$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/UHIgG9-8FeCMtJ-d37Cv4QJFA6c.roa File: UHIgG9-8FeCMtJ-d37Cv4QJFA6c.roa (raw, json) Hash identifier: xxOB2xhQoI+Sh9ToGBbZGxBDGGAcQfwFZX+K7ZjPk4Q= Subject key identifier: 50:72:20:1B:DF:BC:15:E0:8C:B4:9F:9D:DF:B0:AF:E1:02:45:03:A7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11AD Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UHIgG9-8FeCMtJ-d37Cv4QJFA6c.roa Signing time: Mon 26 Aug 2024 05:17:48 +0000 ROA not before: Mon 26 Aug 2024 05:17:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 211.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4525 (0x11ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5072201BDFBC15E08CB49F9DDFB0AFE1024503A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:31:d0:c8:8e:2a:a6:9d:72:b6:4e:c4:5c: 2f:be:af:ec:5a:c1:8a:e2:9e:b3:e3:9b:3c:91:f7: d4:15:08:d2:c3:c7:82:5f:15:6b:b1:21:b0:88:17: 20:ed:de:c3:c0:bc:c8:92:68:66:2a:34:d2:d5:b4: a9:38:8c:1c:5c:1b:c7:dd:19:12:03:d1:4d:64:35: 07:7f:40:ac:e2:e6:1e:3b:5e:e4:83:ce:0f:d2:ae: fa:e4:9d:7f:5d:6a:e0:c8:b8:d8:21:22:39:a3:13: d5:8e:d6:95:56:37:28:c1:5b:6c:c9:43:ca:48:42: 79:68:35:9b:60:31:59:1a:df:d3:af:e3:ce:0c:7c: 63:78:ec:fe:fc:8e:70:18:f5:48:5f:d8:ac:53:22: d0:af:0d:cd:8c:24:39:e2:e7:74:af:ff:cf:e4:66: 86:3f:0f:40:71:16:98:ac:02:f2:5c:88:51:46:c3: 95:c2:9d:38:86:43:b9:0a:63:51:7c:0f:74:ac:e0: e8:14:5b:fa:c9:88:ee:10:b1:bc:c6:9b:9e:4a:bd: 24:09:c8:6d:83:7e:05:a5:e1:ec:1b:14:43:0f:e4: 55:a2:4d:cd:7a:34:ec:9d:63:92:db:79:84:75:9d: d6:a4:36:7c:d5:4a:df:f2:91:15:c6:5d:27:3d:8a: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:72:20:1B:DF:BC:15:E0:8C:B4:9F:9D:DF:B0:AF:E1:02:45:03:A7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UHIgG9-8FeCMtJ-d37Cv4QJFA6c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:13:91:0e:24:a6:4a:b3:e0:f4:21:b8:b6:89:78:a1:d4:66: 69:c2:30:19:d8:09:86:c5:1f:69:4d:ab:04:06:25:14:47:41: ba:98:b6:c8:9b:94:65:8f:fa:57:3c:f5:d5:f1:0c:da:75:6a: 1b:6d:7d:07:cd:68:2c:ab:43:14:85:73:b4:a5:c2:39:bb:63: 95:8a:c8:6f:ab:1b:ca:b4:ca:85:0e:dd:41:ae:6f:c4:2c:39: e8:df:15:43:f9:45:8a:7a:7e:53:84:7f:a7:5b:14:56:7e:71: 2b:83:fb:b0:90:6d:97:cf:15:a7:5e:84:b9:42:59:18:2d:55: ee:96:49:28:f3:2c:c4:4e:bb:53:28:47:42:f2:bb:7e:0b:a3: ed:0b:79:3f:93:58:79:66:58:b1:dd:3a:4b:33:79:a1:e2:5c: 79:67:3c:96:48:03:bd:20:4a:42:a3:70:f2:fc:34:47:bf:0f: 55:21:fa:eb:d1:d5:87:d6:8a:59:07:29:a3:71:65:44:3c:5f: 08:2f:4e:38:c8:5a:62:b0:6b:d5:25:6e:c8:b7:ac:1b:57:24: 98:da:81:de:0a:77:c4:bd:0f:f1:6c:ba:8b:88:56:58:c0:c9: 8f:88:9b:31:f7:40:9c:a7:c1:60:f5:49:6d:b8:e1:51:44:cb: 1a:f7:29:5e -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUwNzIyMDFCREZCQzE1 RTA4Q0I0OUY5RERGQjBBRkUxMDI0NTAzQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkTDHQyI4qpp1ytk7EXC++r+xawYrinrPjmzyR99QVCNLDx4Jf FWuxIbCIFyDt3sPAvMiSaGYqNNLVtKk4jBxcG8fdGRID0U1kNQd/QKzi5h47XuSD zg/SrvrknX9dauDIuNghIjmjE9WO1pVWNyjBW2zJQ8pIQnloNZtgMVka39Ov484M fGN47P78jnAY9Uhf2KxTItCvDc2MJDni53Sv/8/kZoY/D0BxFpisAvJciFFGw5XC nTiGQ7kKY1F8D3Ss4OgUW/rJiO4QsbzGm55KvSQJyG2DfgWl4ewbFEMP5FWiTc16 NOydY5LbeYR1ndakNnzVSt/ykRXGXSc9ikShAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUUHIgG9+8FeCMtJ+d37Cv4QJFA6cwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9VSElnRzktOEZlQ010Si1kMzdD djRRSkZBNmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA00gw DQYJKoZIhvcNAQELBQADggEBAEMTkQ4kpkqz4PQhuLaJeKHUZmnCMBnYCYbFH2lN qwQGJRRHQbqYtsiblGWP+lc89dXxDNp1ahttfQfNaCyrQxSFc7Slwjm7Y5WKyG+r G8q0yoUO3UGub8QsOejfFUP5RYp6flOEf6dbFFZ+cSuD+7CQbZfPFadehLlCWRgt Ve6WSSjzLMROu1MoR0Lyu34Lo+0LeT+TWHlmWLHdOkszeaHiXHlnPJZIA70gSkKj cPL8NEe/D1Uh+uvR1YfWilkHKaNxZUQ8XwgvTjjIWmKwa9Ulbsi3rBtXJJjagd4K d8S9D/FsuouIVljAyY+ImzH3QJynwWD1SW244VFEyxr3KV4= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:38 2024 by rpki-client on console-fra.rpki-client.org