$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3tOKlBr3IC_TuxJes_6OBwbNBaU.roa File: 3tOKlBr3IC_TuxJes_6OBwbNBaU.roa (raw, json) Hash identifier: W3YQfKCYo1sQ82JNFw2gXpPi94/KyudUpbuUAa7XVUs= Subject key identifier: DE:D3:8A:94:1A:F7:20:2F:D3:BB:12:5E:B3:FE:8E:07:06:CD:05:A5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F4C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3tOKlBr3IC_TuxJes_6OBwbNBaU.roa Signing time: Fri 01 Sep 2023 08:56:53 +0000 ROA not before: Fri 01 Sep 2023 08:56:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 59.120.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3916 (0xf4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DED38A941AF7202FD3BB125EB3FE8E0706CD05A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:02:4f:9a:d8:0d:26:ab:20:63:c0:fa:6e: 31:41:ed:e8:6c:97:93:83:89:f1:24:26:c0:b3:c6: 44:da:b4:d6:42:32:72:e2:64:7e:db:f5:25:52:d4: 84:1e:ce:1d:1d:32:01:5e:0f:8f:68:fa:7d:5b:32: e6:6d:5b:07:5e:56:50:d8:01:ec:4b:f0:ec:8c:a7: cc:72:54:89:3c:fa:1e:ed:94:4b:31:ab:65:3e:4b: 7f:1b:0d:e4:39:83:66:19:dd:ca:0c:6a:a0:9a:d8: d4:2d:d5:ea:35:44:f8:3e:3e:de:97:2d:79:d3:79: 3b:f2:ff:c8:6b:8c:24:95:cd:22:50:0f:58:b4:f8: df:38:b5:af:72:14:3c:48:4d:56:cb:27:c4:e6:bc: eb:e5:8f:b1:68:42:68:51:01:c9:c3:1c:61:53:34: ef:cd:ed:11:d6:48:c7:ed:cd:69:bd:c4:17:39:7d: cd:14:76:42:6e:c7:ef:f4:18:9f:94:f9:41:76:75: 5a:a1:a9:14:2c:c9:2a:72:10:37:6d:9c:a6:48:6b: d2:d1:f8:c4:9a:e3:8f:96:54:4d:6a:38:d3:b6:2d: 6c:56:59:88:e8:b2:15:a0:54:90:d9:c4:01:e1:4c: 71:49:78:fb:8d:d1:ef:36:89:c3:82:b5:f6:7e:31: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D3:8A:94:1A:F7:20:2F:D3:BB:12:5E:B3:FE:8E:07:06:CD:05:A5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3tOKlBr3IC_TuxJes_6OBwbNBaU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.120.0.0/14 Signature Algorithm: sha256WithRSAEncryption a2:c9:ea:d1:3a:bb:c7:02:c4:ad:a1:e1:38:0f:6f:53:45:2b: 44:ad:67:4f:b0:17:c9:00:4a:a3:37:42:85:83:3f:62:2a:65: 2e:ca:5b:a2:2f:d7:75:d8:8b:76:22:26:c2:a5:39:37:54:3b: e1:fa:7c:1c:3e:99:93:6c:06:a4:d8:b9:62:0f:98:29:c0:ff: 36:8a:9e:c3:35:4c:65:68:32:28:92:87:e3:75:4f:fd:45:c8: 80:41:74:6f:d1:32:e3:48:20:4b:c9:49:e7:89:3d:d5:d1:46: d4:ad:1d:68:9d:bc:39:8c:d6:4e:f3:d7:70:b2:c7:89:2e:f7: 11:34:7a:3c:46:b7:30:60:1d:f1:b8:f3:3b:bb:ab:f9:4a:df: 98:1c:38:4b:d9:14:41:70:e7:f7:f2:c7:fd:15:ed:17:3b:3a: 28:da:e5:6e:26:5e:83:94:36:11:db:c6:8b:bb:53:ed:3f:2f: f9:45:ee:e9:51:ff:76:f3:5c:50:c3:22:54:83:8d:6c:9a:c0: 61:56:c4:eb:35:0f:1a:e2:a2:7d:1c:69:4c:57:72:f2:2a:28: 55:96:d6:c2:97:12:3b:06:87:2e:be:3a:07:b8:ae:50:09:68: 5d:8f:61:45:55:6b:90:c2:43:66:21:11:9d:72:99:96:ea:e1: 2d:aa:b2:59 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFRDM4QTk0MUFGNzIw MkZEM0JCMTI1RUIzRkU4RTA3MDZDRDA1QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzuAJPmtgNJqsgY8D6bjFB7ehsl5ODifEkJsCzxkTatNZCMnLi ZH7b9SVS1IQezh0dMgFeD49o+n1bMuZtWwdeVlDYAexL8OyMp8xyVIk8+h7tlEsx q2U+S38bDeQ5g2YZ3coMaqCa2NQt1eo1RPg+Pt6XLXnTeTvy/8hrjCSVzSJQD1i0 +N84ta9yFDxITVbLJ8TmvOvlj7FoQmhRAcnDHGFTNO/N7RHWSMftzWm9xBc5fc0U dkJux+/0GJ+U+UF2dVqhqRQsySpyEDdtnKZIa9LR+MSa44+WVE1qONO2LWxWWYjo shWgVJDZxAHhTHFJePuN0e82icOCtfZ+MYdZAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU3tOKlBr3IC/TuxJes/6OBwbNBaUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8zdE9LbEJyM0lDX1R1eEplc182 T0J3Yk5CYVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCO3gw DQYJKoZIhvcNAQELBQADggEBAKLJ6tE6u8cCxK2h4TgPb1NFK0StZ0+wF8kASqM3 QoWDP2IqZS7KW6Iv13XYi3YiJsKlOTdUO+H6fBw+mZNsBqTYuWIPmCnA/zaKnsM1 TGVoMiiSh+N1T/1FyIBBdG/RMuNIIEvJSeeJPdXRRtStHWidvDmM1k7z13Cyx4ku 9xE0ejxGtzBgHfG48zu7q/lK35gcOEvZFEFw5/fyx/0V7Rc7Oija5W4mXoOUNhHb xou7U+0/L/lF7ulR/3bzXFDDIlSDjWyawGFWxOs1Dxrion0caUxXcvIqKFWW1sKX EjsGhy6+Oge4rlAJaF2PYUVVa5DCQ2YhEZ1ymZbq4S2qslk= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org