$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/xKnV6dY_iBV1UX72TdmA6o0yE7A.roa File: xKnV6dY_iBV1UX72TdmA6o0yE7A.roa (raw, json) Hash identifier: PFuchE1PaujgArmx9tvrmX4mZb1Ye9NyAvaIhBPkKrU= Subject key identifier: C4:A9:D5:E9:D6:3F:88:15:75:51:7E:F6:4D:D9:80:EA:8D:32:13:B0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11D4 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xKnV6dY_iBV1UX72TdmA6o0yE7A.roa Signing time: Mon 26 Aug 2024 05:17:59 +0000 ROA not before: Mon 26 Aug 2024 05:17:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 2001:b000::/23 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4564 (0x11d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C4A9D5E9D63F881575517EF64DD980EA8D3213B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:e9:15:a7:55:dc:14:60:ff:fb:ae:aa:7e: 29:5a:57:e2:b5:cc:02:c8:97:11:15:39:dc:9b:68: 86:0e:0b:df:36:a5:a6:91:4a:49:ed:95:16:ca:77: ee:2a:1c:1b:5a:72:5e:99:91:de:15:14:e8:11:50: 9b:ee:28:1e:d4:5a:6f:3a:c0:89:cc:90:ed:f7:94: 5b:c5:e5:fd:a1:32:33:75:87:f6:88:e3:01:f8:24: ef:46:8a:ba:74:b0:c6:de:a9:a0:b3:21:75:f2:3f: 3e:d4:63:7f:e8:88:70:8e:ae:4a:41:bc:0e:96:0c: 6f:e6:83:9e:11:38:f0:52:24:b0:b4:18:54:7c:50: 4f:bb:34:dc:ec:72:73:62:9b:9c:e3:15:eb:ea:9d: 6b:6d:ac:1d:d5:ef:75:dc:b0:6f:98:6a:87:d3:be: b8:c2:7d:05:86:af:a9:9c:fb:6c:9b:19:0b:12:a0: d9:eb:ab:34:c8:15:2c:de:4a:88:9e:64:c0:58:79: 97:36:da:38:f4:66:28:6e:f4:a8:b6:a4:f5:31:66: af:de:14:4a:1a:f7:3f:21:e8:60:97:9f:d1:36:49: f9:82:b3:bd:15:06:41:1a:b0:69:4f:bb:43:55:55: 80:90:85:e8:f3:cb:07:e4:91:1f:db:9d:e9:6b:b4: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A9:D5:E9:D6:3F:88:15:75:51:7E:F6:4D:D9:80:EA:8D:32:13:B0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xKnV6dY_iBV1UX72TdmA6o0yE7A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000::/23 Signature Algorithm: sha256WithRSAEncryption 24:d3:42:c4:00:64:23:2b:aa:00:3a:6d:57:b3:4a:73:d4:d8: 1f:f4:a2:80:77:85:13:9c:00:87:9c:89:03:6f:9f:de:fa:e2: d4:75:ed:15:f0:55:57:17:9a:be:ef:98:c6:6a:5c:c6:9e:cb: 04:78:d8:92:dc:08:ce:db:75:25:9e:b7:af:5c:1d:1d:45:e9: 5e:57:e7:69:a9:17:1f:61:54:01:e2:ed:e3:81:e2:c9:9a:db: 29:25:b2:64:6c:f4:e6:5f:f5:4f:42:3b:d9:8b:4d:4e:f4:11: 97:61:a5:02:bc:78:f7:c6:8f:0b:a4:ca:3a:ec:b9:93:b1:9d: 93:b8:f2:29:2b:7a:37:3a:98:b4:49:e4:7b:97:49:f5:01:85: ff:97:78:11:86:e6:f4:41:6e:08:03:d8:f3:b8:a0:a5:5d:47: 89:25:65:60:9f:ae:35:07:b4:21:31:5c:7f:ab:7b:ea:ee:ba: dc:0d:a2:b6:69:de:89:6d:a7:8b:ec:5e:88:46:12:fb:7b:a1: 28:ac:ea:91:e0:5f:93:21:ba:c5:bc:95:77:cb:ff:59:fa:03: 0a:8d:ba:83:f7:26:7a:b2:af:99:1f:fa:ec:11:aa:a8:25:e1: 5d:b3:13:e0:fa:f9:3b:90:0f:df:de:81:5f:fb:d5:b6:54:53: c3:11:36:f5 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0QTlENUU5RDYzRjg4 MTU3NTUxN0VGNjRERDk4MEVBOEQzMjEzQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEW+kVp1XcFGD/+66qfilaV+K1zALIlxEVOdybaIYOC982paaR SkntlRbKd+4qHBtacl6Zkd4VFOgRUJvuKB7UWm86wInMkO33lFvF5f2hMjN1h/aI 4wH4JO9Girp0sMbeqaCzIXXyPz7UY3/oiHCOrkpBvA6WDG/mg54ROPBSJLC0GFR8 UE+7NNzscnNim5zjFevqnWttrB3V73XcsG+YaofTvrjCfQWGr6mc+2ybGQsSoNnr qzTIFSzeSoieZMBYeZc22jj0Zihu9Ki2pPUxZq/eFEoa9z8h6GCXn9E2SfmCs70V BkEasGlPu0NVVYCQhejzywfkkR/bnelrtM1PAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUxKnV6dY/iBV1UX72TdmA6o0yE7AwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC94S25WNmRZX2lCVjFVWDcyVGRt QTZvMHlFN0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQBIAGw MA0GCSqGSIb3DQEBCwUAA4IBAQAk00LEAGQjK6oAOm1Xs0pz1Ngf9KKAd4UTnACH nIkDb5/e+uLUde0V8FVXF5q+75jGalzGnssEeNiS3AjO23UlnrevXB0dReleV+dp qRcfYVQB4u3jgeLJmtspJbJkbPTmX/VPQjvZi01O9BGXYaUCvHj3xo8LpMo67LmT sZ2TuPIpK3o3Opi0SeR7l0n1AYX/l3gRhub0QW4IA9jzuKClXUeJJWVgn641B7Qh MVx/q3vq7rrcDaK2ad6JbaeL7F6IRhL7e6EorOqR4F+TIbrFvJV3y/9Z+gMKjbqD 9yZ6sq+ZH/rsEaqoJeFdsxPg+vk7kA/f3oFf+9W2VFPDETb1 -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org