$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/V_0c-fB_MDyXbGKaDpvIDUFm0AM.roa File: V_0c-fB_MDyXbGKaDpvIDUFm0AM.roa (raw, json) Hash identifier: NidT6Kynoq4g7knzlsgzr655npiH6T5QnKcBGz9/+Fo= Subject key identifier: 57:FD:1C:F9:F0:7F:30:3C:97:6C:62:9A:0E:9B:C8:0D:41:66:D0:03 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11D3 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/V_0c-fB_MDyXbGKaDpvIDUFm0AM.roa Signing time: Mon 26 Aug 2024 05:17:59 +0000 ROA not before: Mon 26 Aug 2024 05:17:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131660 IP address blocks: 2001:b000:590::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4563 (0x11d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=57FD1CF9F07F303C976C629A0E9BC80D4166D003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:bc:7e:29:d4:f4:a8:77:36:b9:66:5c:b2: 45:4b:9b:b3:ba:9f:c7:a0:f4:cb:4e:a4:6d:62:af: e0:b0:98:04:98:a0:69:22:f3:62:02:e7:2f:e3:39: 4b:7b:d0:00:d2:39:9f:c4:01:f6:6c:ef:2e:c8:89: c9:dd:43:49:ad:cb:d8:12:ce:82:88:65:77:11:f1: 34:9f:e0:df:cf:aa:6c:1c:a7:ad:b2:a1:38:42:0a: a6:d9:b9:4f:f9:60:09:87:6d:ad:5a:87:d3:27:4a: a7:13:53:ce:d0:7e:93:62:5a:80:22:ad:6a:1f:4e: 3c:39:d8:4e:26:ec:4b:3b:42:b1:41:47:c1:18:09: be:3d:72:a9:47:90:fb:60:21:f8:42:df:42:c5:ef: 2b:ef:e7:e7:cf:01:9e:01:3f:fb:a8:f7:33:3e:8b: 0d:ee:41:01:c2:4b:a8:aa:0c:b3:96:8a:88:b9:40: 3a:86:2c:39:9a:35:9f:d6:3a:4e:69:6b:a5:b3:fd: 53:94:db:db:3a:56:75:71:a2:52:25:cd:c2:d5:6c: b4:41:d7:9d:2f:ea:04:de:42:4f:61:bb:49:1b:44: b8:51:16:8a:07:70:12:d8:45:98:8d:e3:da:b7:5f: 30:f4:79:18:fd:75:d2:00:7f:50:60:6a:76:60:5f: 23:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FD:1C:F9:F0:7F:30:3C:97:6C:62:9A:0E:9B:C8:0D:41:66:D0:03 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/V_0c-fB_MDyXbGKaDpvIDUFm0AM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000:590::/48 Signature Algorithm: sha256WithRSAEncryption 4a:ef:6c:b1:3b:20:87:32:60:c8:84:2d:fd:ba:df:5e:2f:49: b5:51:bb:03:69:32:de:4f:27:0a:2b:c7:7d:dc:02:f7:7a:ef: a1:10:9d:15:4e:ce:b2:54:b3:d3:91:1f:2b:2c:d3:20:28:d6: ef:ab:ca:6c:9d:be:e1:34:81:98:85:7e:10:e8:0d:3c:ac:10: aa:75:3a:c0:73:99:f2:c9:76:27:ae:ef:ed:e9:1c:dd:7c:aa: c6:78:82:e9:96:b3:6d:98:6b:2d:7d:70:fa:b5:78:ff:44:87: 91:d3:0c:19:d0:f9:39:e1:01:61:24:35:71:61:d2:21:ba:9b: c6:cb:2e:f7:30:0f:7a:34:9c:d4:a9:e3:ef:05:8e:15:27:6a: a1:06:2a:01:78:90:92:d7:47:98:5e:ea:f2:39:66:91:ff:e3: 49:87:17:b7:85:32:da:9f:e5:81:70:ad:33:36:b9:00:d3:f2: c1:23:b0:eb:00:01:33:ae:df:30:f0:ff:07:7c:bc:69:de:9c: e2:75:55:c1:74:c6:41:c6:41:46:a7:93:f3:88:fe:47:d9:09: 9d:31:90:01:ba:15:cc:20:b1:47:be:1e:fb:13:30:f1:12:e1: c1:d4:d9:b1:15:d1:eb:2c:68:83:d4:8a:e6:01:a7:38:d8:c6: bd:ea:5d:40 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU3RkQxQ0Y5RjA3RjMw M0M5NzZDNjI5QTBFOUJDODBENDE2NkQwMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCwbx+KdT0qHc2uWZcskVLm7O6n8eg9MtOpG1ir+CwmASYoGki 82IC5y/jOUt70ADSOZ/EAfZs7y7IicndQ0mty9gSzoKIZXcR8TSf4N/Pqmwcp62y oThCCqbZuU/5YAmHba1ah9MnSqcTU87QfpNiWoAirWofTjw52E4m7Es7QrFBR8EY Cb49cqlHkPtgIfhC30LF7yvv5+fPAZ4BP/uo9zM+iw3uQQHCS6iqDLOWioi5QDqG LDmaNZ/WOk5pa6Wz/VOU29s6VnVxolIlzcLVbLRB150v6gTeQk9hu0kbRLhRFooH cBLYRZiN49q3XzD0eRj9ddIAf1BganZgXyOTAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUV/0c+fB/MDyXbGKaDpvIDUFm0AMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9WXzBjLWZCX01EeVhiR0thRHB2 SURVRm0wQU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw AAWQMA0GCSqGSIb3DQEBCwUAA4IBAQBK72yxOyCHMmDIhC39ut9eL0m1UbsDaTLe TycKK8d93AL3eu+hEJ0VTs6yVLPTkR8rLNMgKNbvq8psnb7hNIGYhX4Q6A08rBCq dTrAc5nyyXYnru/t6RzdfKrGeILplrNtmGstfXD6tXj/RIeR0wwZ0Pk54QFhJDVx YdIhupvGyy73MA96NJzUqePvBY4VJ2qhBioBeJCS10eYXuryOWaR/+NJhxe3hTLa n+WBcK0zNrkA0/LBI7DrAAEzrt8w8P8HfLxp3pzidVXBdMZBxkFGp5PziP5H2Qmd MZABuhXMILFHvh77EzDxEuHB1NmxFdHrLGiD1IrmAac42Ma96l1A -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org