$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa File: brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa (raw, json) Hash identifier: +N4mmgofrpUbvPIzgzCIyp871rWG55yri/v1fVmNs3c= Subject key identifier: 6E:B3:A6:03:D8:17:B8:9C:8F:66:7D:D7:68:59:9F:F6:72:74:97:E2 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11E4 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa Signing time: Mon 26 Aug 2024 05:18:02 +0000 ROA not before: Mon 26 Aug 2024 05:18:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17421 IP address blocks: 2001:b401::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4580 (0x11e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6EB3A603D817B89C8F667DD768599FF6727497E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:f5:10:ba:a1:6e:d1:f4:46:20:2f:94:af: f8:af:ce:ef:cb:1e:47:f3:e9:af:ee:a2:05:b9:f1: 7f:9f:9d:b5:69:74:01:fe:4e:74:8f:e6:53:3f:d0: 8d:4d:0f:15:1b:5f:f5:99:b0:53:25:80:ea:58:82: 79:13:f2:f9:e5:cf:20:69:78:55:eb:59:f0:bc:50: 5b:6a:37:54:66:0f:3e:a8:3b:79:00:75:65:de:3b: e0:46:73:1d:35:25:17:8a:e4:b7:3e:0f:5e:2c:e0: f5:2d:55:f7:e5:f8:ff:76:8a:d9:46:aa:40:94:b8: 05:1b:86:b8:59:37:61:86:01:89:e6:9e:f4:a0:74: d3:8d:fd:2e:d8:27:02:61:2e:a2:58:3a:d8:f9:b5: d3:e2:49:9d:b6:b2:8a:dd:6b:88:de:02:d9:c0:21: c7:bb:c3:80:a0:c4:66:08:54:48:3c:e1:7c:1a:6b: 50:82:52:1c:83:e5:19:d9:df:06:23:0f:d2:26:c2: f8:f3:4c:0e:77:51:71:72:88:38:4f:30:17:76:d7: 79:f0:e4:c4:b8:90:5c:22:9b:be:8e:d6:73:af:b3: 18:3f:a1:9e:3b:20:a2:f6:61:a9:f1:b3:c3:f3:1b: a9:50:46:37:a5:a8:94:03:7f:8e:c9:31:e7:06:68: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B3:A6:03:D8:17:B8:9C:8F:66:7D:D7:68:59:9F:F6:72:74:97:E2 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/brOmA9gXuJyPZn3XaFmf9nJ0l-I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b401::/32 Signature Algorithm: sha256WithRSAEncryption 1b:94:a4:f8:1c:e9:27:75:80:4b:e5:ca:a7:5d:3a:ac:91:b4: 5d:31:d7:ac:d2:e7:4c:a0:59:38:24:ea:da:21:dc:81:85:4f: 2d:a2:e2:49:9b:7f:29:03:57:56:4d:9d:8a:4d:32:6a:c2:7c: 30:03:94:ab:37:54:75:c4:88:08:3b:8d:db:2c:ea:6f:bf:e1: 79:c9:f4:46:2b:60:5f:1a:ab:eb:6e:4c:0d:27:e1:b0:ce:e2: 3d:df:ba:94:3e:74:13:21:58:fb:d8:dc:5a:23:20:b6:84:22: e7:2e:17:49:53:e9:6d:db:29:dc:dd:e1:e5:25:d3:e2:86:99: 83:71:84:f1:29:ea:0a:7c:48:11:ec:5e:15:47:66:4c:39:3b: fb:86:23:70:8d:b6:05:52:06:1a:7a:e0:42:34:67:a1:e2:f7: 29:24:9e:b6:a1:18:37:4f:16:ba:5e:76:5e:7b:38:32:41:5f: 39:15:b5:02:2b:03:9d:2c:d7:cc:35:22:e4:85:3c:1a:c0:56: ac:07:76:6b:eb:b9:1c:6b:8d:bb:fd:57:f1:70:27:0a:17:9d: 3d:fb:37:05:a2:91:72:fe:a6:47:6b:94:e9:7e:ac:a4:a1:ab: f4:16:c6:8f:01:d6:b2:af:12:d5:b0:c1:f1:d6:02:87:00:f9: 9b:b0:ac:50 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFQjNBNjAzRDgxN0I4 OUM4RjY2N0RENzY4NTk5RkY2NzI3NDk3RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMZfUQuqFu0fRGIC+Ur/ivzu/LHkfz6a/uogW58X+fnbVpdAH+ TnSP5lM/0I1NDxUbX/WZsFMlgOpYgnkT8vnlzyBpeFXrWfC8UFtqN1RmDz6oO3kA dWXeO+BGcx01JReK5Lc+D14s4PUtVffl+P92itlGqkCUuAUbhrhZN2GGAYnmnvSg dNON/S7YJwJhLqJYOtj5tdPiSZ22sorda4jeAtnAIce7w4CgxGYIVEg84Xwaa1CC UhyD5RnZ3wYjD9ImwvjzTA53UXFyiDhPMBd213nw5MS4kFwim76O1nOvsxg/oZ47 IKL2Yanxs8PzG6lQRjelqJQDf47JMecGaLBPAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUbrOmA9gXuJyPZn3XaFmf9nJ0l+IwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ick9tQTlnWHVKeVBabjNYYUZt ZjluSjBsLUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAG0 ATANBgkqhkiG9w0BAQsFAAOCAQEAG5Sk+BzpJ3WAS+XKp106rJG0XTHXrNLnTKBZ OCTq2iHcgYVPLaLiSZt/KQNXVk2dik0yasJ8MAOUqzdUdcSICDuN2yzqb7/hecn0 RitgXxqr625MDSfhsM7iPd+6lD50EyFY+9jcWiMgtoQi5y4XSVPpbdsp3N3h5SXT 4oaZg3GE8SnqCnxIEexeFUdmTDk7+4YjcI22BVIGGnrgQjRnoeL3KSSetqEYN08W ul52Xns4MkFfORW1AisDnSzXzDUi5IU8GsBWrAd2a+u5HGuNu/1X8XAnChedPfs3 BaKRcv6mR2uU6X6spKGr9BbGjwHWsq8S1bDB8dYChwD5m7CsUA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org