$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/daE5TIc8N3lhT7vh-zspFUCVFwA.roa File: daE5TIc8N3lhT7vh-zspFUCVFwA.roa (raw, json) Hash identifier: DZj0IXuicz7cWo9+c6KCz43wpe2t4FtVrib3JKIocQk= Subject key identifier: 75:A1:39:4C:87:3C:37:79:61:4F:BB:E1:FB:3B:29:15:40:95:17:00 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 119F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/daE5TIc8N3lhT7vh-zspFUCVFwA.roa Signing time: Mon 26 Aug 2024 05:17:44 +0000 ROA not before: Mon 26 Aug 2024 05:17:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17714 IP address blocks: 175.111.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4511 (0x119f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=75A1394C873C3779614FBBE1FB3B291540951700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:23:ef:9f:ab:9c:ad:05:60:f6:12:93:66: a1:82:70:7a:54:84:3c:98:d9:67:e5:7a:77:eb:ad: 3f:59:9a:2c:64:22:ce:2c:f8:01:ea:b9:63:3a:66: f4:17:d5:86:ba:86:4f:82:a4:f8:94:2a:df:0f:23: 46:d8:f8:5f:ba:ea:06:f6:8f:c9:15:d1:57:b1:33: a8:30:ec:c7:95:a3:8d:d0:7d:2a:7f:e4:4e:71:68: 33:11:c4:c9:dc:8e:4a:1b:1c:51:74:de:40:aa:4b: 6f:27:9e:6e:33:8f:a1:41:75:aa:83:e7:55:db:c5: ca:07:7c:86:5c:d8:7c:d5:a6:7b:c2:da:dc:e5:9e: ca:13:ff:34:7b:15:4d:9a:23:10:ac:86:c9:65:9c: c4:84:97:a0:c6:9a:39:73:ed:c7:e5:d8:3b:de:ce: 5a:0a:cf:e3:9c:6e:57:7c:63:4d:4c:13:d1:5b:a7: 12:a0:50:be:65:66:74:f7:35:0c:8d:e6:82:87:61: b9:fd:ad:18:68:94:9a:8c:c3:d0:14:9d:16:68:4c: 91:93:fa:71:a4:37:14:5f:4b:f0:76:32:cd:87:aa: 8b:30:a0:94:98:55:50:cc:2a:0d:11:78:c1:fe:7c: 6a:ef:dc:e3:65:2d:bf:e8:8d:b2:9b:89:53:a7:53: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A1:39:4C:87:3C:37:79:61:4F:BB:E1:FB:3B:29:15:40:95:17:00 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/daE5TIc8N3lhT7vh-zspFUCVFwA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.255.0/24 Signature Algorithm: sha256WithRSAEncryption 51:49:36:1d:ab:95:c9:9e:9b:89:8a:03:7a:2c:6f:f5:4e:d9: 85:2f:a9:22:39:e3:85:5b:d8:ac:9a:cc:7f:c5:d6:c0:92:d5: b1:fd:98:2c:9f:af:ba:7b:5c:d8:99:3b:8a:ed:39:38:89:8e: e0:ec:e4:5e:bc:a7:fd:82:61:d5:2a:ff:96:7e:ca:10:00:83: cf:02:e5:74:6f:56:22:2c:61:de:44:dd:cb:fc:e3:7e:f2:85: 75:ce:83:3f:e8:3e:5b:a3:41:d3:d8:d6:27:c8:46:65:ce:6c: 3e:de:a8:34:0b:cc:40:b3:9a:20:0c:c6:15:a9:85:f9:84:e3: 92:04:e3:1b:93:63:40:96:7c:27:64:f5:aa:52:02:49:99:ee: 4a:c0:02:e2:9a:78:28:35:ea:01:b0:8b:d4:d9:9e:83:51:0b: 6e:86:96:39:6e:e5:2c:68:0c:fc:af:d2:3f:53:20:6f:55:85: 29:ed:53:b1:2b:2e:3e:47:c8:46:71:c3:6f:e3:23:67:5f:d5: 8c:7d:a9:2d:be:99:69:91:81:1d:a6:e2:ee:51:15:db:af:d3: 32:16:af:35:23:7b:6a:ef:d0:c2:fa:20:7a:83:8d:e2:df:5d: 27:ec:28:c8:bd:8a:5e:a1:92:6e:d5:28:04:52:28:76:6a:07: 84:a8:e3:69 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1QTEzOTRDODczQzM3 Nzk2MTRGQkJFMUZCM0IyOTE1NDA5NTE3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpGyPvn6ucrQVg9hKTZqGCcHpUhDyY2WflenfrrT9ZmixkIs4s +AHquWM6ZvQX1Ya6hk+CpPiUKt8PI0bY+F+66gb2j8kV0VexM6gw7MeVo43QfSp/ 5E5xaDMRxMncjkobHFF03kCqS28nnm4zj6FBdaqD51XbxcoHfIZc2HzVpnvC2tzl nsoT/zR7FU2aIxCshsllnMSEl6DGmjlz7cfl2DvezloKz+Ocbld8Y01ME9FbpxKg UL5lZnT3NQyN5oKHYbn9rRholJqMw9AUnRZoTJGT+nGkNxRfS/B2Ms2HqoswoJSY VVDMKg0ReMH+fGrv3ONlLb/ojbKbiVOnU4chAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUdaE5TIc8N3lhT7vh+zspFUCVFwAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9kYUU1VEljOE4zbGhUN3ZoLXpz cEZVQ1ZGd0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2// MA0GCSqGSIb3DQEBCwUAA4IBAQBRSTYdq5XJnpuJigN6LG/1TtmFL6kiOeOFW9is msx/xdbAktWx/Zgsn6+6e1zYmTuK7Tk4iY7g7ORevKf9gmHVKv+WfsoQAIPPAuV0 b1YiLGHeRN3L/ON+8oV1zoM/6D5bo0HT2NYnyEZlzmw+3qg0C8xAs5ogDMYVqYX5 hOOSBOMbk2NAlnwnZPWqUgJJme5KwALimngoNeoBsIvU2Z6DUQtuhpY5buUsaAz8 r9I/UyBvVYUp7VOxKy4+R8hGccNv4yNnX9WMfaktvplpkYEdpuLuURXbr9MyFq81 I3tq79DC+iB6g43i310n7CjIvYpeoZJu1SgEUih2ageEqONp -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org