$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/78pXuE01AB8Jp4DlIdzD0ZShSAA.roa File: 78pXuE01AB8Jp4DlIdzD0ZShSAA.roa (raw, json) Hash identifier: /QQt+5xUIWc/IO1c0c8+F6xObcTMrpvuMBmQBQpBt/A= Subject key identifier: EF:CA:57:B8:4D:35:00:1F:09:A7:80:E5:21:DC:C3:D1:94:A1:48:00 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F5E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/78pXuE01AB8Jp4DlIdzD0ZShSAA.roa Signing time: Fri 01 Sep 2023 08:56:59 +0000 ROA not before: Fri 01 Sep 2023 08:56:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 220.128.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3934 (0xf5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EFCA57B84D35001F09A780E521DCC3D194A14800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:77:f3:92:b2:0d:47:5d:05:94:0d:c8:49: 2e:27:25:ff:20:8a:5f:e5:97:20:64:af:11:d9:c5: 57:db:91:a8:bb:b8:46:64:21:d1:b9:e5:7b:51:e6: 92:2e:88:ce:61:01:63:5e:e8:61:95:75:55:3a:ae: 8c:8b:b2:a9:0d:94:fb:76:65:d4:34:7c:ed:95:61: 8f:99:fa:12:2d:29:29:30:d6:89:4f:63:5d:44:dc: de:de:8f:db:c5:58:e9:e6:48:f2:41:18:09:e6:fd: 71:cc:5f:28:b7:4c:0a:10:92:80:72:f8:21:8d:90: f8:27:71:60:28:84:6d:bf:fa:50:b5:6e:38:89:07: 1f:9f:6e:08:12:90:81:c8:3d:f9:0c:f7:0b:c9:aa: e9:12:5c:e1:0a:ff:75:83:af:a6:40:71:f4:d8:d8: 11:1d:22:b7:2d:4f:75:c1:c0:ec:3e:5a:c1:80:b8: 38:c0:d1:f0:e2:ff:c6:5a:3c:b7:87:ac:68:ba:7e: 6a:c8:40:8b:83:90:0f:45:9f:d8:c0:c5:b8:25:d0: cb:f5:1d:cd:c9:1d:83:a5:2b:f1:b6:64:87:7c:e5: 7d:7f:81:ef:5b:c5:87:7f:9d:db:6c:fc:48:97:73: ee:9f:fc:47:68:f1:d8:39:b0:41:90:1a:6f:8b:16: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:57:B8:4D:35:00:1F:09:A7:80:E5:21:DC:C3:D1:94:A1:48:00 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/78pXuE01AB8Jp4DlIdzD0ZShSAA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e0:a0:af:8a:82:8b:33:2f:d7:56:e3:61:7f:98:31:f6:15: e5:4b:84:b3:51:66:5d:bb:ec:ff:85:61:c4:c9:00:07:62:7f: 00:ae:bf:6a:81:62:a2:54:7c:54:72:a9:e2:f1:4f:47:b1:d1: 80:9b:d9:9d:e7:86:6f:0a:6a:5c:b1:ba:db:bc:c9:1a:d7:d1: 6f:ff:67:df:a1:b5:0e:ca:5a:46:87:37:08:b0:78:4d:e8:4b: 0d:df:a2:ae:d5:17:01:42:ed:d6:bf:a4:77:d6:aa:d8:c6:3b: d8:23:48:48:6e:67:ea:06:94:22:56:c6:9c:1a:07:cc:64:85: e1:32:57:d1:fe:44:37:04:46:41:18:af:b1:24:95:cc:72:59: 4a:14:57:cd:45:db:9e:4c:4d:05:54:2a:fb:a2:27:8d:52:36: 85:3f:c8:b1:c1:39:6e:6f:5e:cd:03:74:8e:2c:84:e3:32:ef: b1:ca:b2:4c:15:9e:97:f1:fa:44:44:73:41:f4:d7:3c:b9:41: 20:82:01:a3:b9:f7:5d:8f:d8:fd:79:a1:12:ac:0b:ff:57:02: 6e:d6:f8:44:5a:82:32:82:4c:ac:02:70:94:67:5d:fc:b4:cc: 77:f1:72:a2:4c:e7:83:7e:bb:df:9c:66:42:a2:db:d0:36:41: 0b:42:18:fe -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVGQ0E1N0I4NEQzNTAw MUYwOUE3ODBFNTIxRENDM0QxOTRBMTQ4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo9XfzkrINR10FlA3ISS4nJf8gil/llyBkrxHZxVfbkai7uEZk IdG55XtR5pIuiM5hAWNe6GGVdVU6royLsqkNlPt2ZdQ0fO2VYY+Z+hItKSkw1olP Y11E3N7ej9vFWOnmSPJBGAnm/XHMXyi3TAoQkoBy+CGNkPgncWAohG2/+lC1bjiJ Bx+fbggSkIHIPfkM9wvJqukSXOEK/3WDr6ZAcfTY2BEdIrctT3XBwOw+WsGAuDjA 0fDi/8ZaPLeHrGi6fmrIQIuDkA9Fn9jAxbgl0Mv1Hc3JHYOlK/G2ZId85X1/ge9b xYd/ndts/EiXc+6f/Edo8dg5sEGQGm+LFtdvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU78pXuE01AB8Jp4DlIdzD0ZShSAAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC83OHBYdUUwMUFCOEpwNERsSWR6 RDBaU2hTQUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBI MA0GCSqGSIb3DQEBCwUAA4IBAQAt4KCvioKLMy/XVuNhf5gx9hXlS4SzUWZdu+z/ hWHEyQAHYn8Arr9qgWKiVHxUcqni8U9HsdGAm9md54ZvCmpcsbrbvMka19Fv/2ff obUOylpGhzcIsHhN6EsN36Ku1RcBQu3Wv6R31qrYxjvYI0hIbmfqBpQiVsacGgfM ZIXhMlfR/kQ3BEZBGK+xJJXMcllKFFfNRdueTE0FVCr7oieNUjaFP8ixwTlub17N A3SOLITjMu+xyrJMFZ6X8fpERHNB9Nc8uUEgggGjufddj9j9eaESrAv/VwJu1vhE WoIygkysAnCUZ138tMx38XKiTOeDfrvfnGZCotvQNkELQhj+ -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org