$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_0wt85mkSfc4Fctlkrfsd91PTgs.roa File: _0wt85mkSfc4Fctlkrfsd91PTgs.roa (raw, json) Hash identifier: I7iplRMUQwTG4qFv7XSZFiTO9RQtU6I47JHOPq/UuFA= Subject key identifier: FF:4C:2D:F3:99:A4:49:F7:38:15:CB:65:92:B7:EC:77:DD:4F:4E:0B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1191 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_0wt85mkSfc4Fctlkrfsd91PTgs.roa Signing time: Mon 26 Aug 2024 05:17:41 +0000 ROA not before: Mon 26 Aug 2024 05:17:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 142005 IP address blocks: 210.242.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4497 (0x1191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FF4C2DF399A449F73815CB6592B7EC77DD4F4E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b1:48:64:ca:a2:d7:07:36:52:14:ec:36:46: e7:04:a2:4d:fa:82:f3:3f:e7:8c:3d:27:e0:3d:e9: f1:f0:89:00:78:09:58:ed:e4:4f:45:70:e8:24:b5: 15:26:9b:ec:94:65:0c:61:23:05:48:2c:f8:a9:9f: ca:8f:e2:1a:dc:ee:92:3a:d7:aa:e6:3e:6f:11:7c: d3:ac:ac:d0:62:50:c7:59:4f:8e:d1:72:81:96:c5: c4:28:35:a1:70:6f:bf:bc:b3:cb:02:8f:9d:c4:3f: c8:2d:31:dd:dd:f8:c5:84:6c:a8:92:c4:79:0b:fc: 75:e9:3d:38:3f:0d:fb:28:7e:75:9b:4c:4c:75:0f: 1d:75:91:94:65:9d:ef:26:b3:21:43:89:5c:6e:05: 7c:53:06:68:20:23:3b:3b:a6:14:b0:f8:67:5f:00: fa:93:51:91:93:90:36:24:17:f0:77:d0:f4:0c:82: d2:e6:11:59:dd:9e:6d:71:33:26:96:a0:37:2f:59: 92:bf:6e:25:eb:9a:e7:00:f1:10:55:eb:55:6f:e5: 93:a8:f1:b5:8b:ca:e0:1e:c3:e9:67:5d:69:a2:32: d6:6f:8c:96:80:f7:fb:ae:63:26:1c:70:54:73:15: 93:52:3f:e9:fb:4b:16:e6:8c:3f:83:e3:82:9b:a4: c9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:2D:F3:99:A4:49:F7:38:15:CB:65:92:B7:EC:77:DD:4F:4E:0B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_0wt85mkSfc4Fctlkrfsd91PTgs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.186.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:0b:18:a7:43:1a:72:52:41:f6:cb:ae:a7:56:85:86:90:4e: 01:c6:e0:a0:d0:ef:51:99:fd:46:94:1f:b0:e7:15:d7:b2:17: 29:69:d3:7f:8c:ef:c8:d7:b2:4c:20:17:b8:28:4d:57:ac:f2: 80:97:21:b4:36:94:c6:85:7b:6f:fc:e8:b1:94:51:53:14:c2: 0d:31:79:0a:1b:e6:f8:9b:84:ae:ea:68:c4:97:a0:4a:3f:e2: 5a:3f:2d:37:97:f6:fc:e4:48:07:5f:f5:fe:76:20:72:f8:89: c1:e1:6c:f2:d3:17:5c:13:fb:4a:a6:8f:4a:f2:a9:03:ef:94: 8a:b9:e4:bc:95:df:9a:6a:e2:aa:af:21:8b:30:69:d7:c2:8c: 61:3e:11:13:e8:c6:4b:95:9c:fb:22:b9:ca:a1:b3:53:85:f8: 67:b7:1b:e3:c6:c6:95:88:21:9a:d9:33:e9:ad:c9:6e:a5:66: c8:66:3e:42:fb:ce:61:2c:4c:78:e9:f0:48:b1:90:68:2f:20: a5:41:85:d2:b0:7f:c6:c9:56:f2:88:bf:ba:23:0d:f2:b6:f5: fe:a3:d8:fd:f3:81:14:16:7f:9d:ef:52:2d:07:45:34:3a:a1: e9:e3:cc:e4:5e:27:fb:7c:5c:c1:86:d4:21:d2:0d:62:af:df: 37:3e:f3:79 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGNEMyREYzOTlBNDQ5 RjczODE1Q0I2NTkyQjdFQzc3REQ0RjRFMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTsUhkyqLXBzZSFOw2RucEok36gvM/54w9J+A96fHwiQB4CVjt 5E9FcOgktRUmm+yUZQxhIwVILPipn8qP4hrc7pI616rmPm8RfNOsrNBiUMdZT47R coGWxcQoNaFwb7+8s8sCj53EP8gtMd3d+MWEbKiSxHkL/HXpPTg/DfsofnWbTEx1 Dx11kZRlne8msyFDiVxuBXxTBmggIzs7phSw+GdfAPqTUZGTkDYkF/B30PQMgtLm EVndnm1xMyaWoDcvWZK/biXrmucA8RBV61Vv5ZOo8bWLyuAew+lnXWmiMtZvjJaA 9/uuYyYccFRzFZNSP+n7SxbmjD+D44KbpMnRAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/0wt85mkSfc4Fctlkrfsd91PTgswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9fMHd0ODVta1NmYzRGY3Rsa3Jm c2Q5MVBUZ3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vK6 MA0GCSqGSIb3DQEBCwUAA4IBAQAfCxinQxpyUkH2y66nVoWGkE4BxuCg0O9Rmf1G lB+w5xXXshcpadN/jO/I17JMIBe4KE1XrPKAlyG0NpTGhXtv/OixlFFTFMINMXkK G+b4m4Su6mjEl6BKP+JaPy03l/b85EgHX/X+diBy+InB4Wzy0xdcE/tKpo9K8qkD 75SKueS8ld+aauKqryGLMGnXwoxhPhET6MZLlZz7IrnKobNThfhntxvjxsaViCGa 2TPprclupWbIZj5C+85hLEx46fBIsZBoLyClQYXSsH/GyVbyiL+6Iw3ytvX+o9j9 84EUFn+d71ItB0U0OqHp48zkXif7fFzBhtQh0g1ir983PvN5 -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:07 2024 by rpki-client on console-ams.rpki-client.org