$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/xUNk_0bPJodFjdL1CW5s6mHb3Ok.roa File: xUNk_0bPJodFjdL1CW5s6mHb3Ok.roa (raw, json) Hash identifier: KctOiON4CvoKwTRCUy5qmSsiUn0HVcmuvYdwuUMXjWg= Subject key identifier: C5:43:64:FF:46:CF:26:87:45:8D:D2:F5:09:6E:6C:EA:61:DB:DC:E9 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11B0 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xUNk_0bPJodFjdL1CW5s6mHb3Ok.roa Signing time: Mon 26 Aug 2024 05:17:49 +0000 ROA not before: Mon 26 Aug 2024 05:17:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 203.74.67.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4528 (0x11b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C54364FF46CF2687458DD2F5096E6CEA61DBDCE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:22:d2:88:2a:e4:02:31:3d:a0:a3:c4:db: 9b:7a:56:7b:d0:aa:fb:89:32:65:dd:41:04:c8:e9: cb:2f:ac:2d:91:d2:91:52:38:f9:84:c6:a8:6b:1d: 3d:0f:45:cb:c1:96:a3:4e:fc:11:be:a6:7e:e7:35: 2f:4b:5a:b9:04:ae:30:04:17:75:8d:96:e6:65:07: 62:80:e4:98:89:f8:67:ae:cf:98:3d:03:70:de:71: 02:d1:16:2a:14:c3:53:9c:8c:71:00:e5:97:c2:08: 2b:07:d1:5f:e2:89:de:f3:c5:7e:b8:32:7e:9f:ef: c8:f1:d8:0c:22:c3:fa:2a:5b:f9:06:9e:71:7d:2b: 42:e4:1d:fb:84:b0:a3:b2:b7:20:1c:96:73:a9:22: 3c:28:31:0f:1b:f8:22:4c:2d:7b:e2:34:5a:1d:19: 33:4f:94:3e:50:a1:b7:07:e2:aa:69:44:8b:82:c3: d9:90:66:68:8f:51:72:91:17:c3:e5:a7:7a:0a:99: 87:31:dc:57:dd:bb:3d:b1:49:ff:34:08:d7:ac:93: 91:14:57:74:db:b6:58:d8:68:43:c4:56:dc:0a:4a: 3b:5a:52:af:94:0e:59:3c:c4:b8:25:ad:41:4c:97: 62:09:9d:3d:fc:6e:a2:2a:23:aa:6d:98:af:9f:2b: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:64:FF:46:CF:26:87:45:8D:D2:F5:09:6E:6C:EA:61:DB:DC:E9 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xUNk_0bPJodFjdL1CW5s6mHb3Ok.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.67.0/25 Signature Algorithm: sha256WithRSAEncryption 34:25:90:f3:42:c5:a8:0d:52:23:fe:d4:82:b0:a3:31:27:fd: 38:b6:c6:9f:2c:3f:0a:38:59:72:77:17:db:9b:7d:17:37:5a: 54:e3:9c:b3:6f:67:83:e9:97:5b:70:1f:a3:d1:6e:b6:32:8a: 82:94:76:49:0f:da:dc:13:8f:7b:f7:56:52:1a:3f:75:49:ea: 10:96:b2:bf:96:04:89:eb:b0:13:f5:e5:d5:6a:25:99:5f:5d: 00:73:3a:a8:ee:96:08:7c:db:b4:06:fb:22:52:54:8c:b8:cc: fb:d2:98:e9:84:fa:8b:cb:7f:56:6d:39:dd:23:1e:a0:89:37: f4:8e:ca:08:6d:46:a8:d8:de:13:d4:18:46:93:5c:ab:c9:86: 22:22:0c:77:1b:d4:fe:a8:2a:58:5e:3e:cd:84:32:9a:44:9f: ef:fc:1a:c6:73:8d:83:51:55:36:60:2d:09:4b:98:b0:0c:76: 57:f8:4f:f9:03:8e:66:a4:7e:80:c6:3d:8d:9f:09:cc:ca:02: bf:1c:31:18:87:65:1d:56:da:15:74:88:97:cd:bb:4b:5d:e1: bf:7a:9b:77:e1:2b:6c:a1:bb:ca:53:ae:b5:9c:e7:4e:27:b1: 80:2d:62:84:32:b6:f5:da:c2:0b:65:0e:a7:a8:57:c4:b8:57: 48:30:df:84 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1NDM2NEZGNDZDRjI2 ODc0NThERDJGNTA5NkU2Q0VBNjFEQkRDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtYyLSiCrkAjE9oKPE25t6VnvQqvuJMmXdQQTI6csvrC2R0pFS OPmExqhrHT0PRcvBlqNO/BG+pn7nNS9LWrkErjAEF3WNluZlB2KA5JiJ+Geuz5g9 A3DecQLRFioUw1OcjHEA5ZfCCCsH0V/iid7zxX64Mn6f78jx2Awiw/oqW/kGnnF9 K0LkHfuEsKOytyAclnOpIjwoMQ8b+CJMLXviNFodGTNPlD5QobcH4qppRIuCw9mQ ZmiPUXKRF8Plp3oKmYcx3Ffduz2xSf80CNesk5EUV3TbtljYaEPEVtwKSjtaUq+U Dlk8xLglrUFMl2IJnT38bqIqI6ptmK+fKyJrAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUxUNk/0bPJodFjdL1CW5s6mHb3OkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC94VU5rXzBiUEpvZEZqZEwxQ1c1 czZtSGIzT2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0pD ADANBgkqhkiG9w0BAQsFAAOCAQEANCWQ80LFqA1SI/7UgrCjMSf9OLbGnyw/CjhZ cncX25t9FzdaVOOcs29ng+mXW3Afo9FutjKKgpR2SQ/a3BOPe/dWUho/dUnqEJay v5YEieuwE/Xl1WolmV9dAHM6qO6WCHzbtAb7IlJUjLjM+9KY6YT6i8t/Vm053SMe oIk39I7KCG1GqNjeE9QYRpNcq8mGIiIMdxvU/qgqWF4+zYQymkSf7/waxnONg1FV NmAtCUuYsAx2V/hP+QOOZqR+gMY9jZ8JzMoCvxwxGIdlHVbaFXSIl827S13hv3qb d+ErbKG7ylOutZznTiexgC1ihDK29drCC2UOp6hXxLhXSDDfhA== -----END CERTIFICATE-----Generated at Fri Nov 22 00:59:09 2024 by rpki-client on console-fra.rpki-client.org