$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/VMObLOxfWQX25_EvRF4w4fD61Cg.roa File: VMObLOxfWQX25_EvRF4w4fD61Cg.roa (raw, json) Hash identifier: 2YaqdEyvQoT9HCmRL4DbGmmPCXP4gMkiVVSrRfXTF/s= Subject key identifier: 54:C3:9B:2C:EC:5F:59:05:F6:E7:F1:2F:44:5E:30:E1:F0:FA:D4:28 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11DF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VMObLOxfWQX25_EvRF4w4fD61Cg.roa Signing time: Mon 26 Aug 2024 05:18:01 +0000 ROA not before: Mon 26 Aug 2024 05:18:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 54994 IP address blocks: 210.61.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4575 (0x11df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=54C39B2CEC5F5905F6E7F12F445E30E1F0FAD428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:e7:4f:67:cb:0b:60:7c:f5:69:d7:15:ee: 0d:9f:00:c8:e2:50:5d:54:8a:0d:e0:45:0d:f6:ad: 68:93:90:ac:b1:da:eb:72:b1:30:a4:d1:a1:c5:63: 60:8a:22:d6:18:da:fb:b4:f2:d2:4f:bd:72:2f:ce: 69:8a:5c:9c:7f:1c:fb:54:36:5d:a3:56:51:e8:b5: bd:ce:2f:82:be:11:6a:40:3a:a1:fe:66:6a:7c:d9: 7a:7e:b7:97:9d:d0:14:60:19:a0:50:c2:4c:f4:3a: 75:0d:27:48:15:bb:e0:08:44:e2:dc:0b:df:8e:26: bf:0d:82:00:f7:dd:6e:d5:6c:f1:da:08:69:68:fe: eb:e9:fe:28:8a:6c:eb:07:6f:da:7b:fe:d8:a9:68: f7:55:61:61:0b:5a:b3:58:c1:74:a4:a2:d2:77:74: 7f:eb:e4:6b:5d:a2:72:a9:ab:34:ab:fe:5e:4b:49: 3a:ec:50:1a:a2:39:91:82:c4:d9:25:87:75:0e:07: 9d:2b:cc:34:24:26:94:91:ee:d7:28:4c:3a:61:cb: 77:c3:1c:b4:ca:ff:c8:8c:e1:69:55:81:0c:14:c1: f0:ea:f2:18:5a:7f:40:52:ba:79:69:32:1a:2a:f3: e4:b7:13:7d:a8:b1:96:26:67:47:72:1a:cb:d9:32: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C3:9B:2C:EC:5F:59:05:F6:E7:F1:2F:44:5E:30:E1:F0:FA:D4:28 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VMObLOxfWQX25_EvRF4w4fD61Cg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.180.0/24 Signature Algorithm: sha256WithRSAEncryption 49:64:cf:ef:bc:dc:ca:0a:00:84:aa:c5:52:06:de:c2:4c:a3: c0:3f:bb:7f:eb:81:36:0f:c2:8e:c6:5d:bc:16:c0:2c:56:79: 2b:b1:3b:e0:96:f4:06:2b:38:e1:b7:7c:a4:ab:86:9f:72:82: b0:5f:fa:ca:ba:49:73:b4:7c:c8:7c:92:98:ad:0a:ee:4e:86: 0b:b6:6c:96:9d:de:0d:cf:a2:91:9f:55:60:08:fa:58:5d:a1: 1d:5f:83:18:62:27:93:f7:75:09:18:49:7a:28:55:5f:f6:d2: 4f:43:62:c1:41:7d:48:f6:44:88:e3:da:94:74:5b:fd:d8:26: 96:25:bf:58:e4:d6:1d:96:76:bc:66:df:62:2c:70:81:32:c7: 87:d6:3d:97:32:33:bf:df:13:a0:0e:85:f0:b0:8f:b2:8f:03: ac:a1:fc:88:76:b0:fd:63:84:1a:4c:7f:6f:6d:80:89:78:be: f3:bf:35:a2:20:bd:21:44:4c:3f:55:b1:2b:3e:11:96:83:56: 02:48:ff:ae:fd:ab:19:24:d8:f8:1d:17:c8:7a:f6:cc:ea:78: 6a:7b:3c:92:40:50:62:d9:ad:c6:06:7f:07:c9:00:0a:e6:0e: 1a:43:69:e5:cf:e4:52:d6:1f:a2:df:d7:4a:ab:7e:7c:21:d5: ca:c7:b7:98 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0QzM5QjJDRUM1RjU5 MDVGNkU3RjEyRjQ0NUUzMEUxRjBGQUQ0MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwVedPZ8sLYHz1adcV7g2fAMjiUF1Uig3gRQ32rWiTkKyx2uty sTCk0aHFY2CKItYY2vu08tJPvXIvzmmKXJx/HPtUNl2jVlHotb3OL4K+EWpAOqH+ Zmp82Xp+t5ed0BRgGaBQwkz0OnUNJ0gVu+AIROLcC9+OJr8NggD33W7VbPHaCGlo /uvp/iiKbOsHb9p7/tipaPdVYWELWrNYwXSkotJ3dH/r5GtdonKpqzSr/l5LSTrs UBqiOZGCxNklh3UOB50rzDQkJpSR7tcoTDphy3fDHLTK/8iM4WlVgQwUwfDq8hha f0BSunlpMhoq8+S3E32osZYmZ0dyGsvZMoB/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUVMObLOxfWQX25/EvRF4w4fD61CgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9WTU9iTE94ZldRWDI1X0V2UkY0 dzRmRDYxQ2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j20 MA0GCSqGSIb3DQEBCwUAA4IBAQBJZM/vvNzKCgCEqsVSBt7CTKPAP7t/64E2D8KO xl28FsAsVnkrsTvglvQGKzjht3ykq4afcoKwX/rKuklztHzIfJKYrQruToYLtmyW nd4Nz6KRn1VgCPpYXaEdX4MYYieT93UJGEl6KFVf9tJPQ2LBQX1I9kSI49qUdFv9 2CaWJb9Y5NYdlna8Zt9iLHCBMseH1j2XMjO/3xOgDoXwsI+yjwOsofyIdrD9Y4Qa TH9vbYCJeL7zvzWiIL0hREw/VbErPhGWg1YCSP+u/asZJNj4HRfIevbM6nhqezyS QFBi2a3GBn8HyQAK5g4aQ2nlz+RS1h+i39dKq358IdXKx7eY -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org