$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Yck9SyJoABaM2yyk8RY7ILe5pgY.roa File: Yck9SyJoABaM2yyk8RY7ILe5pgY.roa (raw, json) Hash identifier: C0+jkH6xQHhzhYiu8KME89PNOe1SnKpF1w/1zNgLA9E= Subject key identifier: 61:C9:3D:4B:22:68:00:16:8C:DB:2C:A4:F1:16:3B:20:B7:B9:A6:06 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1215 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Yck9SyJoABaM2yyk8RY7ILe5pgY.roa Signing time: Mon 26 Aug 2024 05:18:14 +0000 ROA not before: Mon 26 Aug 2024 05:18:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 36040 IP address blocks: 202.39.67.192/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 06:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4629 (0x1215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=61C93D4B226800168CDB2CA4F1163B20B7B9A606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:31:d6:8b:41:d7:d6:bc:7f:fd:40:83:c3: 9f:8b:7a:f7:37:e9:f4:cc:09:5c:ff:7a:95:20:5c: 82:1e:e4:53:57:94:2d:8a:0c:ea:31:2b:8a:dd:79: 78:49:e4:f6:73:9a:10:50:dc:59:b9:d3:6c:02:6b: f5:68:86:73:da:8b:e0:90:c2:b4:76:83:9d:27:98: 9a:86:07:c3:11:6d:52:2b:70:60:77:69:65:1c:dc: 41:57:37:44:72:12:6b:78:6e:f2:64:04:65:5f:51: 35:ab:d2:1d:54:5f:06:98:01:3d:22:99:8e:6c:08: 1c:d2:d2:6f:be:b9:17:a5:05:84:f1:31:10:34:26: 32:ab:76:bd:de:2d:98:b3:ba:c2:d0:b3:8e:8f:d2: aa:4c:0b:20:85:87:93:86:77:53:78:b0:32:ae:4d: 0b:ee:d9:8c:2e:5e:53:1f:be:81:e1:c5:8b:21:ad: 49:b8:87:60:5f:a4:1a:c2:b5:48:9a:ae:44:10:c0: 55:f0:d7:6b:51:14:b8:96:31:db:80:37:af:e7:1c: f0:a6:2a:43:54:49:05:80:f7:18:e3:08:69:90:c4: 92:36:e3:92:0c:cc:e0:bf:64:47:67:cd:36:cf:b7: 61:b5:3f:62:25:52:b2:13:d4:db:5a:e3:38:00:48: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:3D:4B:22:68:00:16:8C:DB:2C:A4:F1:16:3B:20:B7:B9:A6:06 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Yck9SyJoABaM2yyk8RY7ILe5pgY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.67.192/27 Signature Algorithm: sha256WithRSAEncryption 77:cb:ff:a1:53:7a:23:e0:0f:cc:f0:f0:1b:d0:04:eb:98:6b: e5:b3:2a:8e:24:98:58:4c:a4:30:dd:73:89:3d:00:9b:17:3e: 4c:2b:dd:a9:76:5c:58:da:21:f6:1a:a4:d2:49:18:24:49:b2: 97:2c:3d:9c:28:2d:c3:e9:d0:44:69:81:3f:9f:08:66:73:cd: 71:1c:18:62:a4:44:a3:46:c4:27:c4:69:e3:1b:d8:88:d1:4b: a8:0d:f0:db:b4:12:b3:b9:54:38:72:63:7a:a9:ee:44:82:49: 5b:08:82:72:00:6a:eb:5f:75:2d:ac:2d:41:08:38:7c:54:6a: a8:51:87:8c:70:fc:58:89:54:17:61:e9:7a:73:e0:36:f9:37: 38:33:31:11:a0:27:ee:25:5e:1e:8a:95:63:7f:71:c3:31:f9: fe:e2:f4:3b:c3:f9:45:32:4c:30:26:9c:a7:9f:00:97:83:bd: 91:4a:fd:34:b8:ab:60:91:37:45:8b:79:a1:47:88:eb:ce:80: 44:09:0d:fb:13:e2:71:4d:c1:35:9b:30:a6:be:4f:65:a5:94: a5:9b:05:d5:56:bf:31:b8:9a:3a:b6:06:2a:dc:66:a3:72:cb: 4f:bb:98:ab:78:90:0f:a1:5c:fa:48:85:58:17:a7:48:51:9f: 77:25:11:d6 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxQzkzRDRCMjI2ODAw MTY4Q0RCMkNBNEYxMTYzQjIwQjdCOUE2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiozHWi0HX1rx//UCDw5+Levc36fTMCVz/epUgXIIe5FNXlC2K DOoxK4rdeXhJ5PZzmhBQ3Fm502wCa/VohnPai+CQwrR2g50nmJqGB8MRbVIrcGB3 aWUc3EFXN0RyEmt4bvJkBGVfUTWr0h1UXwaYAT0imY5sCBzS0m++uRelBYTxMRA0 JjKrdr3eLZizusLQs46P0qpMCyCFh5OGd1N4sDKuTQvu2YwuXlMfvoHhxYshrUm4 h2BfpBrCtUiarkQQwFXw12tRFLiWMduAN6/nHPCmKkNUSQWA9xjjCGmQxJI245IM zOC/ZEdnzTbPt2G1P2IlUrIT1Nta4zgASI1xAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUYck9SyJoABaM2yyk8RY7ILe5pgYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ZY2s5U3lKb0FCYU0yeXlrOFJZ N0lMZTVwZ1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFyidD wDANBgkqhkiG9w0BAQsFAAOCAQEAd8v/oVN6I+APzPDwG9AE65hr5bMqjiSYWEyk MN1ziT0Amxc+TCvdqXZcWNoh9hqk0kkYJEmylyw9nCgtw+nQRGmBP58IZnPNcRwY YqREo0bEJ8Rp4xvYiNFLqA3w27QSs7lUOHJjeqnuRIJJWwiCcgBq6191LawtQQg4 fFRqqFGHjHD8WIlUF2HpenPgNvk3ODMxEaAn7iVeHoqVY39xwzH5/uL0O8P5RTJM MCacp58Al4O9kUr9NLirYJE3RYt5oUeI686ARAkN+xPicU3BNZswpr5PZaWUpZsF 1Va/MbiaOrYGKtxmo3LLT7uYq3iQD6Fc+kiFWBenSFGfdyUR1g== -----END CERTIFICATE-----Generated at Fri Nov 22 02:44:25 2024 by rpki-client on console-fra.rpki-client.org