$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wgm7ZgmNmK-ymd2lCKyhLOeqn2A.roa File: wgm7ZgmNmK-ymd2lCKyhLOeqn2A.roa (raw, json) Hash identifier: HxJqaLa04UCWeIAot73U+gcAhbfOIroVS2d8x+AJiiQ= Subject key identifier: C2:09:BB:66:09:8D:98:AF:B2:99:DD:A5:08:AC:A1:2C:E7:AA:9F:60 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1189 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wgm7ZgmNmK-ymd2lCKyhLOeqn2A.roa Signing time: Mon 26 Aug 2024 05:17:38 +0000 ROA not before: Mon 26 Aug 2024 05:17:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 15133 IP address blocks: 2001:b032:c101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4489 (0x1189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C209BB66098D98AFB299DDA508ACA12CE7AA9F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:58:19:68:3a:4b:4f:9f:ae:b2:92:eb:b6: 32:37:de:78:a3:2d:d6:8b:a6:3c:f0:71:f8:3c:d1: 32:12:38:50:4a:fc:00:45:f4:02:39:c7:24:36:93: d1:41:b6:4e:13:26:45:e8:19:7f:4b:88:b7:fa:97: d2:8e:e8:d2:03:e4:12:09:c6:21:83:73:e5:3e:84: 7a:63:c3:29:41:48:1e:95:8f:19:13:48:f5:8e:09: 04:88:83:7f:63:ed:1c:a7:69:6e:af:dc:10:d3:61: 29:cf:bb:06:a5:b0:f5:95:96:d0:5c:7d:38:03:ce: f7:c4:6a:3f:2f:52:40:85:7c:95:5f:81:bc:d9:ea: b5:47:2f:b6:1f:33:d1:06:fe:8b:6d:1d:7d:a7:1c: 00:64:cc:91:d8:37:ae:58:a9:7a:85:57:44:00:48: 5e:c3:03:36:96:5e:0d:72:36:1b:b5:68:2a:cd:ad: c4:c7:43:d7:b6:44:29:13:62:7a:05:eb:4a:14:1d: 9a:e4:20:d4:c0:82:6d:db:75:d3:fc:e6:df:90:a4: 7b:98:c2:4e:a3:1c:5f:67:2a:cf:5c:82:21:80:9e: fd:e8:c1:35:2a:23:98:29:95:61:4c:7e:cd:91:ab: cf:10:46:ae:17:97:f0:51:66:5a:33:a3:95:1d:18: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:09:BB:66:09:8D:98:AF:B2:99:DD:A5:08:AC:A1:2C:E7:AA:9F:60 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wgm7ZgmNmK-ymd2lCKyhLOeqn2A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b032:c101::/48 Signature Algorithm: sha256WithRSAEncryption c2:14:4e:76:9c:58:aa:94:fb:34:12:37:6a:9c:61:08:2e:c5: c0:0e:7b:06:b0:f4:51:8d:3e:71:89:d2:c4:7b:bf:57:57:c5: a6:3b:f3:05:df:52:2a:51:d8:07:08:25:5f:81:a4:55:76:a8: ad:82:b9:06:85:4b:b5:af:20:16:11:c2:f8:d3:f3:00:9a:bd: 72:96:c2:c5:f2:b2:93:fd:5c:20:7c:30:2a:c2:5b:40:9f:ea: 94:85:d2:0e:67:68:15:c7:63:77:46:99:cb:c0:26:2e:4b:c5: 7d:fc:1f:b2:6b:68:db:21:37:6a:88:29:6d:e0:97:0d:bb:09: 5e:c1:15:fd:e1:a8:1a:2e:99:1f:50:eb:dc:f2:2c:57:4d:02: 02:de:fb:ad:03:f9:3c:16:ea:cc:07:13:cc:40:5b:f5:65:8c: 61:77:ef:b0:55:9d:e9:e9:0c:f6:8b:66:06:0d:7b:81:46:1a: 29:7f:a5:c2:2d:85:a2:1a:32:60:f0:40:7b:2c:ba:70:ad:55: 07:53:ac:57:79:db:fe:47:fe:67:94:42:fa:85:be:24:73:af: e0:70:22:e1:d9:7b:c4:26:5b:a4:06:25:33:6c:8e:ed:07:52: 91:6f:06:cd:46:35:53:d9:cf:b3:1c:7b:d9:f1:7c:e4:a4:e5: 98:f7:56:fd -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyMDlCQjY2MDk4RDk4 QUZCMjk5RERBNTA4QUNBMTJDRTdBQTlGNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLflgZaDpLT5+uspLrtjI33nijLdaLpjzwcfg80TISOFBK/ABF 9AI5xyQ2k9FBtk4TJkXoGX9LiLf6l9KO6NID5BIJxiGDc+U+hHpjwylBSB6VjxkT SPWOCQSIg39j7RynaW6v3BDTYSnPuwalsPWVltBcfTgDzvfEaj8vUkCFfJVfgbzZ 6rVHL7YfM9EG/ottHX2nHABkzJHYN65YqXqFV0QASF7DAzaWXg1yNhu1aCrNrcTH Q9e2RCkTYnoF60oUHZrkINTAgm3bddP85t+QpHuYwk6jHF9nKs9cgiGAnv3owTUq I5gplWFMfs2Rq88QRq4Xl/BRZlozo5UdGBVdAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUwgm7ZgmNmK+ymd2lCKyhLOeqn2AwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93Z203WmdtTm1LLXltZDJsQ0t5 aExPZXFuMkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw MsEBMA0GCSqGSIb3DQEBCwUAA4IBAQDCFE52nFiqlPs0EjdqnGEILsXADnsGsPRR jT5xidLEe79XV8WmO/MF31IqUdgHCCVfgaRVdqitgrkGhUu1ryAWEcL40/MAmr1y lsLF8rKT/VwgfDAqwltAn+qUhdIOZ2gVx2N3RpnLwCYuS8V9/B+ya2jbITdqiClt 4JcNuwlewRX94agaLpkfUOvc8ixXTQIC3vutA/k8FurMBxPMQFv1ZYxhd++wVZ3p 6Qz2i2YGDXuBRhopf6XCLYWiGjJg8EB7LLpwrVUHU6xXedv+R/5nlEL6hb4kc6/g cCLh2XvEJlukBiUzbI7tB1KRbwbNRjVT2c+zHHvZ8XzkpOWY91b9 -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org