$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa File: pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa (raw, json) Hash identifier: YsXSXhzAr32Hf2JBMyUgvFFNRyJnykfEDK68XZjv4tQ= Subject key identifier: A5:FD:14:78:8E:A6:DA:47:8D:EC:AB:22:D9:1B:3C:AC:88:72:49:FE Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1186 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa Signing time: Mon 26 Aug 2024 05:17:38 +0000 ROA not before: Mon 26 Aug 2024 05:17:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 210.242.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4486 (0x1186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5FD14788EA6DA478DECAB22D91B3CAC887249FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:a9:73:3d:70:9a:e1:42:ea:f2:6c:ad:b4: 41:9e:97:ee:98:a3:91:cd:94:65:30:47:35:19:ba: 29:61:12:2e:ec:a2:7a:b5:b1:fa:6f:92:c1:7a:67: cc:9c:2b:ef:99:c9:09:44:41:06:3a:f6:e7:a8:9d: 1d:9d:ad:34:ca:7e:50:1f:77:1b:f9:c2:a9:9a:c3: 87:63:01:3d:c6:a3:71:67:76:92:d1:6e:47:d2:13: f1:13:08:df:61:9c:19:04:d5:37:3b:cd:58:47:98: 84:51:35:39:15:38:0b:84:4f:94:b5:cf:9b:f3:46: 75:7c:e2:ed:55:99:81:aa:5b:82:f7:c6:ab:9d:6b: 99:70:50:70:09:68:57:e4:b1:cf:26:be:2e:a1:ba: 73:fe:0a:31:d4:c0:d7:e0:40:b0:1a:2e:42:5a:46: 59:52:74:f3:8a:e7:de:ac:cb:1e:40:58:4d:67:3f: 28:b8:2e:70:03:9a:30:74:63:1f:07:8e:fd:00:7a: ae:f8:ec:91:72:4d:d2:2f:16:c0:06:34:19:dd:b2: c5:60:25:d2:8a:73:89:f8:40:0c:56:76:0c:2d:a4: 50:24:c9:a7:e7:a4:17:fc:6a:f7:fc:31:c5:13:46: 92:af:27:c4:c4:53:e4:c9:14:a4:a2:25:7d:46:27: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:14:78:8E:A6:DA:47:8D:EC:AB:22:D9:1B:3C:AC:88:72:49:FE X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pf0UeI6m2keN7Ksi2Rs8rIhySf4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:f8:8a:5f:1e:3f:c8:dd:62:d5:61:53:7b:39:19:31:1b:fa: 0d:fa:20:b1:c6:eb:f5:11:56:1a:3e:1d:94:e4:99:76:55:f5: 90:fb:e5:5b:48:82:1d:be:bb:1a:b3:f0:81:aa:22:df:59:53: df:c9:81:80:14:9c:a4:6c:34:54:cc:99:45:02:72:8f:91:91: 2c:d9:0c:c4:bd:58:33:e5:6e:32:3b:2b:f1:3c:2c:34:79:17: 78:00:6b:07:e7:17:93:7a:bf:0f:9f:eb:e5:ae:7f:c8:55:3a: 37:b4:0f:fd:34:92:26:38:ec:09:bf:78:3b:db:36:4d:88:9c: 68:38:aa:c0:09:de:32:c8:0b:fe:75:27:85:b9:bc:b5:41:a2: 15:f5:66:c3:b1:92:10:7c:11:79:b7:db:19:63:a2:0c:ea:d1: f1:b0:38:7a:43:38:be:d4:1b:83:7d:68:39:6e:49:38:07:2c: d5:25:25:7d:fa:e4:a8:df:4b:ff:65:b1:76:58:08:5b:cd:22: a1:7a:60:bb:0e:e5:19:01:9e:a0:af:83:f5:39:59:3c:8e:c5: 78:4a:c9:18:29:b0:ea:1a:e9:04:70:ea:63:0e:62:37:a1:a8: fa:b0:0a:a2:ae:0d:9d:22:0c:f7:2c:53:8b:73:99:cc:0a:ce: e3:bc:6f:e9 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1RkQxNDc4OEVBNkRB NDc4REVDQUIyMkQ5MUIzQ0FDODg3MjQ5RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY3alzPXCa4ULq8myttEGel+6Yo5HNlGUwRzUZuilhEi7sonq1 sfpvksF6Z8ycK++ZyQlEQQY69ueonR2drTTKflAfdxv5wqmaw4djAT3Go3FndpLR bkfSE/ETCN9hnBkE1Tc7zVhHmIRRNTkVOAuET5S1z5vzRnV84u1VmYGqW4L3xqud a5lwUHAJaFfksc8mvi6hunP+CjHUwNfgQLAaLkJaRllSdPOK596syx5AWE1nPyi4 LnADmjB0Yx8Hjv0Aeq747JFyTdIvFsAGNBndssVgJdKKc4n4QAxWdgwtpFAkyafn pBf8avf8McUTRpKvJ8TEU+TJFKSiJX1GJ/SFAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUpf0UeI6m2keN7Ksi2Rs8rIhySf4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wZjBVZUk2bTJrZU43S3NpMlJz OHJJaHlTZjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0vIw DQYJKoZIhvcNAQELBQADggEBADb4il8eP8jdYtVhU3s5GTEb+g36ILHG6/URVho+ HZTkmXZV9ZD75VtIgh2+uxqz8IGqIt9ZU9/JgYAUnKRsNFTMmUUCco+RkSzZDMS9 WDPlbjI7K/E8LDR5F3gAawfnF5N6vw+f6+Wuf8hVOje0D/00kiY47Am/eDvbNk2I nGg4qsAJ3jLIC/51J4W5vLVBohX1ZsOxkhB8EXm32xljogzq0fGwOHpDOL7UG4N9 aDluSTgHLNUlJX365KjfS/9lsXZYCFvNIqF6YLsO5RkBnqCvg/U5WTyOxXhKyRgp sOoa6QRw6mMOYjehqPqwCqKuDZ0iDPcsU4tzmcwKzuO8b+k= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org