$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-pzF1Vqeo2FUJc79hT8xLNeGU9I.roa File: -pzF1Vqeo2FUJc79hT8xLNeGU9I.roa (raw, json) Hash identifier: Oun9dST9i4Kf9pPpggujMjNaDpX/GFlVOKNcRHtML68= Subject key identifier: FA:9C:C5:D5:5A:9E:A3:61:54:25:CE:FD:85:3F:31:2C:D7:86:53:D2 Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Certificate serial: 0C2E Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-pzF1Vqeo2FUJc79hT8xLNeGU9I.roa Signing time: Fri 01 Sep 2023 08:57:14 +0000 ROA not before: Fri 01 Sep 2023 08:57:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131660 IP address blocks: 168.95.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Validity Not Before: Sep 1 08:57:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FA9CC5D55A9EA3615425CEFD853F312CD78653D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:85:90:6d:54:0d:41:d4:b0:49:f1:f1:93: ff:90:b5:64:7c:2f:ab:d2:40:8f:af:84:4e:47:ec: 4e:10:f6:0b:d3:09:e5:68:7d:a0:9b:04:91:50:07: b7:c4:f4:98:24:a8:21:e2:b0:9c:08:a7:6f:d0:fe: 34:fe:49:8c:ef:71:16:24:f2:32:0c:e0:a8:17:15: 4c:92:37:b0:84:03:52:8e:b9:90:9a:59:1b:d2:35: 10:66:07:09:3c:1b:51:61:7f:f4:5f:cd:04:fb:1f: a7:cb:08:c4:cb:0a:d6:93:94:ad:c5:8a:5f:1b:ea: de:72:ee:a2:6c:8f:ba:c8:76:05:af:4c:84:ef:ef: cd:88:00:33:74:a3:bd:0b:f6:d0:db:ed:12:12:7c: 7b:8c:92:e6:b1:31:09:0c:4b:e5:33:4c:fd:8f:68: 90:1f:a9:71:4c:1a:48:89:c0:ba:5e:de:51:be:52: 15:27:ea:e4:e1:41:5a:e4:97:d1:f0:21:a4:29:6b: b7:8f:53:9f:d1:66:78:d3:63:3c:38:a3:97:96:41: 94:11:ca:13:ac:4d:2f:41:8a:ca:94:93:dc:4b:42: 9f:5e:da:52:47:37:1c:41:04:41:cc:78:29:8a:34: 0a:00:07:ce:70:1f:0a:31:cd:e1:cb:04:a2:4c:c9: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:C5:D5:5A:9E:A3:61:54:25:CE:FD:85:3F:31:2C:D7:86:53:D2 X509v3 Authority Key Identifier: keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-pzF1Vqeo2FUJc79hT8xLNeGU9I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 168.95.246.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c7:b6:d5:a4:93:15:e3:60:85:f0:cf:11:24:8b:5f:14:af: ec:1f:36:64:2c:18:9b:d4:e1:ef:c6:81:47:45:c3:4c:e3:e2: ab:b2:47:0f:be:e9:c7:e9:86:15:d2:98:91:77:21:1b:63:65: 79:96:6d:fc:7d:57:f3:1d:b3:1d:83:ef:46:0d:28:38:dd:cc: 88:b0:91:ba:fb:57:0b:6f:23:41:3a:22:81:3a:c5:56:26:e5: 16:d0:98:fa:ae:37:64:66:7f:33:22:6c:a4:e8:3b:49:37:82: c1:8a:0d:9b:79:ec:15:68:9a:70:dd:58:d9:ed:86:b5:f1:58: 64:e3:d0:ad:35:d1:e2:a7:56:66:33:72:02:cb:f1:a0:97:65: 2d:84:12:9f:6c:cd:a9:38:b1:95:3e:e2:bf:87:cf:0f:70:3b: 53:82:dd:c9:73:50:d2:81:cf:c5:50:c2:6d:14:c6:ec:cf:b3: 83:6f:79:15:54:ab:04:b6:cf:48:49:88:76:93:a3:1a:0d:e8: a7:8b:fe:ca:ae:95:7f:04:90:d9:e4:17:d3:32:e3:db:ac:35: bf:e9:ab:bf:df:79:51:71:7a:fe:02:e4:05:b4:47:59:70:a0: 28:59:0c:f2:2c:5e:ec:28:ce:06:2c:02:a3:94:3f:a5:d8:eb: 42:8b:3f:07 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3 NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yMzA5MDEw ODU3MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZBOUNDNUQ1NUE5RUEz NjE1NDI1Q0VGRDg1M0YzMTJDRDc4NjUzRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH6oWQbVQNQdSwSfHxk/+QtWR8L6vSQI+vhE5H7E4Q9gvTCeVo faCbBJFQB7fE9JgkqCHisJwIp2/Q/jT+SYzvcRYk8jIM4KgXFUySN7CEA1KOuZCa WRvSNRBmBwk8G1Fhf/RfzQT7H6fLCMTLCtaTlK3Fil8b6t5y7qJsj7rIdgWvTITv 782IADN0o70L9tDb7RISfHuMkuaxMQkMS+UzTP2PaJAfqXFMGkiJwLpe3lG+UhUn 6uThQVrkl9HwIaQpa7ePU5/RZnjTYzw4o5eWQZQRyhOsTS9BisqUk9xLQp9e2lJH NxxBBEHMeCmKNAoAB85wHwoxzeHLBKJMyVUXAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU+pzF1Vqeo2FUJc79hT8xLNeGU9IwHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8tcHpGMVZxZW8yRlVKYzc5aFQ4 eExOZUdVOUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF/2 MA0GCSqGSIb3DQEBCwUAA4IBAQAkx7bVpJMV42CF8M8RJItfFK/sHzZkLBib1OHv xoFHRcNM4+KrskcPvunH6YYV0piRdyEbY2V5lm38fVfzHbMdg+9GDSg43cyIsJG6 +1cLbyNBOiKBOsVWJuUW0Jj6rjdkZn8zImyk6DtJN4LBig2beewVaJpw3VjZ7Ya1 8Vhk49CtNdHip1ZmM3ICy/Ggl2UthBKfbM2pOLGVPuK/h88PcDtTgt3Jc1DSgc/F UMJtFMbsz7ODb3kVVKsEts9ISYh2k6MaDeini/7KrpV/BJDZ5BfTMuPbrDW/6au/ 33lRcXr+AuQFtEdZcKAoWQzyLF7sKM4GLAKjlD+l2OtCiz8H -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org