$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qMKpVSTCx6hMh18xUVYa-HVWZfk.roa File: qMKpVSTCx6hMh18xUVYa-HVWZfk.roa (raw, json) Hash identifier: 4q7HzzbozlcOwO7WTfOzjh0kb6g+3oH0blc7wzEmgY0= Subject key identifier: A8:C2:A9:55:24:C2:C7:A8:4C:87:5F:31:51:56:1A:F8:75:56:65:F9 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11E9 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qMKpVSTCx6hMh18xUVYa-HVWZfk.roa Signing time: Mon 26 Aug 2024 05:18:03 +0000 ROA not before: Mon 26 Aug 2024 05:18:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 203.66.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4585 (0x11e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A8C2A95524C2C7A84C875F3151561AF8755665F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3b:8b:20:09:58:37:54:d2:72:40:b3:ea:18: 40:97:49:f9:5f:d3:c7:44:29:84:f2:3a:85:86:44: 39:e6:6d:3e:06:11:85:40:90:01:96:47:cb:15:e1: 28:e2:dd:df:17:a1:7d:64:28:82:5a:5d:46:e2:92: 56:44:6c:4f:d3:94:01:23:18:1b:9f:c4:b3:4a:6e: 65:41:ac:24:af:ec:ce:d8:ba:7f:b3:b8:fc:98:1c: 21:0b:52:b0:37:ea:22:49:a6:f5:47:01:63:43:7c: 45:37:fc:6c:61:3f:c3:68:ce:df:36:7a:93:b6:7d: 92:44:c3:2d:d9:58:57:83:c4:af:c7:a5:7c:eb:60: a2:73:5e:c8:b9:8b:fd:43:93:0c:a3:7f:95:27:fc: 71:28:53:09:36:a1:a0:e4:f6:a3:fc:81:e5:7a:e2: 65:7e:0e:07:2b:73:63:e7:29:63:2f:d0:dc:d9:c1: a9:53:9a:72:ec:e3:04:ae:ac:35:5a:d5:08:c5:d9: 9a:42:fc:0f:7c:58:42:8a:4a:53:05:06:42:76:e8: 0b:3c:8d:5e:45:44:aa:d0:f4:48:69:a3:22:8d:45: d2:89:aa:4f:0a:ef:a6:74:6a:cd:dc:dc:ae:cd:ea: 18:54:4d:64:5c:bf:be:d3:36:9e:03:a5:7b:2f:52: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:A9:55:24:C2:C7:A8:4C:87:5F:31:51:56:1A:F8:75:56:65:F9 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qMKpVSTCx6hMh18xUVYa-HVWZfk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.226.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:ce:98:ab:7e:88:ab:1d:08:11:90:60:55:0b:5a:2a:e0:27: c8:23:83:12:70:cb:1d:42:5b:b9:e1:1c:5e:05:a9:8a:e4:98: cf:c4:91:5e:ba:c1:5b:ea:a2:73:b3:33:a0:43:26:6e:72:8d: d2:e4:4e:cc:4a:a4:50:9c:08:a3:0b:e0:38:56:bf:bf:a0:4f: 55:69:a9:93:c0:2e:2b:76:66:da:9a:51:ee:00:90:08:0d:17: df:10:c0:5a:f2:83:56:fd:ba:00:95:e6:cb:a9:13:82:01:eb: d6:86:dc:3c:e0:1f:b9:19:ee:6f:28:9d:17:4e:97:cc:8e:e4: 09:ee:b3:f9:c0:2f:58:a2:7e:c0:37:5a:80:68:b0:b4:3f:ff: 45:26:75:d0:16:48:f5:69:96:d3:c2:15:47:f0:a3:ca:04:ec: ed:98:80:2e:8c:e8:bf:e1:cc:20:f5:e5:21:17:d1:9e:fe:9a: c8:bb:05:0a:0b:2a:09:99:56:3c:5d:a2:47:5d:8a:ad:a5:9d: 6a:92:d6:41:66:59:9e:ed:b3:59:5f:40:b6:46:10:94:39:c6: 69:98:f6:cf:bc:63:da:a3:7e:04:7b:9c:e6:6e:94:0c:7f:a7: ea:c0:24:1a:ce:36:69:e1:65:85:0a:c6:33:e5:90:c9:37:2c: 22:a7:1d:71 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE4QzJBOTU1MjRDMkM3 QTg0Qzg3NUYzMTUxNTYxQUY4NzU1NjY1RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpO4sgCVg3VNJyQLPqGECXSflf08dEKYTyOoWGRDnmbT4GEYVA kAGWR8sV4Sji3d8XoX1kKIJaXUbiklZEbE/TlAEjGBufxLNKbmVBrCSv7M7Yun+z uPyYHCELUrA36iJJpvVHAWNDfEU3/GxhP8Nozt82epO2fZJEwy3ZWFeDxK/HpXzr YKJzXsi5i/1Dkwyjf5Un/HEoUwk2oaDk9qP8geV64mV+Dgcrc2PnKWMv0NzZwalT mnLs4wSurDVa1QjF2ZpC/A98WEKKSlMFBkJ26As8jV5FRKrQ9EhpoyKNRdKJqk8K 76Z0as3c3K7N6hhUTWRcv77TNp4DpXsvUq7NAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUqMKpVSTCx6hMh18xUVYa+HVWZfkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9xTUtwVlNUQ3g2aE1oMTh4VVZZ YS1IVldaZmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Li MA0GCSqGSIb3DQEBCwUAA4IBAQAtzpirfoirHQgRkGBVC1oq4CfII4MScMsdQlu5 4RxeBamK5JjPxJFeusFb6qJzszOgQyZuco3S5E7MSqRQnAijC+A4Vr+/oE9VaamT wC4rdmbamlHuAJAIDRffEMBa8oNW/boAlebLqROCAevWhtw84B+5Ge5vKJ0XTpfM juQJ7rP5wC9Yon7AN1qAaLC0P/9FJnXQFkj1aZbTwhVH8KPKBOztmIAujOi/4cwg 9eUhF9Ge/prIuwUKCyoJmVY8XaJHXYqtpZ1qktZBZlme7bNZX0C2RhCUOcZpmPbP vGPao34Ee5zmbpQMf6fqwCQazjZp4WWFCsYz5ZDJNywipx1x -----END CERTIFICATE-----Generated at Fri Nov 22 00:59:09 2024 by rpki-client on console-fra.rpki-client.org