$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XAMtj0fjwIsPRZepewh25yChJ-w.roa File: XAMtj0fjwIsPRZepewh25yChJ-w.roa (raw, json) Hash identifier: XQkY1E8o6Rf8lh0bi+lJTRNCY4OZAPvAV3RshHO8cMg= Subject key identifier: 5C:03:2D:8F:47:E3:C0:8B:0F:45:97:A9:7B:08:76:E7:20:A1:27:EC Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 125A Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XAMtj0fjwIsPRZepewh25yChJ-w.roa Signing time: Tue 15 Oct 2024 08:18:07 +0000 ROA not before: Tue 15 Oct 2024 08:18:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 800 IP address blocks: 175.111.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4698 (0x125a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Oct 15 08:18:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C032D8F47E3C08B0F4597A97B0876E720A127EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:89:39:f8:49:89:e9:9a:f7:0e:b8:2b:02: ed:e3:d4:46:f8:16:a4:47:8e:e3:c2:bf:5c:82:82: 80:49:27:63:20:33:be:82:82:10:de:16:f9:60:b6: bd:4d:d3:9a:44:40:2a:85:29:0a:15:54:5d:c6:2e: e7:a1:80:51:e4:8b:34:62:f6:23:b0:32:aa:c6:55: 80:84:d9:46:0f:65:07:c7:d0:e8:1f:81:71:32:e9: a1:07:95:53:14:7d:ca:f2:12:7a:c2:b1:d1:b0:d7: 79:7d:be:72:b6:00:37:a2:97:7d:75:57:d0:7a:f3: da:ea:53:7c:ac:c2:2b:06:a1:7f:5f:99:c0:2e:48: ba:6b:36:7c:45:f2:df:88:7d:06:d0:b6:c3:65:06: fa:56:18:6c:89:55:5b:ae:7d:44:74:ec:59:d4:53: 31:f2:a2:8e:67:57:29:23:df:3a:85:49:92:bb:4d: 9c:32:86:f3:85:4d:1f:58:22:76:78:c5:a2:a5:f9: fd:9d:e3:ce:a9:fe:8d:9d:c9:ae:3e:e0:9a:07:9e: 95:19:fe:c5:ca:6b:ac:73:ce:23:5a:f3:63:af:3c: cb:76:08:4f:42:12:d8:e9:b1:54:ea:f1:33:97:d8: 61:d9:89:c3:5a:a6:16:c5:73:da:63:4a:be:e7:d5: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:03:2D:8F:47:E3:C0:8B:0F:45:97:A9:7B:08:76:E7:20:A1:27:EC X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XAMtj0fjwIsPRZepewh25yChJ-w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.239.0/24 Signature Algorithm: sha256WithRSAEncryption 05:65:03:64:8b:23:60:a7:f6:55:e3:ba:77:4d:ba:6a:cf:65: 64:fb:e5:58:bb:03:b3:d4:bf:8f:b5:79:a6:4e:05:ac:b3:63: 64:d2:48:05:34:65:ac:c2:1e:55:aa:25:5e:76:2d:0d:1f:4e: 2d:88:0e:92:5c:e0:1d:c1:5d:d4:f8:99:4c:78:02:db:19:76: de:48:c2:fb:05:d8:de:71:53:17:c6:43:7c:d5:3c:ed:4d:bf: b8:11:d7:81:f8:8c:65:c9:18:1e:8a:a5:61:d9:d0:76:0b:0e: 09:6e:65:93:71:97:f7:0e:99:56:2d:0e:86:89:fd:a7:44:16: e2:05:8e:b2:ef:54:bf:e9:b0:a2:bf:29:5b:dd:44:71:19:aa: 63:98:9c:f9:7b:cc:fe:05:07:e9:ef:e4:56:bc:dc:cb:56:89: 93:c1:0e:7e:95:02:d5:4e:eb:7b:a7:3e:6b:17:10:76:25:84: 60:ab:17:9e:34:c2:74:e1:6a:cf:9a:fd:bb:61:38:06:5d:56: a0:8a:b2:9c:e2:12:0c:4a:a8:cd:b9:b8:69:b9:9a:5d:6d:fd: bf:58:bb:a0:a8:7a:84:ba:a8:76:da:f5:bb:81:74:f2:69:4d: d6:f5:89:8b:21:97:d7:60:86:ef:c2:79:32:74:17:6f:49:3e: cb:ca:98:8e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICElowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDEwMTUw ODE4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDMDMyRDhGNDdFM0Mw OEIwRjQ1OTdBOTdCMDg3NkU3MjBBMTI3RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1N4k5+EmJ6Zr3DrgrAu3j1Eb4FqRHjuPCv1yCgoBJJ2MgM76C ghDeFvlgtr1N05pEQCqFKQoVVF3GLuehgFHkizRi9iOwMqrGVYCE2UYPZQfH0Ogf gXEy6aEHlVMUfcryEnrCsdGw13l9vnK2ADeil311V9B689rqU3yswisGoX9fmcAu SLprNnxF8t+IfQbQtsNlBvpWGGyJVVuufUR07FnUUzHyoo5nVykj3zqFSZK7TZwy hvOFTR9YInZ4xaKl+f2d486p/o2dya4+4JoHnpUZ/sXKa6xzziNa82OvPMt2CE9C EtjpsVTq8TOX2GHZicNaphbFc9pjSr7n1cKRAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUXAMtj0fjwIsPRZepewh25yChJ+wwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YQU10ajBmandJc1BSWmVwZXdo MjV5Q2hKLXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/v MA0GCSqGSIb3DQEBCwUAA4IBAQAFZQNkiyNgp/ZV47p3Tbpqz2Vk++VYuwOz1L+P tXmmTgWss2Nk0kgFNGWswh5VqiVedi0NH04tiA6SXOAdwV3U+JlMeALbGXbeSML7 BdjecVMXxkN81TztTb+4EdeB+IxlyRgeiqVh2dB2Cw4JbmWTcZf3DplWLQ6Gif2n RBbiBY6y71S/6bCivylb3URxGapjmJz5e8z+BQfp7+RWvNzLVomTwQ5+lQLVTut7 pz5rFxB2JYRgqxeeNMJ04WrPmv27YTgGXVagirKc4hIMSqjNubhpuZpdbf2/WLug qHqEuqh22vW7gXTyaU3W9YmLIZfXYIbvwnkydBdvST7LypiO -----END CERTIFICATE-----Generated at Fri Nov 22 00:59:09 2024 by rpki-client on console-fra.rpki-client.org