$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Z3dGyVitEfruGSDNWBBcmPx50_0.roa File: Z3dGyVitEfruGSDNWBBcmPx50_0.roa (raw, json) Hash identifier: TK7pxDLUQpv6L9ObMad0x/cHjqBiY3Yzc4bFCGMrSoI= Subject key identifier: 67:77:46:C9:58:AD:11:FA:EE:19:20:CD:58:10:5C:98:FC:79:D3:FD Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11FB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z3dGyVitEfruGSDNWBBcmPx50_0.roa Signing time: Mon 26 Aug 2024 05:18:08 +0000 ROA not before: Mon 26 Aug 2024 05:18:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 218.168.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4603 (0x11fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=677746C958AD11FAEE1920CD58105C98FC79D3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:57:71:a7:5b:ca:82:84:a6:87:f4:8c:41:c0: 4b:4d:01:b3:f4:4f:e0:c7:b3:be:16:62:ac:27:d4: 39:78:6d:3d:1f:d1:4a:e8:3b:b3:bb:70:b1:5e:19: 5e:c1:4b:04:97:28:d4:f3:50:bc:2f:32:fb:93:61: 2b:81:d1:4c:0b:9a:5c:19:ef:b8:16:76:97:6c:0f: 5a:51:92:8d:88:fc:4a:a6:3e:c2:2b:a8:78:a5:83: cd:0d:ab:d3:ea:87:cd:2b:11:65:58:0b:cd:61:a1: 4d:2e:96:88:f4:d6:7c:6a:35:13:a7:6d:fb:7a:0f: 12:99:96:a0:b9:89:e3:8c:f3:88:92:f2:1b:b7:c2: f6:75:c7:5a:71:64:34:c0:17:ab:44:4d:df:97:2f: 52:cd:d4:f0:34:df:7f:df:e8:da:90:23:ac:b5:be: 84:d2:3f:c7:39:d2:1a:60:8c:28:ca:99:33:f2:98: 33:96:df:ca:6e:19:ca:d7:b7:dc:d6:3c:b3:02:af: 59:7c:b9:a4:2c:54:e1:f2:e3:06:c0:3b:8d:18:c3: 84:c4:cc:e9:bc:44:20:fb:e6:16:a3:d0:75:a0:26: 25:b6:75:f3:e1:97:d4:c2:73:83:63:03:b3:7b:b9: ae:65:15:6e:7b:72:f4:3e:21:29:2e:e5:21:16:a6: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:46:C9:58:AD:11:FA:EE:19:20:CD:58:10:5C:98:FC:79:D3:FD X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z3dGyVitEfruGSDNWBBcmPx50_0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.168.0.0/13 Signature Algorithm: sha256WithRSAEncryption 3c:8a:ec:83:71:57:be:f2:fb:ca:a7:13:8f:8b:4e:fb:d8:a9: b3:dc:57:72:ca:56:b5:f7:e9:5a:2a:8a:9b:0c:d7:7d:1c:37: 62:12:58:35:80:9f:9d:eb:b2:04:5b:d3:75:e1:6e:7d:ee:de: ad:a9:81:7d:15:94:da:21:13:21:e7:5a:91:36:e8:e8:00:90: 5e:ee:a7:c8:ee:84:30:16:79:8c:4f:e9:8b:5f:a4:8e:05:5b: ad:fe:89:e4:69:a6:6b:84:b0:ad:ef:0a:4d:76:19:5c:e9:07: 42:ef:e4:50:4d:9d:3c:19:38:e0:ff:e7:a2:2b:c7:e0:75:0b: 9c:2a:ff:d9:d7:a2:88:be:e2:6d:83:d9:1f:98:0f:f2:28:b2: 68:df:db:b3:32:62:eb:cd:c8:a8:a0:a6:77:81:2b:6e:12:1b: c9:5d:05:59:0c:b4:19:15:2f:55:74:ae:67:a6:2b:96:f4:f7: ba:5f:30:35:e6:fd:6e:e3:83:8f:85:c4:8a:b5:72:a7:f5:62: 93:cf:2c:25:71:c1:37:ba:17:d1:5b:d7:78:19:2e:7a:76:3d: d8:d5:fd:ed:37:6a:5c:42:88:15:b2:ba:3e:5c:f8:ca:a9:4a: 8d:cf:cd:0a:99:93:e3:90:fe:60:40:bc:ac:7b:7e:b0:94:e7: 19:76:19:10 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3Nzc0NkM5NThBRDEx RkFFRTE5MjBDRDU4MTA1Qzk4RkM3OUQzRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxV3GnW8qChKaH9IxBwEtNAbP0T+DHs74WYqwn1Dl4bT0f0Uro O7O7cLFeGV7BSwSXKNTzULwvMvuTYSuB0UwLmlwZ77gWdpdsD1pRko2I/EqmPsIr qHilg80Nq9Pqh80rEWVYC81hoU0uloj01nxqNROnbft6DxKZlqC5ieOM84iS8hu3 wvZ1x1pxZDTAF6tETd+XL1LN1PA033/f6NqQI6y1voTSP8c50hpgjCjKmTPymDOW 38puGcrXt9zWPLMCr1l8uaQsVOHy4wbAO40Yw4TEzOm8RCD75haj0HWgJiW2dfPh l9TCc4NjA7N7ua5lFW57cvQ+ISku5SEWpsI9AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUZ3dGyVitEfruGSDNWBBcmPx50/0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9aM2RHeVZpdEVmcnVHU0ROV0JC Y21QeDUwXzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMD2qgw DQYJKoZIhvcNAQELBQADggEBADyK7INxV77y+8qnE4+LTvvYqbPcV3LKVrX36Voq ipsM130cN2ISWDWAn53rsgRb03Xhbn3u3q2pgX0VlNohEyHnWpE26OgAkF7up8ju hDAWeYxP6YtfpI4FW63+ieRppmuEsK3vCk12GVzpB0Lv5FBNnTwZOOD/56Irx+B1 C5wq/9nXooi+4m2D2R+YD/Iosmjf27MyYuvNyKigpneBK24SG8ldBVkMtBkVL1V0 rmemK5b097pfMDXm/W7jg4+FxIq1cqf1YpPPLCVxwTe6F9Fb13gZLnp2PdjV/e03 alxCiBWyuj5c+MqpSo3PzQqZk+OQ/mBAvKx7frCU5xl2GRA= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:07 2024 by rpki-client on console-ams.rpki-client.org