$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/rMXaaDhdOxD1MVSZRN7udFjqFAc.roa File: rMXaaDhdOxD1MVSZRN7udFjqFAc.roa (raw, json) Hash identifier: vQB421NWMFo/iq04HuMu2I3t0U6XksCOBQNw+vhxpHc= Subject key identifier: AC:C5:DA:68:38:5D:3B:10:F5:31:54:99:44:DE:EE:74:58:EA:14:07 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 119B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/rMXaaDhdOxD1MVSZRN7udFjqFAc.roa Signing time: Mon 26 Aug 2024 05:17:43 +0000 ROA not before: Mon 26 Aug 2024 05:17:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 36.224.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4507 (0x119b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ACC5DA68385D3B10F531549944DEEE7458EA1407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:96:37:65:4a:05:09:9c:40:90:18:de:2d: 52:a8:5e:2c:d4:e9:9c:83:98:de:06:8c:e4:31:eb: 14:3d:72:df:f6:b0:17:53:65:e7:f0:ff:fd:3c:b5: 89:e3:93:4f:b6:ec:5d:b2:ba:62:1f:d8:71:e4:e4: 0e:24:c7:3d:1f:e7:81:15:88:00:2f:67:19:57:4e: 4c:e2:f7:b2:1a:f4:f1:36:2c:27:9c:2e:64:74:d4: f6:87:2c:4e:e3:a2:3e:79:c5:91:21:87:32:41:a4: 5e:9f:7c:1f:59:65:7c:13:0f:d8:3f:31:9a:ec:b1: 9c:5e:d9:10:33:27:1c:0f:4a:c0:00:5d:5c:0b:f6: 45:a5:11:58:bc:0c:88:08:ae:cd:1a:69:75:36:bd: c6:d3:be:fb:60:72:ae:b6:ca:46:4c:2e:97:76:1c: b6:ce:36:3c:1e:e2:89:c3:c0:77:98:ab:87:06:10: 00:f6:aa:98:2a:60:0a:a7:16:25:63:11:b0:34:e6: db:c4:b2:a4:0b:26:f6:f6:76:77:a6:77:06:1a:28: 8e:ec:b8:64:0a:ec:7e:fc:6a:e8:e2:e0:cc:26:05: f0:6e:b8:86:f4:1d:e8:8f:85:0c:e0:4e:2e:c0:9c: 5a:52:5c:b6:b3:c7:3a:e7:98:eb:cd:1d:9f:d3:49: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:DA:68:38:5D:3B:10:F5:31:54:99:44:DE:EE:74:58:EA:14:07 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/rMXaaDhdOxD1MVSZRN7udFjqFAc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.224.0.0/12 Signature Algorithm: sha256WithRSAEncryption 82:28:5a:86:9f:30:20:11:e9:0c:8c:dd:05:f8:85:cb:3d:e1: 40:ce:57:13:1c:58:a6:4b:dd:0e:d9:b4:d9:83:7e:95:75:42: 04:b0:62:7c:33:14:20:28:1e:e6:40:95:9e:d4:ee:40:22:81: 45:aa:32:92:f9:75:45:45:82:ca:01:c4:da:a5:5e:03:01:1c: 5b:0c:46:ea:a8:5f:ed:75:24:3f:a5:c8:bb:7e:7f:9b:d0:b2: fc:1b:95:d2:47:65:95:0c:bf:16:d3:69:cc:fb:6a:8d:64:dd: 68:c9:22:bb:ef:77:fc:0e:1f:72:c3:e6:77:ed:a2:fb:d7:6a: 45:5c:10:5d:a1:51:64:97:94:cd:5e:7d:a5:cf:3f:9b:1a:08: 9b:93:74:77:58:fe:ae:8a:fa:65:17:96:4c:53:11:98:18:37: fc:07:b8:2e:f5:c6:5f:26:96:87:5d:39:58:a2:b6:e9:cd:04: c3:a5:fb:28:42:b7:b4:2b:17:3b:08:e6:af:66:7d:9f:3b:61: cf:1e:7a:e5:a2:7d:9b:6d:c0:00:3d:6c:6f:4c:89:43:f2:a4: 7b:39:89:6f:f6:bf:a8:f3:f8:01:28:81:5d:3e:0a:61:79:0d: 44:68:9c:12:b1:1d:42:b9:ca:63:f0:21:62:13:9c:52:23:8c: f9:5a:39:d9 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDQzVEQTY4Mzg1RDNC MTBGNTMxNTQ5OTQ0REVFRTc0NThFQTE0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZX5Y3ZUoFCZxAkBjeLVKoXizU6ZyDmN4GjOQx6xQ9ct/2sBdT Zefw//08tYnjk0+27F2yumIf2HHk5A4kxz0f54EViAAvZxlXTkzi97Ia9PE2LCec LmR01PaHLE7joj55xZEhhzJBpF6ffB9ZZXwTD9g/MZrssZxe2RAzJxwPSsAAXVwL 9kWlEVi8DIgIrs0aaXU2vcbTvvtgcq62ykZMLpd2HLbONjwe4onDwHeYq4cGEAD2 qpgqYAqnFiVjEbA05tvEsqQLJvb2dnemdwYaKI7suGQK7H78auji4MwmBfBuuIb0 HeiPhQzgTi7AnFpSXLazxzrnmOvNHZ/TSS3pAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUrMXaaDhdOxD1MVSZRN7udFjqFAcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9yTVhhYURoZE94RDFNVlNaUk43 dWRGanFGQWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEJOAw DQYJKoZIhvcNAQELBQADggEBAIIoWoafMCAR6QyM3QX4hcs94UDOVxMcWKZL3Q7Z tNmDfpV1QgSwYnwzFCAoHuZAlZ7U7kAigUWqMpL5dUVFgsoBxNqlXgMBHFsMRuqo X+11JD+lyLt+f5vQsvwbldJHZZUMvxbTacz7ao1k3WjJIrvvd/wOH3LD5nftovvX akVcEF2hUWSXlM1efaXPP5saCJuTdHdY/q6K+mUXlkxTEZgYN/wHuC71xl8mlodd OViitunNBMOl+yhCt7QrFzsI5q9mfZ87Yc8eeuWifZttwAA9bG9MiUPypHs5iW/2 v6jz+AEogV0+CmF5DURonBKxHUK5ymPwIWITnFIjjPlaOdk= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org