$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WvWdyp6LEGocDZs_AmiC_QbS4b0.roa File: WvWdyp6LEGocDZs_AmiC_QbS4b0.roa (raw, json) Hash identifier: AAUZbK9rdMGG9y5LrrtmhDGSg/aHYhcq0CPzVUuAxJs= Subject key identifier: 5A:F5:9D:CA:9E:8B:10:6A:1C:0D:9B:3F:02:68:82:FD:06:D2:E1:BD Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11A8 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WvWdyp6LEGocDZs_AmiC_QbS4b0.roa Signing time: Mon 26 Aug 2024 05:17:46 +0000 ROA not before: Mon 26 Aug 2024 05:17:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 203.160.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4520 (0x11a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5AF59DCA9E8B106A1C0D9B3F026882FD06D2E1BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:e5:59:07:26:92:ad:89:5a:f1:43:72:d9: 5e:18:56:45:68:c1:5b:5f:2f:f5:42:98:f7:12:05: 20:e5:dc:0b:26:ca:99:d4:8a:23:ce:e0:40:7c:5e: 40:11:59:4b:09:13:f9:59:bf:ff:2f:42:76:c3:fc: 99:16:a0:89:c1:63:1d:02:b9:8c:6b:84:66:16:fb: f7:58:c8:0b:4b:e7:fc:c9:80:de:0a:6a:41:58:14: e3:79:0f:a6:cd:ac:14:97:fc:63:4d:cf:74:f5:1a: 22:ca:79:b8:c5:80:e3:85:20:fe:6b:00:50:ca:b3: 2e:d9:0c:e6:52:0c:70:16:e8:3b:13:6b:2f:1c:78: 1d:ef:c2:8c:cd:5f:70:7b:3f:3d:06:24:a6:eb:f4: 80:4e:6f:4b:79:81:5a:af:f2:da:9c:90:1d:3a:53: fa:c7:ff:8e:f5:ee:5d:91:52:14:92:6d:b4:4e:cb: 7e:7b:22:79:55:78:ef:6e:97:79:f3:08:69:ef:91: cb:98:0c:32:0a:54:c5:61:b6:77:d6:2e:c0:5c:82: 63:ca:41:36:76:94:f7:87:f8:ef:45:09:78:f8:11: 67:4a:16:4b:45:0f:70:05:b4:88:90:ac:ac:59:2c: ba:f1:2f:51:ea:2d:1e:5e:3d:8b:e1:30:9d:ec:5a: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F5:9D:CA:9E:8B:10:6A:1C:0D:9B:3F:02:68:82:FD:06:D2:E1:BD X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WvWdyp6LEGocDZs_AmiC_QbS4b0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.160.242.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:82:52:90:4d:8f:1d:18:4a:23:ae:48:a7:1f:bc:28:45:87: ea:ac:a6:47:81:c8:aa:ea:1a:06:44:39:fa:44:41:d9:43:69: 8b:cf:98:37:c2:91:4c:4e:de:f3:c8:e2:3f:c5:c2:46:27:fb: 00:75:e3:f7:89:fb:37:37:a1:3b:1e:7f:ad:44:91:f9:aa:06: f8:49:fb:91:5c:b5:23:04:a6:4a:71:8e:a5:67:d2:74:10:9b: a2:e9:3b:4d:89:10:72:27:92:43:7e:67:05:7e:0d:73:36:76: 55:55:e0:f0:9b:e5:97:31:4d:57:29:0b:cd:e2:8c:7f:a5:a1: a8:b5:09:fa:70:0c:a8:22:89:2c:43:66:c7:22:77:b0:0e:11: a8:bc:95:c8:30:1b:ba:3c:09:d5:5d:34:be:df:18:e3:e6:f5: b0:00:c1:4a:f7:47:e3:6c:8a:61:dc:d2:5b:a4:5b:d1:a4:2f: f4:64:e3:90:ba:d6:3e:59:6e:81:3b:bf:6c:75:2a:ad:55:6d: 5a:94:65:ac:52:ae:50:41:51:06:fa:24:69:53:eb:82:bb:bb: 7d:a4:17:76:42:62:a9:0f:b5:b1:91:70:79:c9:e5:6a:cc:c6: 92:20:4a:7e:fb:9b:e3:9e:7f:6e:a4:9a:f5:c8:0d:f2:0f:e8: 5e:eb:8b:37 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBRjU5RENBOUU4QjEw NkExQzBEOUIzRjAyNjg4MkZEMDZEMkUxQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6cuVZByaSrYla8UNy2V4YVkVowVtfL/VCmPcSBSDl3AsmypnU iiPO4EB8XkARWUsJE/lZv/8vQnbD/JkWoInBYx0CuYxrhGYW+/dYyAtL5/zJgN4K akFYFON5D6bNrBSX/GNNz3T1GiLKebjFgOOFIP5rAFDKsy7ZDOZSDHAW6DsTay8c eB3vwozNX3B7Pz0GJKbr9IBOb0t5gVqv8tqckB06U/rH/4717l2RUhSSbbROy357 InlVeO9ul3nzCGnvkcuYDDIKVMVhtnfWLsBcgmPKQTZ2lPeH+O9FCXj4EWdKFktF D3AFtIiQrKxZLLrxL1HqLR5ePYvhMJ3sWvKvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUWvWdyp6LEGocDZs/AmiC/QbS4b0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9XdldkeXA2TEVHb2NEWnNfQW1p Q19RYlM0YjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6Dy MA0GCSqGSIb3DQEBCwUAA4IBAQBqglKQTY8dGEojrkinH7woRYfqrKZHgciq6hoG RDn6REHZQ2mLz5g3wpFMTt7zyOI/xcJGJ/sAdeP3ifs3N6E7Hn+tRJH5qgb4SfuR XLUjBKZKcY6lZ9J0EJui6TtNiRByJ5JDfmcFfg1zNnZVVeDwm+WXMU1XKQvN4ox/ paGotQn6cAyoIoksQ2bHInewDhGovJXIMBu6PAnVXTS+3xjj5vWwAMFK90fjbIph 3NJbpFvRpC/0ZOOQutY+WW6BO79sdSqtVW1alGWsUq5QQVEG+iRpU+uCu7t9pBd2 QmKpD7WxkXB5yeVqzMaSIEp++5vjnn9upJr1yA3yD+he64s3 -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:39 2024 by rpki-client on console-fra.rpki-client.org