$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/fsZq2xeRp17ktRztJF7xECidrC8.roa File: fsZq2xeRp17ktRztJF7xECidrC8.roa (raw, json) Hash identifier: oYpIl0TA3dachepqYvlp23WDl5jnDmmQqf9wcE9jvKY= Subject key identifier: 7E:C6:6A:DB:17:91:A7:5E:E4:B5:1C:ED:24:5E:F1:10:28:9D:AC:2F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 118B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fsZq2xeRp17ktRztJF7xECidrC8.roa Signing time: Mon 26 Aug 2024 05:17:39 +0000 ROA not before: Mon 26 Aug 2024 05:17:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7500 IP address blocks: 2001:b000:19e::/64 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4491 (0x118b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7EC66ADB1791A75EE4B51CED245EF110289DAC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:00:f8:8f:30:45:c4:7c:16:d1:26:e5:30: 15:b0:71:33:d3:75:aa:fe:44:1f:cf:ea:24:48:15: bd:a5:1c:92:65:a8:b2:96:60:dc:cd:4c:9e:1f:e3: 72:67:4d:63:7d:da:a4:34:94:de:cc:fb:84:4e:9b: 0a:8c:a2:70:d4:d8:10:59:68:69:99:fe:43:86:14: 98:68:74:51:f5:7b:1c:75:ca:ee:8b:b8:1e:6f:3a: fc:58:c2:f9:b4:8e:b0:df:70:b1:9b:d7:ea:dc:a5: e9:43:bb:d1:66:88:ef:a2:2f:d3:22:44:19:bb:b7: 88:b6:ce:65:a8:d5:71:5c:9d:17:9b:d9:c5:a4:23: cf:e4:66:9a:e2:10:73:4f:de:de:e1:33:40:1c:85: 50:ae:83:89:54:57:fd:b5:4b:5a:d2:cf:1a:e8:bc: 33:1f:d9:60:64:0f:21:8f:72:e7:30:6f:6c:0e:42: ea:89:f0:70:03:84:e9:13:39:00:7b:f2:2a:7e:02: b8:20:42:a7:ec:e0:82:de:67:c8:d2:1b:fd:28:b7: d1:8c:04:84:fc:15:78:05:59:2d:ea:29:a7:06:fb: f8:16:59:4e:a9:07:8c:dc:00:4c:c7:1f:0a:e3:e9: 7b:20:0b:d2:a7:f2:64:c7:fd:e4:b5:d8:74:6c:40: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C6:6A:DB:17:91:A7:5E:E4:B5:1C:ED:24:5E:F1:10:28:9D:AC:2F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fsZq2xeRp17ktRztJF7xECidrC8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000:19e::/64 Signature Algorithm: sha256WithRSAEncryption 40:5b:23:68:50:e4:6a:65:fa:b7:95:00:bd:b7:7d:08:9e:fc: 75:b0:2d:2b:45:a9:16:c4:7e:6c:43:23:bb:35:7a:80:02:18: 91:96:5d:89:01:c7:80:0b:f2:11:9c:61:f6:90:3b:a4:e2:eb: c3:d6:0d:a0:cc:4f:f8:bf:74:6b:97:93:c1:4f:09:3f:d1:e2: 8b:a0:c2:d0:88:09:e4:ed:8b:56:22:4a:0e:18:b5:7b:ca:0d: 5d:2e:a8:3f:61:f2:67:e0:b5:a2:18:94:76:de:8c:41:ca:29: 25:6f:88:c9:11:b4:69:15:e5:60:e6:6c:40:6e:58:fa:02:b9: 33:55:37:8d:c7:fa:95:34:ba:2e:c0:f2:f5:aa:f3:4b:1c:63: b4:f7:54:6a:a8:50:f5:5b:f7:bc:a9:5d:1a:20:0e:4a:17:c9: 6a:3f:61:d2:bf:40:5c:0d:8c:e5:7a:bf:25:0b:7f:3e:00:bc: 33:30:6e:2b:18:d0:b6:b3:02:47:53:5d:23:67:5b:a6:93:02: 28:8d:80:a1:cd:21:51:f7:5c:ca:e4:82:3f:8d:3d:31:d7:23: a9:f7:1b:4a:6a:fe:48:96:38:b8:3b:c6:53:ec:1f:3d:32:31: f4:f8:94:a6:d6:0e:43:8a:3e:eb:97:f1:8f:4d:bf:72:0f:ee: 9c:30:55:96 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFQzY2QURCMTc5MUE3 NUVFNEI1MUNFRDI0NUVGMTEwMjg5REFDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLWwD4jzBFxHwW0SblMBWwcTPTdar+RB/P6iRIFb2lHJJlqLKW YNzNTJ4f43JnTWN92qQ0lN7M+4ROmwqMonDU2BBZaGmZ/kOGFJhodFH1exx1yu6L uB5vOvxYwvm0jrDfcLGb1+rcpelDu9FmiO+iL9MiRBm7t4i2zmWo1XFcnReb2cWk I8/kZpriEHNP3t7hM0AchVCug4lUV/21S1rSzxrovDMf2WBkDyGPcucwb2wOQuqJ 8HADhOkTOQB78ip+ArggQqfs4ILeZ8jSG/0ot9GMBIT8FXgFWS3qKacG+/gWWU6p B4zcAEzHHwrj6XsgC9Kn8mTH/eS12HRsQDgPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfsZq2xeRp17ktRztJF7xECidrC8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9mc1pxMnhlUnAxN2t0Unp0SkY3 eEVDaWRyQzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw AAGeAAAwDQYJKoZIhvcNAQELBQADggEBAEBbI2hQ5Gpl+reVAL23fQie/HWwLStF qRbEfmxDI7s1eoACGJGWXYkBx4AL8hGcYfaQO6Ti68PWDaDMT/i/dGuXk8FPCT/R 4ougwtCICeTti1YiSg4YtXvKDV0uqD9h8mfgtaIYlHbejEHKKSVviMkRtGkV5WDm bEBuWPoCuTNVN43H+pU0ui7A8vWq80scY7T3VGqoUPVb97ypXRogDkoXyWo/YdK/ QFwNjOV6vyULfz4AvDMwbisY0LazAkdTXSNnW6aTAiiNgKHNIVH3XMrkgj+NPTHX I6n3G0pq/kiWOLg7xlPsHz0yMfT4lKbWDkOKPuuX8Y9Nv3IP7pwwVZY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org