$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/iXgWQZIaoZGQchjYNvggQFf5R9U.roa File: iXgWQZIaoZGQchjYNvggQFf5R9U.roa (raw, json) Hash identifier: eDA/CxlyM2kN7XoiqxW5Fedx8Uy0pvJWOue3NS+TkKc= Subject key identifier: 89:78:16:41:92:1A:A1:91:90:72:18:D8:36:F8:20:40:57:F9:47:D5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1218 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iXgWQZIaoZGQchjYNvggQFf5R9U.roa Signing time: Mon 26 Aug 2024 05:18:15 +0000 ROA not before: Mon 26 Aug 2024 05:18:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 125.224.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4632 (0x1218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=89781641921AA191907218D836F8204057F947D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:cc:25:6c:d7:8c:f7:38:d5:a1:49:af:94: 7a:aa:e5:56:d0:9b:79:0e:7a:ef:d5:c2:68:c0:31: db:5c:65:cb:67:3c:08:35:6a:e3:f8:ce:bc:14:9f: 22:24:1f:95:16:d8:c6:bc:9b:1e:95:9f:20:3e:a7: aa:2e:88:41:0e:0d:45:1d:14:07:66:51:b5:89:d6: a4:74:40:64:fa:c9:d2:67:36:5b:ba:ac:3b:14:1f: 38:10:a3:ef:1f:6b:6f:da:47:5f:7b:2f:58:29:f4: 20:ad:ac:1b:7d:6a:c5:08:7d:24:ca:65:43:9f:cb: c9:9a:05:59:82:47:77:9a:e1:55:5b:8a:6e:18:cc: a3:de:5d:4c:3b:75:30:6a:ad:c1:4c:b8:44:d5:8c: 7e:a0:af:ba:99:63:18:81:62:6a:f3:ab:6f:35:a9: c3:60:7b:8b:11:84:e4:8d:80:ba:9c:b0:84:03:a7: 11:6b:03:06:3a:dd:75:24:87:89:51:d2:b5:81:c1: ad:d7:e4:95:f5:06:91:1c:81:bf:91:6b:d5:b2:53: b9:ae:40:c8:ea:04:52:14:9f:f1:03:12:4a:0f:ea: 76:36:1e:dd:d9:8e:6a:dd:56:cf:fd:68:ac:64:eb: 3e:f6:fa:1f:3d:3e:f3:95:dc:f7:b0:41:67:7f:d7: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:16:41:92:1A:A1:91:90:72:18:D8:36:F8:20:40:57:F9:47:D5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iXgWQZIaoZGQchjYNvggQFf5R9U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.224.0.0/13 Signature Algorithm: sha256WithRSAEncryption 8f:a5:c3:21:d5:21:94:47:ef:23:2c:9b:9b:59:85:55:03:e1: c9:17:fd:b0:f8:93:0e:1f:7d:97:cf:59:f1:2b:05:de:08:04: 12:92:74:45:14:ed:f4:2c:48:eb:06:f4:51:d9:45:bf:df:27: fe:42:0e:c9:80:c3:f4:e9:81:5c:f9:4b:30:1e:86:6d:91:2f: b5:fe:64:62:b7:cf:7f:20:56:37:37:51:02:81:18:50:b5:a7: c9:db:c2:8e:37:c2:a0:78:51:f0:00:ee:8f:d1:96:ea:80:51: bc:33:63:e6:25:5c:f4:49:79:f6:f0:b2:e7:7d:9d:9e:dd:27: 63:5a:50:ea:5d:7d:25:78:15:01:10:83:25:3c:e0:14:1c:ee: a8:42:ea:65:45:77:35:e5:d8:56:44:9d:45:f2:2d:bb:a4:c3: ed:fb:c5:3c:6f:d9:8b:39:f6:39:3d:85:9f:63:5f:14:e8:16: 87:7c:c1:a3:d3:23:8d:00:5c:7e:a8:50:39:fc:54:c1:cd:00: 54:32:15:7d:86:ce:8e:90:5d:5f:79:bd:89:bd:61:38:9a:f5: 8b:06:98:87:12:47:05:8d:54:a8:e1:3d:af:1d:86:dd:ad:43: 3c:af:c4:39:b7:df:5f:c2:90:1a:98:2e:a6:69:6e:36:64:c2: bb:5b:bb:26 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg5NzgxNjQxOTIxQUEx OTE5MDcyMThEODM2RjgyMDQwNTdGOTQ3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxO8wlbNeM9zjVoUmvlHqq5VbQm3kOeu/VwmjAMdtcZctnPAg1 auP4zrwUnyIkH5UW2Ma8mx6VnyA+p6ouiEEODUUdFAdmUbWJ1qR0QGT6ydJnNlu6 rDsUHzgQo+8fa2/aR197L1gp9CCtrBt9asUIfSTKZUOfy8maBVmCR3ea4VVbim4Y zKPeXUw7dTBqrcFMuETVjH6gr7qZYxiBYmrzq281qcNge4sRhOSNgLqcsIQDpxFr AwY63XUkh4lR0rWBwa3X5JX1BpEcgb+Ra9WyU7muQMjqBFIUn/EDEkoP6nY2Ht3Z jmrdVs/9aKxk6z72+h89PvOV3PewQWd/1zB3AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUiXgWQZIaoZGQchjYNvggQFf5R9UwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9pWGdXUVpJYW9aR1FjaGpZTnZn Z1FGZjVSOVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDfeAw DQYJKoZIhvcNAQELBQADggEBAI+lwyHVIZRH7yMsm5tZhVUD4ckX/bD4kw4ffZfP WfErBd4IBBKSdEUU7fQsSOsG9FHZRb/fJ/5CDsmAw/TpgVz5SzAehm2RL7X+ZGK3 z38gVjc3UQKBGFC1p8nbwo43wqB4UfAA7o/RluqAUbwzY+YlXPRJefbwsud9nZ7d J2NaUOpdfSV4FQEQgyU84BQc7qhC6mVFdzXl2FZEnUXyLbukw+37xTxv2Ys59jk9 hZ9jXxToFod8waPTI40AXH6oUDn8VMHNAFQyFX2Gzo6QXV95vYm9YTia9YsGmIcS RwWNVKjhPa8dht2tQzyvxDm331/CkBqYLqZpbjZkwrtbuyY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org