$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa File: 7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa (raw, json) Hash identifier: 6QIEfRxOa72oRtWQaPPmMOImlgn1NKGEiA5GmGlJho0= Subject key identifier: EF:FA:1C:E7:0B:FF:5A:01:CD:9E:9F:A6:98:E8:97:D4:D6:2C:F4:59 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FAC Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa Signing time: Fri 01 Sep 2023 08:57:22 +0000 ROA not before: Fri 01 Sep 2023 08:57:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131661 IP address blocks: 210.62.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4012 (0xfac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EFFA1CE70BFF5A01CD9E9FA698E897D4D62CF459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:52:9a:ad:79:82:9b:f2:1f:61:10:de:ca: 8d:ea:e6:e2:34:26:9c:1b:a6:97:30:f8:11:24:e9: 82:06:f6:1f:34:3f:c7:4f:31:b8:5f:53:1f:5c:3a: bd:ac:52:b8:73:04:7c:f7:63:31:f0:c3:7a:b7:62: 30:bf:95:d9:be:97:ea:26:09:b6:7a:6a:b8:d3:ec: f6:e1:cc:91:86:5b:0d:42:45:9f:04:6c:0f:61:90: da:38:16:47:33:73:13:89:8e:e2:87:e8:16:7d:e6: 3f:6a:ae:d2:5a:6f:43:25:6e:e7:9b:54:68:a3:71: f6:50:2c:52:67:3f:da:c2:38:62:59:72:f8:6f:54: 5f:73:7a:33:dd:7e:df:9a:ab:bf:11:4c:5a:a7:e4: db:2f:09:9a:dc:a9:d0:6e:a5:75:7d:d1:b1:05:e2: e6:e6:bd:20:e4:c8:07:68:8c:a1:62:c3:47:05:ef: 79:6a:f2:d0:cb:d4:65:d2:73:55:3f:02:37:d3:54: c0:47:e0:50:d1:74:f5:93:6b:80:be:f0:dd:ae:cc: bc:b6:d8:68:9c:82:ef:19:08:ff:55:6a:8d:f4:31: d7:2b:de:01:a6:fb:7b:84:b9:5d:1a:7e:14:34:1a: 38:c9:af:f7:23:ad:de:bd:a6:03:20:76:27:ba:f6: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FA:1C:E7:0B:FF:5A:01:CD:9E:9F:A6:98:E8:97:D4:D6:2C:F4:59 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7_oc5wv_WgHNnp-mmOiX1NYs9Fk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.250.0/24 Signature Algorithm: sha256WithRSAEncryption a1:18:0c:b2:5c:16:23:35:e3:f5:99:95:48:01:f7:54:2c:4f: 71:3f:33:15:8d:2f:ee:02:b9:03:cd:56:4d:95:a6:c7:10:22: c5:7c:31:1d:50:d1:ab:b5:53:96:42:3d:25:74:03:57:ec:79: b5:e3:80:6f:c1:9a:63:50:aa:54:4f:85:90:5d:18:46:f5:1a: 5a:ec:16:1c:13:00:59:48:89:fa:c1:9a:20:86:19:00:d0:61: 29:cd:88:ba:db:a3:c3:f2:af:57:d1:23:cc:dd:26:52:00:44: c6:1b:f6:46:7b:66:46:84:d6:df:e1:48:27:e3:d0:9e:cc:03: 46:a1:90:ea:20:21:99:b6:b6:c3:ff:8d:b4:68:96:a6:d8:ea: 32:11:1e:1f:dc:d2:c2:e0:ff:b7:b7:b4:3c:09:1c:ff:85:15: d3:9d:32:68:04:3e:ed:83:3c:ca:d6:70:c2:ed:52:d5:84:89: 7b:ff:82:77:97:27:ae:b9:70:9c:9a:e3:48:e0:f2:7a:11:4d: 8f:a8:d9:05:6f:36:5a:77:9a:84:a6:6f:3a:1f:9b:1e:83:64: ac:54:53:e1:2c:f0:d4:68:f8:6a:38:97:75:a4:27:d8:a7:a3: 79:05:12:64:1b:63:ab:56:5d:16:5d:99:94:34:f7:86:cd:81: 9a:b8:ae:f8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVGRkExQ0U3MEJGRjVB MDFDRDlFOUZBNjk4RTg5N0Q0RDYyQ0Y0NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbs1KarXmCm/IfYRDeyo3q5uI0Jpwbppcw+BEk6YIG9h80P8dP MbhfUx9cOr2sUrhzBHz3YzHww3q3YjC/ldm+l+omCbZ6arjT7PbhzJGGWw1CRZ8E bA9hkNo4FkczcxOJjuKH6BZ95j9qrtJab0MlbuebVGijcfZQLFJnP9rCOGJZcvhv VF9zejPdft+aq78RTFqn5NsvCZrcqdBupXV90bEF4ubmvSDkyAdojKFiw0cF73lq 8tDL1GXSc1U/AjfTVMBH4FDRdPWTa4C+8N2uzLy22Gicgu8ZCP9Vao30Mdcr3gGm +3uEuV0afhQ0GjjJr/cjrd69pgMgdie69liJAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU7/oc5wv/WgHNnp+mmOiX1NYs9FkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC83X29jNXd2X1dnSE5ucC1tbU9p WDFOWXM5Rmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j76 MA0GCSqGSIb3DQEBCwUAA4IBAQChGAyyXBYjNeP1mZVIAfdULE9xPzMVjS/uArkD zVZNlabHECLFfDEdUNGrtVOWQj0ldANX7Hm144BvwZpjUKpUT4WQXRhG9Rpa7BYc EwBZSIn6wZoghhkA0GEpzYi626PD8q9X0SPM3SZSAETGG/ZGe2ZGhNbf4Ugn49Ce zANGoZDqICGZtrbD/420aJam2OoyER4f3NLC4P+3t7Q8CRz/hRXTnTJoBD7tgzzK 1nDC7VLVhIl7/4J3lyeuuXCcmuNI4PJ6EU2PqNkFbzZad5qEpm86H5seg2SsVFPh LPDUaPhqOJd1pCfYp6N5BRJkG2OrVl0WXZmUNPeGzYGauK74 -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org