$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/B5jGAeDY1G3yLW7H9SahVvCTx9E.roa File: B5jGAeDY1G3yLW7H9SahVvCTx9E.roa (raw, json) Hash identifier: /vl5+xJtuNV6+7dbyL6pBypxKSuOsLSQF+CJQu+teDU= Subject key identifier: 07:98:C6:01:E0:D8:D4:6D:F2:2D:6E:C7:F5:26:A1:56:F0:93:C7:D1 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F9C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B5jGAeDY1G3yLW7H9SahVvCTx9E.roa Signing time: Fri 01 Sep 2023 08:57:17 +0000 ROA not before: Fri 01 Sep 2023 08:57:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 20940 IP address blocks: 203.74.67.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3996 (0xf9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0798C601E0D8D46DF22D6EC7F526A156F093C7D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:c8:36:de:5f:08:1a:b5:ac:14:d4:6b:ef: 04:f4:91:be:f6:fa:79:39:a6:10:6e:17:f5:25:f0: 1a:46:c2:a1:c5:65:a0:ec:21:37:25:4b:31:60:1b: 5e:99:c2:70:b2:d5:80:10:58:f2:a9:ee:ec:08:35: 3c:b3:a4:57:43:fa:05:9d:09:b7:a7:04:32:39:c5: 17:81:c2:3e:50:07:60:4d:58:2a:48:a0:35:8a:bc: 0b:dd:87:8d:3c:5e:b5:51:68:91:b4:b5:38:e4:d4: 3c:8e:75:0c:7a:35:d7:6c:d8:e9:5d:c2:33:f4:a3: 7b:25:27:e6:7d:a1:ce:30:ca:69:98:33:c9:85:15: 28:43:43:4c:b6:ad:dc:79:cb:f1:89:59:12:14:72: a3:b9:63:8a:73:bd:0a:da:57:c0:b9:d5:f8:e9:29: 56:13:87:06:66:4a:21:d9:77:19:e2:e4:13:82:36: 8c:e5:ef:65:46:64:89:60:8a:f1:f3:7d:d9:5f:4c: 3e:d2:a7:8e:e9:f6:3e:7c:8e:ba:22:76:67:55:0d: e6:81:c3:c3:bc:e0:d2:38:03:3c:57:3c:51:af:d1: 4e:b4:d4:55:d4:e8:4d:54:be:d9:cb:67:82:90:d6: e6:39:39:de:b8:5d:e9:71:7e:f7:2b:39:a0:4d:9d: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:98:C6:01:E0:D8:D4:6D:F2:2D:6E:C7:F5:26:A1:56:F0:93:C7:D1 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B5jGAeDY1G3yLW7H9SahVvCTx9E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.67.0/25 Signature Algorithm: sha256WithRSAEncryption 41:07:09:5b:0e:61:07:e7:9c:ae:6d:c8:3e:48:58:25:d8:c5: ce:fb:5c:9b:10:88:42:2b:a6:94:cd:cc:f8:a0:af:83:e5:59: b7:17:6e:9f:81:85:46:5c:4d:fd:27:e4:26:ef:db:50:23:7a: a0:6f:b0:11:34:c5:c7:b7:10:17:cd:c2:1b:99:91:43:99:d4: 38:31:ad:33:67:aa:0f:26:ef:b6:80:15:a8:bb:7b:9c:ce:0c: ce:a4:d7:6b:4d:ca:5b:84:0a:5c:6d:fb:00:e0:35:a5:e3:55: 33:8c:63:0c:24:d3:72:cd:cd:b5:9d:17:68:73:69:f5:52:27: f0:55:2c:70:12:f2:35:68:f3:47:b3:67:d3:80:cc:7a:c0:95: d5:9b:fe:28:95:86:0b:4f:39:16:8b:4d:98:8b:6f:e4:19:13: 9a:53:11:31:17:1e:ed:3a:35:d0:77:8e:d8:63:1d:85:7b:41: a9:66:27:e0:40:21:aa:ed:a0:ee:3d:ef:b6:c4:af:00:21:37: b6:47:b0:66:41:a2:ef:37:06:4c:1d:8c:15:e0:c2:9e:39:f1: ed:37:b2:8c:38:13:a4:bd:9f:55:d3:bf:95:b0:ef:a3:bd:d6: be:72:f9:62:7a:22:3a:59:91:05:af:f5:2e:ae:94:7e:32:7a: 3c:b4:6a:91 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICD5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA3OThDNjAxRTBEOEQ0 NkRGMjJENkVDN0Y1MjZBMTU2RjA5M0M3RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmIcg23l8IGrWsFNRr7wT0kb72+nk5phBuF/Ul8BpGwqHFZaDs ITclSzFgG16ZwnCy1YAQWPKp7uwINTyzpFdD+gWdCbenBDI5xReBwj5QB2BNWCpI oDWKvAvdh408XrVRaJG0tTjk1DyOdQx6Ndds2OldwjP0o3slJ+Z9oc4wymmYM8mF FShDQ0y2rdx5y/GJWRIUcqO5Y4pzvQraV8C51fjpKVYThwZmSiHZdxni5BOCNozl 72VGZIlgivHzfdlfTD7Sp47p9j58jroidmdVDeaBw8O84NI4AzxXPFGv0U601FXU 6E1UvtnLZ4KQ1uY5Od64XelxfvcrOaBNnTXfAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUB5jGAeDY1G3yLW7H9SahVvCTx9EwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9CNWpHQWVEWTFHM3lMVzdIOVNh aFZ2Q1R4OUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0pD ADANBgkqhkiG9w0BAQsFAAOCAQEAQQcJWw5hB+ecrm3IPkhYJdjFzvtcmxCIQium lM3M+KCvg+VZtxdun4GFRlxN/SfkJu/bUCN6oG+wETTFx7cQF83CG5mRQ5nUODGt M2eqDybvtoAVqLt7nM4MzqTXa03KW4QKXG37AOA1peNVM4xjDCTTcs3NtZ0XaHNp 9VIn8FUscBLyNWjzR7Nn04DMesCV1Zv+KJWGC085FotNmItv5BkTmlMRMRce7To1 0HeO2GMdhXtBqWYn4EAhqu2g7j3vtsSvACE3tkewZkGi7zcGTB2MFeDCnjnx7Tey jDgTpL2fVdO/lbDvo73WvnL5YnoiOlmRBa/1Lq6UfjJ6PLRqkQ== -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org