$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa File: 9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa (raw, json) Hash identifier: FeXQkJGBYbhJ7nHREprhdc07jNY03dxOyCUql7s1a9Y= Subject key identifier: F4:15:51:B0:B8:5C:52:D4:9F:78:46:4E:8D:6D:BE:9C:03:CD:A6:E1 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F92 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa Signing time: Fri 01 Sep 2023 08:57:14 +0000 ROA not before: Fri 01 Sep 2023 08:57:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 20940 IP address blocks: 203.74.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F41551B0B85C52D49F78464E8D6DBE9C03CDA6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:29:da:c4:68:33:78:1e:de:69:3a:57:e5: 6e:6a:8a:3c:4a:46:a5:d9:b2:1a:94:5b:46:24:8c: 3f:81:c0:10:d1:e8:5d:da:0d:2a:fa:4e:51:9a:91: 8b:10:91:02:68:08:4f:fa:4e:86:dd:57:c8:e9:0e: 96:cc:8d:83:d9:be:8d:d9:d5:a4:fc:00:b0:03:c7: c4:2d:cd:85:1e:1a:35:aa:3d:17:19:10:eb:ae:b7: f3:e9:34:ce:a3:18:bc:86:ad:76:c8:98:5c:e0:c8: ec:5b:59:45:1c:24:b2:1a:12:be:39:26:d7:96:78: 0c:9b:0d:d7:eb:7c:85:98:91:01:f4:d2:8b:b0:96: ae:2b:81:ae:ce:b2:ae:9a:57:9a:2c:8f:44:6e:25: aa:a3:2a:73:64:ea:ea:da:61:b1:1c:59:57:76:0e: c1:98:0c:d7:41:51:2f:01:fc:97:8f:5e:f5:75:f5: 73:18:39:16:07:d8:64:57:79:66:ac:05:75:8a:6f: 21:d5:a3:81:3d:40:3a:ee:97:cd:92:e8:6b:c5:e5: ba:d1:43:72:7e:49:41:30:fe:34:7c:6c:a6:e4:f6: 18:c1:ea:dc:f1:65:80:ad:84:d9:db:b4:3c:a5:ef: c9:75:9b:b0:b5:28:c7:5b:aa:9e:0f:0f:66:29:99: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:15:51:B0:B8:5C:52:D4:9F:78:46:4E:8D:6D:BE:9C:03:CD:A6:E1 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.95.0/24 Signature Algorithm: sha256WithRSAEncryption a0:5b:3e:33:0f:b4:0f:0b:5e:c8:4b:3f:35:3d:c5:6e:31:93: 18:ec:cf:8f:b6:c3:9a:04:8c:e5:95:67:ce:1c:e3:34:84:14: 31:ec:1f:92:e4:e0:c1:9d:d7:80:0c:5c:a6:a9:20:96:f7:59: f3:1e:8f:14:1f:5a:21:1e:84:5e:d3:66:b2:b1:77:ea:83:d5: 33:5a:84:37:ed:95:1e:5d:6f:03:34:a8:98:fd:68:56:71:ef: f5:f1:d4:99:65:43:5b:28:c5:d8:88:64:79:28:72:2e:57:c2: 9a:bb:11:34:55:ea:8c:7f:1d:11:5d:cb:b7:38:aa:2e:78:f1: 19:9e:ff:a2:dd:bc:21:ad:e7:35:0f:a2:ee:13:ee:1f:f8:30: e2:6e:7b:a2:ce:cf:83:49:3a:55:c4:a5:a7:5e:7e:55:a4:bb: c1:63:73:7a:72:93:d8:5e:64:d2:7f:f8:06:5a:ee:82:96:1e: 13:2b:41:dd:f0:a3:10:81:a7:56:c2:82:bd:5b:d8:91:aa:2f: ee:75:28:72:75:42:96:03:cc:35:93:6f:47:d6:18:ea:70:47: 08:8e:54:d7:d7:72:33:5a:7e:a7:be:ee:7b:4b:c0:5e:2c:b2: c4:09:56:af:bb:5a:3b:19:d4:5a:f1:11:03:f3:29:8f:6c:c0: 49:c0:51:ae -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY0MTU1MUIwQjg1QzUy RDQ5Rjc4NDY0RThENkRCRTlDMDNDREE2RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXcSnaxGgzeB7eaTpX5W5qijxKRqXZshqUW0YkjD+BwBDR6F3a DSr6TlGakYsQkQJoCE/6TobdV8jpDpbMjYPZvo3Z1aT8ALADx8QtzYUeGjWqPRcZ EOuut/PpNM6jGLyGrXbImFzgyOxbWUUcJLIaEr45JteWeAybDdfrfIWYkQH00ouw lq4rga7Osq6aV5osj0RuJaqjKnNk6uraYbEcWVd2DsGYDNdBUS8B/JePXvV19XMY ORYH2GRXeWasBXWKbyHVo4E9QDrul82S6GvF5brRQ3J+SUEw/jR8bKbk9hjB6tzx ZYCthNnbtDyl78l1m7C1KMdbqp4PD2YpmTr7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU9BVRsLhcUtSfeEZOjW2+nAPNpuEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC85QlZSc0xoY1V0U2ZlRVpPalcy LW5BUE5wdUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0pf MA0GCSqGSIb3DQEBCwUAA4IBAQCgWz4zD7QPC17ISz81PcVuMZMY7M+PtsOaBIzl lWfOHOM0hBQx7B+S5ODBndeADFymqSCW91nzHo8UH1ohHoRe02aysXfqg9UzWoQ3 7ZUeXW8DNKiY/WhWce/18dSZZUNbKMXYiGR5KHIuV8KauxE0VeqMfx0RXcu3OKou ePEZnv+i3bwhrec1D6LuE+4f+DDibnuizs+DSTpVxKWnXn5VpLvBY3N6cpPYXmTS f/gGWu6Clh4TK0Hd8KMQgadWwoK9W9iRqi/udShydUKWA8w1k29H1hjqcEcIjlTX 13IzWn6nvu57S8BeLLLECVavu1o7GdRa8RED8ymPbMBJwFGu -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:21 2024 by rpki-client on console-fra.rpki-client.org