezz94j3i/sv4DTGKX00m 02iPqLxE0TwJh0KKM5oYdQescHLU4iH4s77PHSxA9D8tL1/aDjRZ1bxzEJIC4Wa9 x0+rZiyPqXmBgqALHqyX5YaH2cyq4l0nsKSlf3rgM1bkQ9AhQZrUyh6zka0lXrxl U6XZq97f6MqOMGZASxrnyOz5nG4OIhWX+w/pyIAr/1OOR/IBRT7t3YtF5ZVd0f/U brSHg6HCk1e0uzJB1K1j9jrXfHxaicT9+rF9AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUS5OQhuklTNl5p1vAvO6o+RI/XaEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9TNU9RaHVrbFRObDVwMXZBdk82 by1SSV9YYUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDPdw8 yDANBgkqhkiG9w0BAQsFAAOCAQEApTkiQYtc5Pfse9toBvSJIOW/JPRC/Fjc4os9 qGfqg7NU42f0Va0SrtKzod3mMmy2AioYnRFhhOy3M1e8Cdy/xj08RNvprp++iPO4 hGfsK26kIzwKoXrw+IRiieBVQzLc2Y2GMWmn2U8TsAa0qEvDcaY8suDzjWJH9aS4 Wo97nMrFU7wdLhkqk22GOcwjkvMOEuKPwnjyt1xIJHt70fJnbN/bLasa86Z+5njz RlPI5X5UCfGKNRomROyMLwNfofDNkk0qszkeq9mM29odyJAHD5JmZ/vVRTSEfgPI CluTgAwWsxbrVvxa/Lp2wn2nKc6iwPwIRi6ou0Q+aX0ISBTzAA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org