$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gGpUNgqFdxUuJfWcRa3abk3qqlg.roa File: gGpUNgqFdxUuJfWcRa3abk3qqlg.roa (raw, json) Hash identifier: yxWWlffJOISZfA5TTwRz36nuN3qPIIMH2eCafiQPFOU= Subject key identifier: 80:6A:54:36:0A:85:77:15:2E:25:F5:9C:45:AD:DA:6E:4D:EA:AA:58 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11A4 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gGpUNgqFdxUuJfWcRa3abk3qqlg.roa Signing time: Mon 26 Aug 2024 05:17:45 +0000 ROA not before: Mon 26 Aug 2024 05:17:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 122.120.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4516 (0x11a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=806A54360A8577152E25F59C45ADDA6E4DEAAA58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:14:dc:c4:7b:ea:19:5b:13:ef:8a:3c:27: 70:8b:52:18:dd:6d:af:e9:b2:9d:f8:1d:29:6d:36: ff:8d:f8:8c:62:00:c4:c0:64:55:6e:73:64:6c:a7: b4:a2:d4:d0:ab:36:78:db:62:7e:cc:b9:c6:e0:f0: a0:e3:56:a0:4e:b6:93:d0:79:4a:fe:25:c8:7f:19: 75:0c:4e:df:6e:6f:05:90:9f:83:25:ba:00:67:84: 3d:6c:b6:2f:6e:18:58:ce:5b:70:7e:33:88:80:50: ad:98:22:57:e5:0c:08:07:a3:0c:37:be:40:53:cb: 3f:f0:22:b7:19:d2:47:1b:4e:d0:2c:eb:df:53:23: 5d:cc:f5:3d:f5:6e:39:6a:fc:dd:39:46:8e:44:b6: 6e:4e:34:cb:13:5a:3c:3e:bb:63:14:c7:83:91:f8: 13:51:99:0b:41:db:b7:02:5f:2c:9d:9e:17:2c:10: 6c:8b:90:10:b9:d3:3e:bc:28:e8:af:48:97:3d:f7: 16:b0:ad:31:e1:8c:ee:32:af:f5:f0:6d:91:b7:1a: 69:e8:59:06:8e:b9:f3:e0:93:ba:b4:40:13:9b:3b: 2d:62:9f:05:03:56:43:85:09:f8:3a:d4:9b:e9:60: ac:53:44:87:02:25:0a:43:e3:9c:63:d9:b9:07:9f: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6A:54:36:0A:85:77:15:2E:25:F5:9C:45:AD:DA:6E:4D:EA:AA:58 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gGpUNgqFdxUuJfWcRa3abk3qqlg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.120.0.0/13 Signature Algorithm: sha256WithRSAEncryption 66:8c:5b:ed:53:21:64:ab:1f:7b:7c:fb:d4:1b:3d:63:2c:09: 1e:06:84:72:8d:44:4a:45:ed:17:1a:80:55:7c:77:ce:39:df: a7:2a:47:d0:48:d2:7b:31:84:a7:4a:58:14:3e:1c:ed:cf:21: 5a:7e:0f:29:5f:d8:c9:6a:84:21:5f:ff:35:e6:fa:fc:8e:93: a1:e5:fd:e6:21:fe:42:0d:33:25:b9:7d:ba:73:ab:28:57:ba: b2:c1:f7:26:09:13:10:82:09:14:1a:4a:4e:80:42:49:17:fd: 1a:69:7c:b4:49:c1:27:9c:88:5c:b8:8d:81:e3:46:15:17:59: 36:1f:84:0d:ec:a9:a1:05:ce:64:f9:2c:4b:8f:b1:71:32:be: 29:c8:d7:f8:d0:9a:58:3a:c7:66:56:ac:c0:2a:42:e0:83:bb: ed:b0:94:09:cb:ad:e9:5b:c3:e1:68:c0:93:2e:f9:2a:66:f6: b9:e6:f4:f1:61:5e:6b:66:be:87:f4:71:f9:c1:25:b1:3c:61: c3:3f:4b:72:a7:64:20:6c:a1:25:97:b2:58:ab:49:b9:01:b0: 92:ea:75:e7:77:8c:92:09:37:6f:28:f5:9c:63:1a:9a:d3:98: cc:03:cf:ee:b0:64:ac:b6:cc:98:51:0f:4d:a4:69:5b:fe:61: 9b:e2:50:43 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwNkE1NDM2MEE4NTc3 MTUyRTI1RjU5QzQ1QUREQTZFNERFQUFBNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZKxTcxHvqGVsT74o8J3CLUhjdba/psp34HSltNv+N+IxiAMTA ZFVuc2Rsp7Si1NCrNnjbYn7Mucbg8KDjVqBOtpPQeUr+Jch/GXUMTt9ubwWQn4Ml ugBnhD1sti9uGFjOW3B+M4iAUK2YIlflDAgHoww3vkBTyz/wIrcZ0kcbTtAs699T I13M9T31bjlq/N05Ro5Etm5ONMsTWjw+u2MUx4OR+BNRmQtB27cCXyydnhcsEGyL kBC50z68KOivSJc99xawrTHhjO4yr/XwbZG3GmnoWQaOufPgk7q0QBObOy1inwUD VkOFCfg61JvpYKxTRIcCJQpD45xj2bkHn7/xAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUgGpUNgqFdxUuJfWcRa3abk3qqlgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9nR3BVTmdxRmR4VXVKZldjUmEz YWJrM3FxbGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDengw DQYJKoZIhvcNAQELBQADggEBAGaMW+1TIWSrH3t8+9QbPWMsCR4GhHKNREpF7Rca gFV8d84536cqR9BI0nsxhKdKWBQ+HO3PIVp+Dylf2MlqhCFf/zXm+vyOk6Hl/eYh /kINMyW5fbpzqyhXurLB9yYJExCCCRQaSk6AQkkX/RppfLRJwSeciFy4jYHjRhUX WTYfhA3sqaEFzmT5LEuPsXEyvinI1/jQmlg6x2ZWrMAqQuCDu+2wlAnLrelbw+Fo wJMu+Spm9rnm9PFhXmtmvof0cfnBJbE8YcM/S3KnZCBsoSWXslirSbkBsJLqded3 jJIJN28o9ZxjGprTmMwDz+6wZKy2zJhRD02kaVv+YZviUEM= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org