$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa File: 323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa (raw, json) Hash identifier: OZgzeOyxhowU/rJ8JO+T/8jjLWpOpmgEkORYpWDFE+8= Subject key identifier: 85:DD:E4:E3:7C:66:6D:DA:02:32:BC:74:32:38:09:36:F5:84:28:21 Certificate issuer: /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1 Certificate serial: 020A6554A0CC108884A70FEA320030547C098F2C Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1 Authority info access: rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa Signing time: Thu 20 Jun 2024 05:23:34 +0000 ROA not before: Thu 20 Jun 2024 05:18:34 +0000 ROA not after: Thu 19 Jun 2025 05:23:34 +0000 asID: 945 IP address blocks: 2001:67c:a8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Jun 2024 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0a:65:54:a0:cc:10:88:84:a7:0f:ea:32:00:30:54:7c:09:8f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1 Validity Not Before: Jun 20 05:18:34 2024 GMT Not After : Jun 19 05:23:34 2025 GMT Subject: CN=85DDE4E37C666DDA0232BC7432380936F5842821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:7c:ba:4f:d2:3d:1d:fb:94:62:83:f7:58: af:90:7a:6b:d2:2f:33:ff:5f:16:3a:9c:7f:34:2c: 2d:d7:2f:b6:99:50:ec:5a:9b:82:2d:42:4a:6e:60: f4:74:56:e1:1e:0c:0e:ba:dc:f5:85:62:07:50:27: 23:65:42:3b:4f:4e:b0:de:dc:52:3c:ef:34:03:ea: 81:f5:62:cb:aa:51:50:5e:f3:67:9a:8d:5a:83:53: e8:37:18:12:d4:df:ce:7c:d0:5f:35:5d:b8:e6:61: 99:38:8f:99:44:53:3b:e6:0f:49:48:e1:ca:f9:00: 3f:cd:0b:cc:b1:02:bd:0e:4b:0b:5c:9a:14:15:02: 39:eb:c9:ba:4a:22:e8:d1:a1:51:c5:ce:e8:14:b9: 80:52:88:90:b9:1e:75:0d:3b:53:b6:64:7b:4a:4d: 5c:50:01:75:92:29:55:a7:79:d2:52:7f:ad:0e:11: 06:92:c8:ef:93:9f:0a:6a:3e:05:78:9e:0b:06:a3: 6a:40:f6:f8:54:e6:7d:ae:6d:91:91:aa:45:28:fb: d9:1f:02:d8:de:1e:bf:9b:44:5d:e9:38:7c:09:bc: 01:96:b4:ac:cf:58:63:7b:53:ae:c5:61:3d:4a:8b: d1:9a:80:f8:e7:b5:1a:10:1e:08:4f:db:7c:0a:c9: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DD:E4:E3:7C:66:6D:DA:02:32:BC:74:32:38:09:36:F5:84:28:21 X509v3 Authority Key Identifier: keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a8c::/48 Signature Algorithm: sha256WithRSAEncryption 47:8d:be:f8:53:2b:c9:0d:44:e8:9e:bb:ef:0f:79:8e:b3:4b: 4c:08:10:3e:01:b6:12:a6:92:be:be:ca:0e:be:c4:d7:5d:fe: 25:72:76:e2:47:ee:d7:8f:d0:db:14:4c:6c:4f:22:13:03:32: 32:ed:e1:38:ee:7c:e2:e0:0e:d2:a3:c0:ce:6d:62:60:ae:b1: ec:59:22:a1:6f:6f:75:e4:64:1c:24:b5:22:be:30:6e:22:46: 0c:3c:5d:d2:8e:f2:6b:66:29:4f:d3:45:66:18:09:97:8a:f2: e6:ae:61:b0:04:d7:3f:98:55:ba:82:bf:15:d0:2a:65:d3:36: 6e:2e:45:dd:ef:81:52:9a:df:98:29:d1:30:69:c6:79:1d:17: 10:4c:4e:c1:3e:ef:7d:9e:38:5b:18:67:d2:5e:86:8b:21:95: 6c:f7:24:a4:20:d8:9e:12:d6:76:85:47:b9:91:1c:5e:4d:1b: d4:96:3a:d3:38:94:9c:8f:32:f0:3b:c8:b5:e4:e2:03:83:1c: 28:9d:09:79:ed:ec:0b:b6:e4:3d:48:46:08:9f:0b:48:9e:1b: ca:ed:c6:2a:06:76:61:d9:3b:f4:ac:0f:91:53:61:94:5f:26: ca:84:de:b9:c9:d3:4a:d7:0f:56:50:00:65:4f:1d:9e:49:22: 47:7a:14:37 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUAgplVKDMEIiEpw/qMgAwVHwJjywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG NEM4NTBDMTAeFw0yNDA2MjAwNTE4MzRaFw0yNTA2MTkwNTIzMzRaMDMxMTAvBgNV BAMTKDg1RERFNEUzN0M2NjZEREEwMjMyQkM3NDMyMzgwOTM2RjU4NDI4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMXy6T9I9HfuUYoP3WK+QemvS LzP/XxY6nH80LC3XL7aZUOxam4ItQkpuYPR0VuEeDA663PWFYgdQJyNlQjtPTrDe 3FI87zQD6oH1YsuqUVBe82eajVqDU+g3GBLU38580F81XbjmYZk4j5lEUzvmD0lI 4cr5AD/NC8yxAr0OSwtcmhQVAjnrybpKIujRoVHFzugUuYBSiJC5HnUNO1O2ZHtK TVxQAXWSKVWnedJSf60OEQaSyO+TnwpqPgV4ngsGo2pA9vhU5n2ubZGRqkUo+9kf AtjeHr+bRF3pOHwJvAGWtKzPWGN7U67FYT1Ki9GagPjntRoQHghP23wKyc4RAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUhd3k43xmbdoCMrx0MjgJNvWEKCEwHwYDVR0j BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1 NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1 QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgaIGCCsG AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh NC8xLzMyMzAzMDMxM2EzNjM3NjMzYTYxMzg2MzNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwKjDANBgkqhkiG9w0BAQsFAAOCAQEA R42++FMryQ1E6J677w95jrNLTAgQPgG2EqaSvr7KDr7E113+JXJ24kfu14/Q2xRM bE8iEwMyMu3hOO584uAO0qPAzm1iYK6x7FkioW9vdeRkHCS1Ir4wbiJGDDxd0o7y a2YpT9NFZhgJl4ry5q5hsATXP5hVuoK/FdAqZdM2bi5F3e+BUprfmCnRMGnGeR0X EExOwT7vfZ44Wxhn0l6GiyGVbPckpCDYnhLWdoVHuZEcXk0b1JY60ziUnI8y8DvI teTiA4McKJ0Jee3sC7bkPUhGCJ8LSJ4byu3GKgZ2Ydk79KwPkVNhlF8myoTeucnT StcPVlAAZU8dnkkiR3oUNw== -----END CERTIFICATE-----Generated at Thu Jun 20 15:16:34 2024 by rpki-client on console.sobornost.net