$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AI0oCeEK87-cDibYR2vwnIdMXj4.roa File: AI0oCeEK87-cDibYR2vwnIdMXj4.roa (raw, json) Hash identifier: OHlBbcAZs7ExL3LQ5miGbu2Oq28L6mWNh3n0rRfmZBo= Subject key identifier: 00:8D:28:09:E1:0A:F3:BF:9C:0E:26:D8:47:6B:F0:9C:87:4C:5E:3E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FD1 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AI0oCeEK87-cDibYR2vwnIdMXj4.roa Signing time: Fri 01 Sep 2023 08:57:31 +0000 ROA not before: Fri 01 Sep 2023 08:57:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 211.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4049 (0xfd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=008D2809E10AF3BF9C0E26D8476BF09C874C5E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:01:ed:b0:72:cc:53:36:b0:1f:17:8c:1a: 0b:18:45:82:0e:9d:43:76:56:02:8b:8b:6f:2e:8d: 4b:76:51:78:5c:d2:b4:79:2f:d1:b9:90:4e:52:28: 72:8e:a9:b5:20:c2:a6:b1:0b:fd:25:e9:98:46:35: 03:ff:f1:d2:7b:36:ba:42:b0:2a:2a:07:7d:16:c2: 50:a3:6d:cc:a5:b8:6d:fc:24:59:5e:55:9b:a4:0f: 25:10:8e:17:0c:ef:cf:81:b9:7d:50:cc:10:87:a0: dd:f9:79:e3:7d:e4:77:f8:e7:de:9e:91:87:3c:c6: b1:fb:f1:0b:fe:e6:f8:31:bb:03:8a:59:b8:14:8f: a4:05:ca:08:a2:08:ea:a4:56:a3:fb:39:9d:8f:4d: 90:27:dd:d9:7b:98:20:97:d7:95:6f:a7:18:64:76: 3a:10:0b:ef:2e:a6:ee:7d:8c:d7:85:e8:08:ca:c0: 87:ba:13:d3:e9:96:00:06:a1:6e:f1:02:d1:c3:6b: 5a:8b:b8:11:16:0c:15:13:af:4f:56:88:a0:02:97: 50:88:2b:0e:1c:a8:eb:08:b3:85:74:1e:2a:8c:72: 0c:da:2c:6d:f2:49:a4:10:34:ef:9a:42:92:2a:9f: 3a:6c:d2:07:a0:50:39:80:9f:0b:46:f1:76:70:db: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:28:09:E1:0A:F3:BF:9C:0E:26:D8:47:6B:F0:9C:87:4C:5E:3E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AI0oCeEK87-cDibYR2vwnIdMXj4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.75.0.0/16 Signature Algorithm: sha256WithRSAEncryption b5:c9:ad:4c:8a:eb:59:33:94:f2:44:61:fe:3a:e2:d9:b4:a4: 94:d1:01:d0:62:46:28:01:45:6a:f7:21:0a:ba:32:b2:9c:dd: ad:7c:49:b4:45:98:5b:c1:9a:d7:57:11:ff:90:a6:6c:74:67: e5:90:98:d6:58:b1:ce:3b:af:1c:da:73:a5:37:31:01:c4:46: a1:22:83:f6:c5:64:af:3b:45:17:c8:94:52:de:17:32:8d:4c: 0e:64:0d:ed:0d:82:43:80:d5:e3:b0:9e:c1:1e:3e:4e:e8:b5: bf:0e:49:ae:ce:52:a3:fc:d6:5e:49:ae:3c:68:ef:e3:8f:20: 40:ce:ba:82:78:33:45:c5:be:8f:c2:9e:9e:f3:e4:db:e6:87: c6:92:af:6f:6b:be:a0:62:21:24:b5:4f:a7:cd:cf:16:9e:fb: fd:40:02:6c:a1:8e:4e:50:74:16:41:31:06:1e:9b:4e:4d:67: e9:2a:4d:64:9d:5d:a9:21:35:44:78:0f:00:a3:2b:d0:6d:7b: cb:29:bd:f8:f5:c4:cd:a7:b3:e0:a1:06:4f:1a:3f:b8:f9:d9: 7e:63:31:70:4f:4d:da:ff:89:e6:2b:42:88:79:16:b8:04:46: 47:a2:38:f5:b1:83:78:4b:38:3d:59:71:9e:1d:e2:79:cf:76: 14:b3:c6:b3 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwOEQyODA5RTEwQUYz QkY5QzBFMjZEODQ3NkJGMDlDODc0QzVFM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC35gHtsHLMUzawHxeMGgsYRYIOnUN2VgKLi28ujUt2UXhc0rR5 L9G5kE5SKHKOqbUgwqaxC/0l6ZhGNQP/8dJ7NrpCsCoqB30WwlCjbcyluG38JFle VZukDyUQjhcM78+BuX1QzBCHoN35eeN95Hf4596ekYc8xrH78Qv+5vgxuwOKWbgU j6QFygiiCOqkVqP7OZ2PTZAn3dl7mCCX15VvpxhkdjoQC+8upu59jNeF6AjKwIe6 E9PplgAGoW7xAtHDa1qLuBEWDBUTr09WiKACl1CIKw4cqOsIs4V0HiqMcgzaLG3y SaQQNO+aQpIqnzps0gegUDmAnwtG8XZw26ETAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUAI0oCeEK87+cDibYR2vwnIdMXj4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BSTBvQ2VFSzg3LWNEaWJZUjJ2 d25JZE1YajQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA00sw DQYJKoZIhvcNAQELBQADggEBALXJrUyK61kzlPJEYf464tm0pJTRAdBiRigBRWr3 IQq6MrKc3a18SbRFmFvBmtdXEf+Qpmx0Z+WQmNZYsc47rxzac6U3MQHERqEig/bF ZK87RRfIlFLeFzKNTA5kDe0NgkOA1eOwnsEePk7otb8OSa7OUqP81l5Jrjxo7+OP IEDOuoJ4M0XFvo/Cnp7z5Nvmh8aSr29rvqBiISS1T6fNzxae+/1AAmyhjk5QdBZB MQYem05NZ+kqTWSdXakhNUR4DwCjK9Bte8spvfj1xM2ns+ChBk8aP7j52X5jMXBP Tdr/ieYrQoh5FrgERkeiOPWxg3hLOD1ZcZ4d4nnPdhSzxrM= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org