$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa File: 1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa (raw, json) Hash identifier: cK48mUzLMhqMIDwBT8BnQuh/6T2A2Qomacvuz3TYP84= Subject key identifier: D5:11:CB:73:D6:37:AD:D5:F9:5A:76:FA:C9:5E:DB:80:4B:9C:3D:4E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F71 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa Signing time: Fri 01 Sep 2023 08:57:05 +0000 ROA not before: Fri 01 Sep 2023 08:57:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 220.128.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3953 (0xf71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D511CB73D637ADD5F95A76FAC95EDB804B9C3D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:aa:35:48:51:1a:4c:87:ea:87:4a:66:d4: 96:f9:f6:d7:f5:32:48:54:4c:0c:c2:4a:96:f0:3b: e8:38:82:d3:bf:a8:d4:8d:4a:03:00:ea:1c:be:9c: 0e:2c:90:e4:49:a9:e4:f3:6c:43:d1:8a:ad:7e:ee: d2:63:d0:f9:0e:71:9a:f0:ce:1d:f3:bf:22:dc:b7: a9:e3:70:42:ea:da:86:c2:5b:eb:49:83:54:ce:ab: 96:0d:79:00:14:df:d2:f8:18:c2:aa:ae:f9:1b:cd: 97:ee:02:57:79:b0:63:e9:1a:f1:b2:d7:fd:89:52: 08:f7:30:4c:ff:84:71:08:0d:29:34:c0:cd:a1:c5: 5e:10:05:b9:32:97:da:42:cf:3c:92:75:d5:ef:27: 17:74:1e:98:0d:a9:51:75:b2:44:18:e7:11:28:94: 44:ee:72:84:0e:51:cc:7e:b1:63:0e:6e:59:8c:ea: 55:e1:95:93:de:d3:13:41:b6:6c:74:7e:30:ee:a6: 18:0b:ab:2c:1f:81:4f:b3:cf:60:a5:8d:9e:27:43: b0:86:26:8a:53:2d:bf:4c:01:47:c7:fc:46:57:f0: 47:aa:f7:d1:3e:1e:af:9e:a7:5f:04:b7:31:e6:c1: 61:4e:84:46:be:71:c3:32:7b:de:d6:20:2a:24:73: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:11:CB:73:D6:37:AD:D5:F9:5A:76:FA:C9:5E:DB:80:4B:9C:3D:4E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.67.0/24 Signature Algorithm: sha256WithRSAEncryption 41:fe:37:3e:8b:a4:3b:cd:b6:25:cd:8b:cd:1f:1e:43:29:1b: 52:4f:6f:03:30:ec:e9:70:5f:b0:e8:8a:4f:ec:ff:85:78:66: 40:2a:47:ad:e6:ec:a7:79:57:af:06:4b:f9:dd:ef:89:1d:e9: 72:62:a0:5e:a1:04:52:3c:89:81:6d:05:1e:f5:29:c2:47:80: 68:c2:c9:1e:47:0a:0a:3b:f0:4a:78:92:89:d5:b7:22:f4:25: 66:d3:4e:65:84:48:d6:39:db:45:9d:3e:4a:41:50:35:8f:b2: 0a:74:84:03:68:cd:91:54:d5:0b:f5:4f:71:7a:42:cc:a4:2c: af:4f:ad:57:e4:56:39:67:62:38:4c:79:9e:ba:fc:66:21:f2: 06:c6:52:32:6e:15:80:c6:5d:77:24:00:f7:1e:a9:ef:27:6e: 08:8b:f8:c4:11:56:fb:1f:ff:55:e8:ba:c4:23:1d:2f:bf:5d: 4f:3c:31:c5:6e:62:8b:bd:9b:39:83:6c:e4:8d:de:89:56:5a: 51:70:53:35:70:f9:92:17:73:73:8c:f3:d5:68:fb:ce:c1:01: 22:1e:cf:e4:ff:39:8a:36:00:63:5e:43:47:fd:77:a2:62:9e: 27:e3:3a:3a:a0:b0:6e:75:63:4c:12:4c:cf:a9:8b:30:71:b3: a3:5c:9d:82 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ1MTFDQjczRDYzN0FE RDVGOTVBNzZGQUM5NUVEQjgwNEI5QzNENEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLF6o1SFEaTIfqh0pm1Jb59tf1MkhUTAzCSpbwO+g4gtO/qNSN SgMA6hy+nA4skORJqeTzbEPRiq1+7tJj0PkOcZrwzh3zvyLct6njcELq2obCW+tJ g1TOq5YNeQAU39L4GMKqrvkbzZfuAld5sGPpGvGy1/2JUgj3MEz/hHEIDSk0wM2h xV4QBbkyl9pCzzySddXvJxd0HpgNqVF1skQY5xEolETucoQOUcx+sWMOblmM6lXh lZPe0xNBtmx0fjDuphgLqywfgU+zz2CljZ4nQ7CGJopTLb9MAUfH/EZX8Eeq99E+ Hq+ep18EtzHmwWFOhEa+ccMye97WICokc0rBAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU1RHLc9Y3rdX5Wnb6yV7bgEucPU4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8xUkhMYzlZM3JkWDVXbmI2eVY3 YmdFdWNQVTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBD MA0GCSqGSIb3DQEBCwUAA4IBAQBB/jc+i6Q7zbYlzYvNHx5DKRtST28DMOzpcF+w 6IpP7P+FeGZAKket5uyneVevBkv53e+JHelyYqBeoQRSPImBbQUe9SnCR4Bowske RwoKO/BKeJKJ1bci9CVm005lhEjWOdtFnT5KQVA1j7IKdIQDaM2RVNUL9U9xekLM pCyvT61X5FY5Z2I4THmeuvxmIfIGxlIybhWAxl13JAD3HqnvJ24Ii/jEEVb7H/9V 6LrEIx0vv11PPDHFbmKLvZs5g2zkjd6JVlpRcFM1cPmSF3NzjPPVaPvOwQEiHs/k /zmKNgBjXkNH/XeiYp4n4zo6oLBudWNMEkzPqYswcbOjXJ2C -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org