$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/swaBBlf16QzpyCPMyFICKm88hrY.roa File: swaBBlf16QzpyCPMyFICKm88hrY.roa (raw, json) Hash identifier: Jq1VqL7QKoqBqivSPCn5582zPshF74T0TCd6rKYUuH4= Subject key identifier: B3:06:81:06:57:F5:E9:0C:E9:C8:23:CC:C8:52:02:2A:6F:3C:86:B6 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11BF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/swaBBlf16QzpyCPMyFICKm88hrY.roa Signing time: Mon 26 Aug 2024 05:17:54 +0000 ROA not before: Mon 26 Aug 2024 05:17:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 23675 IP address blocks: 203.66.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4543 (0x11bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B306810657F5E90CE9C823CCC852022A6F3C86B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:55:7e:8c:ef:05:c1:99:c3:e5:91:19:5b: 08:64:a6:e5:f6:31:12:ff:c2:0f:f8:d7:f4:c7:45: c9:0f:20:9f:6b:6b:f3:af:98:09:29:c0:0d:48:9a: 4f:aa:59:b5:93:e9:a9:ab:fa:be:56:88:e7:99:36: 04:22:87:d1:7c:e0:4d:ff:e5:8f:64:06:ba:7e:45: 9c:26:1f:68:21:1c:24:74:b2:50:ed:66:cf:cb:1e: d2:9f:95:da:52:89:9b:cc:7b:b7:c6:0a:dd:ca:cb: 74:d5:d3:a6:48:b9:96:3e:7a:b0:f0:c1:cc:4b:1b: 6f:ad:3d:e0:a0:e3:bf:97:38:de:e9:52:f5:5d:71: 8d:fb:e7:97:3d:1e:30:3a:42:04:a4:54:6e:2f:e8: cc:41:50:6d:70:e1:44:bc:e8:36:de:7d:f5:16:8a: 15:18:8a:4f:14:19:86:fd:fe:6f:d2:62:dd:cc:e7: a7:43:c4:e5:31:e4:18:06:06:02:a0:8b:8c:af:17: 9a:7a:12:4a:90:34:f2:f9:17:f5:3a:e4:ba:6c:20: ae:d5:d7:7a:08:95:bc:12:69:7e:36:89:22:2a:91: d3:b2:ef:36:1c:ce:ee:e5:93:ae:57:b3:64:b3:88: db:02:f1:d1:9d:a9:28:68:2f:df:28:a5:20:36:0f: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:81:06:57:F5:E9:0C:E9:C8:23:CC:C8:52:02:2A:6F:3C:86:B6 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/swaBBlf16QzpyCPMyFICKm88hrY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.245.0/24 Signature Algorithm: sha256WithRSAEncryption 05:d0:fd:ee:f2:e8:f3:9c:98:3e:59:45:23:33:3e:e2:3d:f7: 97:a9:91:16:86:34:67:fa:e0:16:5a:5e:99:51:d6:33:c1:20: 32:cb:8e:a6:cc:0b:52:3c:56:1e:5d:a9:47:85:ca:9f:6b:e3: 4c:77:1f:2b:2e:e5:28:81:7e:9b:8c:60:1f:57:83:46:a7:89: eb:02:e4:3b:d2:8c:72:ea:bb:6d:de:a6:8a:15:65:1b:f2:57: e9:89:dd:da:38:15:33:cc:ac:f5:c6:ea:99:6f:67:61:01:7f: c6:2c:ec:99:7e:70:53:af:fc:66:49:61:42:7d:e4:7f:ab:e5: c9:92:d0:a8:79:4e:cb:2e:2f:71:22:9c:03:44:4c:55:58:09: 00:4e:8e:c8:ab:76:7d:69:c2:44:9f:24:ef:96:74:6d:1a:13: 31:38:ac:ad:0c:e6:d7:c7:53:3c:cd:bd:3f:7b:58:06:8e:0a: af:69:85:f5:ee:4b:19:07:5b:3b:f7:33:0f:cd:bf:1d:31:be: e8:1e:0a:74:c9:d3:c0:b1:45:2e:4d:be:03:ae:4a:ac:7d:4c: 3e:93:f2:71:28:f6:f0:c8:aa:c8:9b:d4:3b:f2:1e:39:6c:1e: f5:ea:30:46:6f:a3:ac:97:3e:e1:af:6d:91:16:85:52:5e:a7: df:7f:d4:64 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzMDY4MTA2NTdGNUU5 MENFOUM4MjNDQ0M4NTIwMjJBNkYzQzg2QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEh1V+jO8FwZnD5ZEZWwhkpuX2MRL/wg/41/THRckPIJ9ra/Ov mAkpwA1Imk+qWbWT6amr+r5WiOeZNgQih9F84E3/5Y9kBrp+RZwmH2ghHCR0slDt Zs/LHtKfldpSiZvMe7fGCt3Ky3TV06ZIuZY+erDwwcxLG2+tPeCg47+XON7pUvVd cY3755c9HjA6QgSkVG4v6MxBUG1w4US86DbeffUWihUYik8UGYb9/m/SYt3M56dD xOUx5BgGBgKgi4yvF5p6EkqQNPL5F/U65LpsIK7V13oIlbwSaX42iSIqkdOy7zYc zu7lk65Xs2SziNsC8dGdqShoL98opSA2D/A1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUswaBBlf16QzpyCPMyFICKm88hrYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9zd2FCQmxmMTZRenB5Q1BNeUZJ Q0ttODhoclkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0L1 MA0GCSqGSIb3DQEBCwUAA4IBAQAF0P3u8ujznJg+WUUjMz7iPfeXqZEWhjRn+uAW Wl6ZUdYzwSAyy46mzAtSPFYeXalHhcqfa+NMdx8rLuUogX6bjGAfV4NGp4nrAuQ7 0oxy6rtt3qaKFWUb8lfpid3aOBUzzKz1xuqZb2dhAX/GLOyZfnBTr/xmSWFCfeR/ q+XJktCoeU7LLi9xIpwDRExVWAkATo7Iq3Z9acJEnyTvlnRtGhMxOKytDObXx1M8 zb0/e1gGjgqvaYX17ksZB1s79zMPzb8dMb7oHgp0ydPAsUUuTb4DrkqsfUw+k/Jx KPbwyKrIm9Q78h45bB716jBGb6Oslz7hr22RFoVSXqfff9Rk -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:39 2024 by rpki-client on console-fra.rpki-client.org