$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6xGszIfaEvyefo4pJ1vVmpD7RAU.roa File: 6xGszIfaEvyefo4pJ1vVmpD7RAU.roa (raw, json) Hash identifier: RdqBgfrUlHUShTaZoDeZI0JsBnTrMnT1BgyYcp3UJ8I= Subject key identifier: EB:11:AC:CC:87:DA:12:FC:9E:7E:8E:29:27:5B:D5:9A:90:FB:44:05 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F9E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6xGszIfaEvyefo4pJ1vVmpD7RAU.roa Signing time: Fri 01 Sep 2023 08:57:18 +0000 ROA not before: Fri 01 Sep 2023 08:57:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 220.128.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3998 (0xf9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EB11ACCC87DA12FC9E7E8E29275BD59A90FB4405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:80:c7:09:d0:0e:43:af:41:19:c0:ab:14: ac:d1:2e:90:14:5b:61:dd:0d:29:9f:5d:22:ad:86: 51:b3:ac:9f:76:91:40:17:4e:3f:0a:f5:68:8d:a1: 97:1a:a6:01:26:43:be:f5:a4:24:04:33:e9:ca:2e: ee:0f:dd:34:f3:9d:2d:cc:ab:cc:f5:2d:6d:3d:b6: b4:8d:f1:16:36:2e:81:35:3a:a6:2f:ea:80:a3:4b: a7:fa:dc:73:7c:96:8c:6a:1c:39:3c:0c:8a:d8:6b: 54:d2:be:aa:e4:3f:c4:57:cb:30:a7:a8:61:4d:0c: d3:79:10:f0:f6:17:3c:82:b8:e6:f0:12:f6:0d:4c: d8:af:2c:01:13:5c:5d:9b:41:c2:64:ad:6c:0e:20: a8:2a:bb:b4:42:ca:19:e2:07:43:73:bf:3d:be:16: b6:fc:6b:97:d4:f1:5d:4a:e4:35:59:09:98:84:0c: 3b:00:ee:d5:20:79:74:18:d4:b0:1e:ec:d6:e4:e5: f8:ee:aa:a2:e9:17:80:14:73:3f:e4:7a:ef:1d:67: d6:56:8a:72:c2:59:62:51:63:c3:65:26:9f:a6:32: 96:c9:1a:c8:32:4d:c5:33:9e:4a:3d:0d:55:9a:e8: 26:b0:00:13:7d:69:8e:48:cc:24:be:6c:1a:ea:5d: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:11:AC:CC:87:DA:12:FC:9E:7E:8E:29:27:5B:D5:9A:90:FB:44:05 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6xGszIfaEvyefo4pJ1vVmpD7RAU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.80.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:fd:7c:e3:29:c0:8e:ec:63:e1:12:9a:35:aa:41:19:73:fb: 7c:69:7f:5e:ee:1c:f6:a5:d7:f9:bd:83:27:a4:ab:97:fc:68: 63:4c:a8:35:22:7b:2e:44:a5:a3:14:09:bd:b7:62:62:27:af: 67:1c:fa:92:03:2c:5b:ea:40:d8:5f:b6:33:94:a3:27:e5:02: f1:91:83:c9:be:a6:c4:32:a5:f9:bc:9e:fa:ba:eb:de:85:c5: 6c:fb:c7:5b:e1:f1:a0:3a:cb:9c:4f:86:eb:f7:98:33:cd:0c: 77:72:32:80:66:ca:33:23:79:84:6a:9f:58:90:41:8a:cc:62: d0:90:12:b4:55:4f:c0:9f:ef:13:5c:6d:b2:a8:88:b1:b8:e7: 82:64:39:ad:ce:8c:7b:6a:e6:9e:d2:7a:c9:d3:ca:a9:13:62: cf:0b:c4:79:02:f6:db:94:76:d9:98:25:e3:bc:cb:c9:bd:2e: 13:1f:62:89:82:4c:4c:96:97:57:a6:b3:53:dd:37:8e:c7:7f: 81:4b:de:4e:8f:af:62:04:24:1e:aa:b3:ec:e7:a2:31:58:6b: f6:0b:ee:a6:0b:f4:1d:44:78:17:6a:b9:9a:1b:a6:e6:6d:3f: e9:99:d1:f0:0a:3b:84:b0:52:dd:3a:98:b6:2b:bb:56:ab:a7: 10:a6:57:b0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCMTFBQ0NDODdEQTEy RkM5RTdFOEUyOTI3NUJENTlBOTBGQjQ0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8EoDHCdAOQ69BGcCrFKzRLpAUW2HdDSmfXSKthlGzrJ92kUAX Tj8K9WiNoZcapgEmQ771pCQEM+nKLu4P3TTznS3Mq8z1LW09trSN8RY2LoE1OqYv 6oCjS6f63HN8loxqHDk8DIrYa1TSvqrkP8RXyzCnqGFNDNN5EPD2FzyCuObwEvYN TNivLAETXF2bQcJkrWwOIKgqu7RCyhniB0Nzvz2+Frb8a5fU8V1K5DVZCZiEDDsA 7tUgeXQY1LAe7Nbk5fjuqqLpF4AUcz/keu8dZ9ZWinLCWWJRY8NlJp+mMpbJGsgy TcUznko9DVWa6CawABN9aY5IzCS+bBrqXWETAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU6xGszIfaEvyefo4pJ1vVmpD7RAUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC82eEdzeklmYUV2eWVmbzRwSjF2 Vm1wRDdSQVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBQ MA0GCSqGSIb3DQEBCwUAA4IBAQBr/XzjKcCO7GPhEpo1qkEZc/t8aX9e7hz2pdf5 vYMnpKuX/GhjTKg1InsuRKWjFAm9t2JiJ69nHPqSAyxb6kDYX7YzlKMn5QLxkYPJ vqbEMqX5vJ76uuvehcVs+8db4fGgOsucT4br95gzzQx3cjKAZsozI3mEap9YkEGK zGLQkBK0VU/An+8TXG2yqIixuOeCZDmtzox7auae0nrJ08qpE2LPC8R5AvbblHbZ mCXjvMvJvS4TH2KJgkxMlpdXprNT3TeOx3+BS95Oj69iBCQeqrPs56IxWGv2C+6m C/QdRHgXarmaG6bmbT/pmdHwCjuEsFLdOpi2K7tWq6cQplew -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org