$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vyNu-7EWrt2OzL9sqN70lPgQM2Q.roa File: vyNu-7EWrt2OzL9sqN70lPgQM2Q.roa (raw, json) Hash identifier: aWuB00uEki+Vbl4DZxditVSimP7WziqpvmSdpWZp49E= Subject key identifier: BF:23:6E:FB:B1:16:AE:DD:8E:CC:BF:6C:A8:DE:F4:94:F8:10:33:64 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11E2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vyNu-7EWrt2OzL9sqN70lPgQM2Q.roa Signing time: Mon 26 Aug 2024 05:18:02 +0000 ROA not before: Mon 26 Aug 2024 05:18:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9680 IP address blocks: 202.39.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4578 (0x11e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BF236EFBB116AEDD8ECCBF6CA8DEF494F8103364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:0e:09:e0:2d:58:cd:54:ea:4d:7f:6d:bd: e0:ba:78:fd:41:33:84:01:0c:ad:ba:0e:c3:a1:70: e9:11:2b:8f:0b:6b:e8:c8:a1:ef:77:6d:cc:63:f0: de:74:e3:c6:0b:71:fd:dc:11:e5:3a:66:5c:d3:c1: 37:e9:ae:8a:b1:53:86:4f:2f:7d:21:7a:26:49:cb: 0f:61:8f:a2:7f:9c:6c:e0:02:a4:85:d4:50:65:ff: fb:22:92:75:e9:28:6a:28:0c:4f:0e:50:c9:f7:33: d2:58:b7:67:b7:b7:f4:07:b4:cf:af:84:47:9f:da: d9:c1:14:03:e4:3e:b3:60:5f:c2:9c:bd:d6:c8:9a: 10:95:ec:77:29:60:17:79:65:21:b1:ba:ad:ab:2d: 29:3e:62:5a:a7:a3:2f:10:d5:fb:f3:bd:cf:9c:6b: 13:38:e7:33:ea:36:c8:72:b5:e5:15:6b:21:d0:61: 4e:1b:a1:0d:e8:bd:03:e4:6b:fe:f7:29:af:cb:c4: ff:ce:17:3e:52:df:bc:09:20:a0:35:fa:78:a4:e9: bf:93:a8:8d:e7:f6:8b:b7:fe:2a:28:06:fd:35:49: 14:7b:f6:7b:11:24:bc:b2:90:df:89:f2:61:12:aa: bd:50:42:9a:85:4a:1a:5f:50:d5:ba:5e:24:73:eb: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:6E:FB:B1:16:AE:DD:8E:CC:BF:6C:A8:DE:F4:94:F8:10:33:64 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vyNu-7EWrt2OzL9sqN70lPgQM2Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.80.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:56:c2:3c:cd:a5:7f:6c:76:11:27:70:a0:4e:ee:46:b1:3c: 08:0e:be:13:67:58:74:48:c5:36:15:93:3a:dc:e5:62:ee:b0: 06:75:6d:8a:22:60:93:81:4d:b8:23:dd:ca:21:bd:4b:f1:94: f9:a0:73:cc:6a:e4:71:2f:2b:8e:89:2c:4b:28:50:13:97:7e: 96:d8:e9:4f:4b:78:6b:24:c7:a2:f3:6d:c5:68:3b:da:3b:57: 18:fa:72:bd:27:6d:bd:92:1b:47:a2:11:21:a7:84:f3:fd:42: 24:77:dd:52:b4:8d:83:ef:cb:d6:9c:98:fe:25:57:45:cb:59: 1b:78:a4:b9:35:9d:88:c8:18:4a:b5:9d:b8:c4:7e:df:58:da: 75:15:f8:65:1f:2b:05:cf:fa:e2:c1:ec:b3:13:df:6a:12:6f: 0a:69:96:e3:44:15:b4:48:44:f0:35:8a:f0:f6:d5:ad:86:58: 20:73:d6:83:aa:a6:e0:22:08:28:a6:1c:4d:47:ab:1f:41:80: b0:84:5a:5b:91:01:3b:11:8e:24:e8:85:36:87:80:a6:ed:05: d1:4c:02:c2:fa:1e:de:bf:dd:24:ed:f3:78:21:fd:50:71:30: 8a:ed:25:c1:c1:89:81:4a:8f:67:d6:c4:e8:41:f5:8f:a5:d3: a0:ef:08:63 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGMjM2RUZCQjExNkFF REQ4RUNDQkY2Q0E4REVGNDk0RjgxMDMzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWGw4J4C1YzVTqTX9tveC6eP1BM4QBDK26DsOhcOkRK48La+jI oe93bcxj8N5048YLcf3cEeU6ZlzTwTfproqxU4ZPL30heiZJyw9hj6J/nGzgAqSF 1FBl//siknXpKGooDE8OUMn3M9JYt2e3t/QHtM+vhEef2tnBFAPkPrNgX8KcvdbI mhCV7HcpYBd5ZSGxuq2rLSk+Ylqnoy8Q1fvzvc+caxM45zPqNshyteUVayHQYU4b oQ3ovQPka/73Ka/LxP/OFz5S37wJIKA1+nik6b+TqI3n9ou3/iooBv01SRR79nsR JLyykN+J8mESqr1QQpqFShpfUNW6XiRz683JAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUvyNu+7EWrt2OzL9sqN70lPgQM2QwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC92eU51LTdFV3J0Mk96TDlzcU43 MGxQZ1FNMlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyidQ MA0GCSqGSIb3DQEBCwUAA4IBAQA8VsI8zaV/bHYRJ3CgTu5GsTwIDr4TZ1h0SMU2 FZM63OVi7rAGdW2KImCTgU24I93KIb1L8ZT5oHPMauRxLyuOiSxLKFATl36W2OlP S3hrJMei823FaDvaO1cY+nK9J229khtHohEhp4Tz/UIkd91StI2D78vWnJj+JVdF y1kbeKS5NZ2IyBhKtZ24xH7fWNp1FfhlHysFz/riweyzE99qEm8KaZbjRBW0SETw NYrw9tWthlggc9aDqqbgIggophxNR6sfQYCwhFpbkQE7EY4k6IU2h4Cm7QXRTALC +h7ev90k7fN4If1QcTCK7SXBwYmBSo9n1sToQfWPpdOg7whj -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:39 2024 by rpki-client on console-fra.rpki-client.org