$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wWS3sD4SoQAYG79k5EPEu0cajy0.roa File: wWS3sD4SoQAYG79k5EPEu0cajy0.roa (raw, json) Hash identifier: dl7ShitNx/NoyY0suAM3KhF2N0X47GzOTQTAOZgi0Ok= Subject key identifier: C1:64:B7:B0:3E:12:A1:00:18:1B:BF:64:E4:43:C4:BB:47:1A:8F:2D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1200 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wWS3sD4SoQAYG79k5EPEu0cajy0.roa Signing time: Mon 26 Aug 2024 05:18:09 +0000 ROA not before: Mon 26 Aug 2024 05:18:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10126 IP address blocks: 220.128.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4608 (0x1200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C164B7B03E12A100181BBF64E443C4BB471A8F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:99:36:e7:a2:0f:bd:25:e3:79:dd:01:95: 4c:33:80:31:ec:48:11:03:1e:a5:92:e4:e4:d2:ad: b6:c7:ea:9e:9e:11:8c:3c:1e:3f:8f:67:82:f5:9f: 93:f7:9f:33:26:e0:43:7c:1e:e2:d0:4b:ed:d3:34: 34:e8:61:96:82:25:0d:78:9a:cf:8f:21:5c:c7:ab: 50:23:a0:e8:41:71:1b:e3:43:1d:69:98:0d:38:0a: c1:94:b8:74:7b:93:80:82:e6:87:fb:02:2f:b9:8d: 1e:b6:5e:30:4f:8f:e3:66:9b:7f:ac:1d:a3:83:9d: 52:22:42:f9:e5:49:62:49:a1:68:45:80:42:18:b2: 0b:66:4e:52:e1:c9:92:90:8b:2a:fb:ba:ea:eb:9e: a7:77:0b:05:bc:e2:d7:0c:f9:3a:83:52:de:c2:dc: 46:32:75:aa:ff:81:0c:de:b2:37:81:4b:46:46:69: d2:a6:fd:ce:3c:91:91:18:2a:bd:ce:92:b8:26:dc: 43:9c:fb:80:d4:21:70:ff:d6:b0:4c:36:9a:b0:fc: 58:10:1e:22:3d:e0:58:90:00:78:c0:72:51:16:f2: fb:28:e3:b8:b5:22:2c:9e:d4:79:87:32:9a:5f:8d: d5:bc:ed:66:7a:ae:84:a0:6f:a9:bb:32:43:d8:1b: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:B7:B0:3E:12:A1:00:18:1B:BF:64:E4:43:C4:BB:47:1A:8F:2D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wWS3sD4SoQAYG79k5EPEu0cajy0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.80.0/20 Signature Algorithm: sha256WithRSAEncryption 83:8e:64:7b:b1:b8:a2:72:b0:cb:dd:46:e3:a5:ea:70:0d:54: 7d:3b:80:02:34:f7:d0:11:6a:15:2a:2f:99:2f:bc:25:cb:fb: a2:3b:a4:a5:c3:0c:7f:61:6e:02:b8:64:66:50:fb:eb:6b:d0: fb:60:c1:21:4e:87:22:2e:91:05:c3:36:65:db:03:ec:c2:7f: d3:90:28:51:ed:3f:84:d0:7b:09:2c:7d:e4:c1:e0:60:f4:ce: e1:d7:cb:c5:c9:cc:66:ab:78:b5:7b:68:7f:14:e7:c7:ca:0d: 93:b8:2a:df:88:0a:19:a2:f9:79:5f:fc:2a:65:66:97:79:91: 3d:9a:c5:78:44:ce:52:fd:f5:99:fa:ad:dd:a1:c2:af:1d:be: ba:e2:0a:dd:a7:67:45:fc:55:2d:6b:dd:70:ab:9b:9e:cc:71: 36:38:f0:cf:c3:73:7f:e2:65:f8:51:43:63:4a:60:db:24:df: 90:54:7f:3d:d3:a1:33:0d:76:c8:1e:ad:ff:02:59:f2:4b:79: e1:f4:12:d3:48:c0:2f:a0:b1:5b:49:cb:da:26:68:2c:79:f5: 8b:b3:10:ab:ea:b7:c8:37:9a:4e:ad:c1:28:d6:b4:f7:8f:00: 78:6b:73:26:26:99:7a:fe:bd:c1:20:dc:37:28:a0:3e:85:e0: ff:af:e9:bc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxNjRCN0IwM0UxMkEx MDAxODFCQkY2NEU0NDNDNEJCNDcxQThGMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+/Jk256IPvSXjed0BlUwzgDHsSBEDHqWS5OTSrbbH6p6eEYw8 Hj+PZ4L1n5P3nzMm4EN8HuLQS+3TNDToYZaCJQ14ms+PIVzHq1AjoOhBcRvjQx1p mA04CsGUuHR7k4CC5of7Ai+5jR62XjBPj+Nmm3+sHaODnVIiQvnlSWJJoWhFgEIY sgtmTlLhyZKQiyr7uurrnqd3CwW84tcM+TqDUt7C3EYydar/gQzesjeBS0ZGadKm /c48kZEYKr3Okrgm3EOc+4DUIXD/1rBMNpqw/FgQHiI94FiQAHjAclEW8vso47i1 Iiye1HmHMppfjdW87WZ6roSgb6m7MkPYGy13AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUwWS3sD4SoQAYG79k5EPEu0cajy0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93V1Mzc0Q0U29RQVlHNzlrNUVQ RXUwY2FqeTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE3IBQ MA0GCSqGSIb3DQEBCwUAA4IBAQCDjmR7sbiicrDL3UbjpepwDVR9O4ACNPfQEWoV Ki+ZL7wly/uiO6Slwwx/YW4CuGRmUPvra9D7YMEhTociLpEFwzZl2wPswn/TkChR 7T+E0HsJLH3kweBg9M7h18vFycxmq3i1e2h/FOfHyg2TuCrfiAoZovl5X/wqZWaX eZE9msV4RM5S/fWZ+q3docKvHb664grdp2dF/FUta91wq5uezHE2OPDPw3N/4mX4 UUNjSmDbJN+QVH8906EzDXbIHq3/AlnyS3nh9BLTSMAvoLFbScvaJmgsefWLsxCr 6rfIN5pOrcEo1rT3jwB4a3MmJpl6/r3BINw3KKA+heD/r+m8 -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org