$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jK7IH0Ygyn22Nk5RiO6MJIqOQJ8.roa File: jK7IH0Ygyn22Nk5RiO6MJIqOQJ8.roa (raw, json) Hash identifier: fPyoRo4MUHYJWal2ORTbEwZfHy8kk84TwvFRrOlozRQ= Subject key identifier: 8C:AE:C8:1F:46:20:CA:7D:B6:36:4E:51:88:EE:8C:24:8A:8E:40:9F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 117A Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jK7IH0Ygyn22Nk5RiO6MJIqOQJ8.roa Signing time: Mon 26 Aug 2024 05:17:34 +0000 ROA not before: Mon 26 Aug 2024 05:17:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 211.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4474 (0x117a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8CAEC81F4620CA7DB6364E5188EE8C248A8E409F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:60:ec:01:c5:cf:02:84:b4:50:5c:f3:73: a8:4b:60:d4:ef:88:1e:7f:9f:bf:eb:5a:d7:dd:6f: f1:e4:08:79:7d:e5:cc:bd:55:d8:cf:a5:bb:b9:59: 94:b5:e3:36:de:54:3a:53:c2:10:21:20:a9:9b:a9: 22:db:0c:8f:af:d2:ff:05:d2:17:25:04:4f:87:32: 19:e6:62:ca:87:f5:d6:5e:72:9e:44:b3:4a:3d:83: bd:20:54:2d:dd:4b:74:90:98:7f:0d:6f:b6:fe:97: 68:84:30:b6:b7:b4:d9:49:c8:f9:e7:15:80:63:d8: bd:34:0a:59:b8:9c:fa:40:9e:ef:e9:c6:ec:bf:94: 30:bc:07:28:4b:4f:e1:7b:6c:4d:97:a8:15:a1:25: 16:ae:f9:16:c2:8e:cc:e7:dc:d1:40:ba:ba:34:6d: 69:5d:81:e0:6b:a4:31:92:90:21:29:98:4c:ba:34: 5a:6f:9e:ed:ee:ab:e9:55:3a:f3:01:84:ff:1a:f5: d7:0a:ef:d7:e8:19:db:ec:30:6f:4b:ae:82:e0:8d: 54:8d:91:14:b4:6b:ef:21:16:bd:1e:1c:e2:cc:83: e8:7d:b8:d8:1f:fe:73:f0:71:40:23:99:4e:43:c9: ea:5b:52:bc:a5:30:e1:18:ec:dc:d1:ad:6b:3e:51: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AE:C8:1F:46:20:CA:7D:B6:36:4E:51:88:EE:8C:24:8A:8E:40:9F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jK7IH0Ygyn22Nk5RiO6MJIqOQJ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.75.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2e:af:c4:06:ea:29:53:a3:6d:f3:8b:98:e6:4e:c1:26:57:21: d8:a3:03:ed:57:6e:6a:c9:bd:f1:a4:50:0e:51:7c:12:07:c2: d2:5b:f0:48:e2:16:80:2f:02:99:ae:4e:3d:55:57:01:ad:b2: 07:14:f2:e1:6d:9e:09:c8:fe:cc:6e:6a:3b:17:67:0c:91:05: d6:dd:fc:b9:58:4b:bc:68:05:73:de:6f:28:0b:83:a2:9b:f9: 38:ed:7d:be:b0:d8:30:3f:bd:6a:25:5d:61:e8:1b:79:a1:af: 06:a2:c7:c5:6f:e3:ff:46:3b:43:d0:28:fd:ab:d1:48:6d:80: 5b:ba:df:11:b7:70:c7:76:96:d0:9b:86:d6:90:87:b8:09:62: 3d:59:57:11:0b:88:ca:f0:93:7e:bf:73:d4:76:0d:a9:ac:0c: 48:11:b6:a1:45:07:56:d0:d0:20:97:d4:4e:28:52:1e:88:a7: f9:58:ca:12:30:27:ec:3a:79:0a:bc:b8:6c:3c:74:b9:8e:05: b8:4f:8b:ab:b5:c1:7e:bc:86:94:db:38:cd:b9:c6:d3:c0:8e: 7b:03:a2:5b:ed:dd:44:9c:42:76:80:4d:eb:fb:f3:bf:51:50: e3:27:8a:25:30:bb:53:20:ae:0e:98:6d:18:ed:f4:c1:88:e1: c6:05:ae:1a -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDQUVDODFGNDYyMENB N0RCNjM2NEU1MTg4RUU4QzI0OEE4RTQwOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0nmDsAcXPAoS0UFzzc6hLYNTviB5/n7/rWtfdb/HkCHl95cy9 VdjPpbu5WZS14zbeVDpTwhAhIKmbqSLbDI+v0v8F0hclBE+HMhnmYsqH9dZecp5E s0o9g70gVC3dS3SQmH8Nb7b+l2iEMLa3tNlJyPnnFYBj2L00Clm4nPpAnu/pxuy/ lDC8ByhLT+F7bE2XqBWhJRau+RbCjszn3NFAuro0bWldgeBrpDGSkCEpmEy6NFpv nu3uq+lVOvMBhP8a9dcK79foGdvsMG9LroLgjVSNkRS0a+8hFr0eHOLMg+h9uNgf /nPwcUAjmU5DyepbUrylMOEY7NzRrWs+UcVrAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUjK7IH0Ygyn22Nk5RiO6MJIqOQJ8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9qSzdJSDBZZ3luMjJOazVSaU82 TUpJcU9RSjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA00sw DQYJKoZIhvcNAQELBQADggEBAC6vxAbqKVOjbfOLmOZOwSZXIdijA+1XbmrJvfGk UA5RfBIHwtJb8EjiFoAvApmuTj1VVwGtsgcU8uFtngnI/sxuajsXZwyRBdbd/LlY S7xoBXPebygLg6Kb+Tjtfb6w2DA/vWolXWHoG3mhrwaix8Vv4/9GO0PQKP2r0Uht gFu63xG3cMd2ltCbhtaQh7gJYj1ZVxELiMrwk36/c9R2DamsDEgRtqFFB1bQ0CCX 1E4oUh6Ip/lYyhIwJ+w6eQq8uGw8dLmOBbhPi6u1wX68hpTbOM25xtPAjnsDolvt 3UScQnaATev7879RUOMniiUwu1Mgrg6YbRjt9MGI4cYFrho= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:07 2024 by rpki-client on console-ams.rpki-client.org