$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SOv_HTlmZmimWNSNNrSWOKio2BY.roa File: SOv_HTlmZmimWNSNNrSWOKio2BY.roa (raw, json) Hash identifier: EpeZ/jHR+mai2XTPiuR1K9OzyQc++tUsodfU02nmDR4= Subject key identifier: 48:EB:FF:1D:39:66:66:68:A6:58:D4:8D:36:B4:96:38:A8:A8:D8:16 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11BA Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SOv_HTlmZmimWNSNNrSWOKio2BY.roa Signing time: Mon 26 Aug 2024 05:17:52 +0000 ROA not before: Mon 26 Aug 2024 05:17:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 198949 IP address blocks: 203.74.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 02:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=48EBFF1D39666668A658D48D36B49638A8A8D816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:e2:b5:b9:3b:87:91:f1:a8:84:3a:48:77: fa:62:25:cc:bf:8f:2d:5e:0d:ce:ab:1f:0d:dc:49: 35:b3:d7:1a:2f:b6:5b:24:8a:ae:76:bb:a9:3f:69: 35:7c:67:0f:c3:50:e0:43:85:e0:7b:2a:ed:a7:a5: a6:9a:31:c7:25:9d:f7:c2:10:a6:9a:be:df:49:fc: fc:6a:63:60:dc:e8:dd:ff:43:33:34:a5:f5:c3:ab: b1:45:11:ea:af:e7:b4:41:18:22:70:cf:2a:9d:85: 77:12:39:db:e5:37:cb:e9:54:53:b5:9a:4a:7e:14: c5:1e:94:78:da:bc:7f:d9:24:2a:20:25:35:7e:dd: c0:0c:27:5f:38:13:ed:35:df:7b:aa:ad:1c:73:c6: c2:df:db:21:43:b2:e7:c8:d1:e6:7e:fd:b8:53:4e: 72:62:3e:74:f4:ce:eb:c5:c1:a7:b4:18:a2:08:77: 94:78:a8:85:1f:52:08:2e:1b:67:59:3e:27:e0:58: a0:06:05:d7:13:70:a1:f4:5d:a2:de:73:27:0a:84: b5:8f:bf:9c:38:1f:ac:e7:75:28:8c:2c:86:c8:de: b7:6f:cf:d8:1e:8f:c5:2c:64:0e:95:ba:08:74:00: 9f:8a:27:70:70:1d:e6:86:41:78:59:f1:88:f4:b1: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EB:FF:1D:39:66:66:68:A6:58:D4:8D:36:B4:96:38:A8:A8:D8:16 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SOv_HTlmZmimWNSNNrSWOKio2BY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.176.0/24 Signature Algorithm: sha256WithRSAEncryption a7:74:0b:05:83:44:fa:69:e4:b9:b0:38:77:30:11:98:c9:07: c6:1b:31:34:87:a3:6e:bf:78:af:97:2a:e0:eb:fd:c8:2f:21: e5:ee:5a:85:ee:dc:07:a9:60:2b:13:a0:70:98:4d:8e:24:21: 1b:8d:23:16:8f:37:15:73:76:d3:a8:16:13:7f:b8:a5:e6:8b: 4b:4f:6a:71:cd:88:f5:bf:c3:30:86:d8:2f:06:e3:ed:0a:28: ce:52:59:4d:12:73:40:e5:55:9c:55:fa:9c:0b:22:5f:3c:04: 5a:0e:79:a5:95:41:34:4f:51:9a:ee:51:68:ac:1e:3a:e4:31: e4:9f:44:0f:19:2d:1a:fc:55:4e:7c:2e:b9:ae:d9:67:8f:12: 48:ec:ee:9d:18:c1:d0:bf:72:88:80:9b:ad:41:bb:30:a0:c8: 4e:fd:ed:2a:48:b0:8c:31:9d:20:6b:86:c8:09:c7:dd:d2:25: d5:e8:ec:30:39:8d:0b:29:9b:3c:c5:b6:10:da:a0:c9:c8:a2: 96:69:92:e0:fc:36:f8:e6:00:9d:58:a2:28:08:58:84:c2:43: 52:c1:b2:5a:59:50:8c:11:78:de:11:58:75:2d:26:ae:10:05: cf:fb:9f:23:a4:6a:95:b0:b6:fc:f3:d2:5e:9d:24:23:30:cb: 70:f0:71:40 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ4RUJGRjFEMzk2NjY2 NjhBNjU4RDQ4RDM2QjQ5NjM4QThBOEQ4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFmuK1uTuHkfGohDpId/piJcy/jy1eDc6rHw3cSTWz1xovtlsk iq52u6k/aTV8Zw/DUOBDheB7Ku2npaaaMcclnffCEKaavt9J/PxqY2Dc6N3/QzM0 pfXDq7FFEeqv57RBGCJwzyqdhXcSOdvlN8vpVFO1mkp+FMUelHjavH/ZJCogJTV+ 3cAMJ184E+0133uqrRxzxsLf2yFDsufI0eZ+/bhTTnJiPnT0zuvFwae0GKIId5R4 qIUfUgguG2dZPifgWKAGBdcTcKH0XaLecycKhLWPv5w4H6zndSiMLIbI3rdvz9ge j8UsZA6Vugh0AJ+KJ3BwHeaGQXhZ8Yj0sfMdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUSOv/HTlmZmimWNSNNrSWOKio2BYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9TT3ZfSFRsbVptaW1XTlNOTnJT V09LaW8yQlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0qw MA0GCSqGSIb3DQEBCwUAA4IBAQCndAsFg0T6aeS5sDh3MBGYyQfGGzE0h6Nuv3iv lyrg6/3ILyHl7lqF7twHqWArE6BwmE2OJCEbjSMWjzcVc3bTqBYTf7il5otLT2px zYj1v8MwhtgvBuPtCijOUllNEnNA5VWcVfqcCyJfPARaDnmllUE0T1Ga7lForB46 5DHkn0QPGS0a/FVOfC65rtlnjxJI7O6dGMHQv3KIgJutQbswoMhO/e0qSLCMMZ0g a4bICcfd0iXV6OwwOY0LKZs8xbYQ2qDJyKKWaZLg/Db45gCdWKIoCFiEwkNSwbJa WVCMEXjeEVh1LSauEAXP+58jpGqVsLb889JenSQjMMtw8HFA -----END CERTIFICATE-----Generated at Sun Nov 24 22:50:19 2024 by rpki-client on console-fra.rpki-client.org