$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/eymbbIMTy9e1sK5KjjyR3Fy0Kdc.roa File: eymbbIMTy9e1sK5KjjyR3Fy0Kdc.roa (raw, json) Hash identifier: X4KKXvuEbpMvQAFGfWWNNwMyb1IlbAqBZMInLmklPAc= Subject key identifier: 7B:29:9B:6C:83:13:CB:D7:B5:B0:AE:4A:8E:3C:91:DC:5C:B4:29:D7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 120F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/eymbbIMTy9e1sK5KjjyR3Fy0Kdc.roa Signing time: Mon 26 Aug 2024 05:18:12 +0000 ROA not before: Mon 26 Aug 2024 05:18:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 210.65.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4623 (0x120f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7B299B6C8313CBD7B5B0AE4A8E3C91DC5CB429D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:b0:44:42:b4:ac:1f:d6:31:9f:ac:13:6e: 0d:df:3b:7a:7d:6f:2b:a3:e3:71:9d:73:7c:6a:a9: 4d:c0:fd:95:e8:a0:f7:1e:15:ed:d8:93:bc:18:02: 9c:36:02:5f:f5:db:a5:aa:5a:17:a6:2a:53:f3:0f: 7e:23:25:aa:1b:67:78:8b:9c:8e:da:eb:86:81:19: 4c:78:14:cd:01:59:f1:db:a3:1a:db:73:f6:08:99: 76:69:7f:57:e4:e9:4c:b7:0f:10:77:3d:81:57:6b: b5:c9:26:54:88:16:02:68:96:34:fc:aa:82:55:5f: 88:b1:8a:c2:6f:f0:ba:cd:35:d6:20:24:65:ce:b7: b9:17:36:56:18:4c:03:42:45:aa:bc:7e:4a:2f:e2: 13:fc:eb:78:03:5c:b9:78:96:e1:18:ff:d0:2b:13: 29:e9:bc:d1:93:c4:cf:9f:30:cd:14:bd:9b:4b:48: a8:c7:27:00:76:d7:4c:6e:1a:a7:2d:29:97:ad:50: a5:5b:9a:c8:5a:c5:5e:76:ed:86:e5:ed:91:94:3d: cd:e2:ab:65:89:12:66:85:ae:64:1b:ad:01:7d:45: 2a:89:2e:a0:e4:91:d9:ca:ec:d2:a5:f0:de:dd:e7: 72:fb:3b:fe:bb:ac:54:da:9f:03:b9:1b:60:d1:55: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:29:9B:6C:83:13:CB:D7:B5:B0:AE:4A:8E:3C:91:DC:5C:B4:29:D7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/eymbbIMTy9e1sK5KjjyR3Fy0Kdc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.0.0/16 Signature Algorithm: sha256WithRSAEncryption b9:44:e5:c9:08:73:12:f8:b3:c0:45:27:fb:f2:1a:29:e4:e1: 64:c7:24:b7:9d:25:02:01:0b:4d:31:21:da:8a:45:99:8e:8d: ca:bb:ff:45:57:8f:e7:2d:e8:5c:a8:ce:b5:8b:60:5f:90:3b: 2c:ff:8a:cc:33:48:ca:e8:e1:cd:92:e3:a6:cc:2f:6e:f0:34: 01:88:ee:c6:d8:d5:28:1e:9e:b1:1d:46:8a:29:83:f9:bd:cb: de:a1:9f:44:8b:58:53:d6:d5:68:2d:e5:2a:f0:cd:b9:1d:50: 37:41:f1:2d:77:05:c7:4d:2b:92:78:e8:17:3d:7c:d0:2c:82: b4:91:6f:4d:49:28:ba:7a:ef:fd:e6:0f:ac:ea:d1:30:c1:ea: bf:67:ed:ee:69:1a:32:80:4b:93:7f:ae:ff:18:54:90:bc:1e: de:c8:fa:b9:cd:fa:28:79:55:ff:83:be:e1:f2:57:a6:1a:90: 3a:4f:81:8c:3d:03:5a:41:0b:37:0f:73:d1:1e:ff:81:0f:dd: 33:82:8c:10:1b:a5:92:0a:fe:58:99:dd:f1:a0:9d:46:f7:77: d3:27:77:6e:a1:e4:02:86:fd:d3:c3:39:03:b8:51:10:33:91: 94:72:26:41:bd:37:8e:b1:4e:31:93:d5:d7:e8:fc:24:90:68: 6d:99:9e:e6 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCMjk5QjZDODMxM0NC RDdCNUIwQUU0QThFM0M5MURDNUNCNDI5RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCU0bBEQrSsH9Yxn6wTbg3fO3p9byuj43Gdc3xqqU3A/ZXooPce Fe3Yk7wYApw2Al/126WqWhemKlPzD34jJaobZ3iLnI7a64aBGUx4FM0BWfHboxrb c/YImXZpf1fk6Uy3DxB3PYFXa7XJJlSIFgJoljT8qoJVX4ixisJv8LrNNdYgJGXO t7kXNlYYTANCRaq8fkov4hP863gDXLl4luEY/9ArEynpvNGTxM+fMM0UvZtLSKjH JwB210xuGqctKZetUKVbmshaxV527Ybl7ZGUPc3iq2WJEmaFrmQbrQF9RSqJLqDk kdnK7NKl8N7d53L7O/67rFTanwO5G2DRVS2RAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUeymbbIMTy9e1sK5KjjyR3Fy0KdcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9leW1iYklNVHk5ZTFzSzVLamp5 UjNGeTBLZGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0kEw DQYJKoZIhvcNAQELBQADggEBALlE5ckIcxL4s8BFJ/vyGink4WTHJLedJQIBC00x IdqKRZmOjcq7/0VXj+ct6FyozrWLYF+QOyz/iswzSMro4c2S46bML27wNAGI7sbY 1SgenrEdRoopg/m9y96hn0SLWFPW1Wgt5SrwzbkdUDdB8S13BcdNK5J46Bc9fNAs grSRb01JKLp67/3mD6zq0TDB6r9n7e5pGjKAS5N/rv8YVJC8Ht7I+rnN+ih5Vf+D vuHyV6YakDpPgYw9A1pBCzcPc9Ee/4EP3TOCjBAbpZIK/liZ3fGgnUb3d9Mnd26h 5AKG/dPDOQO4URAzkZRyJkG9N46xTjGT1dfo/CSQaG2ZnuY= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:07 2024 by rpki-client on console-ams.rpki-client.org