$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/BDpTJbs-EnhTFz5fnlREboBeB7I.roa File: BDpTJbs-EnhTFz5fnlREboBeB7I.roa (raw, json) Hash identifier: HGHEh0iGjI4DMeNoK7+CZhpLELSoUBeadRrw204HZUo= Subject key identifier: 04:3A:53:25:BB:3E:12:78:53:17:3E:5F:9E:54:44:6E:80:5E:07:B2 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FA8 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BDpTJbs-EnhTFz5fnlREboBeB7I.roa Signing time: Fri 01 Sep 2023 08:57:21 +0000 ROA not before: Fri 01 Sep 2023 08:57:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 122.120.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=043A5325BB3E127853173E5F9E54446E805E07B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:72:b8:b3:fe:72:c2:3f:cd:71:d8:a5:c1: c5:33:29:7f:ba:9e:c0:f5:96:77:fb:02:d5:99:10: 38:e3:9f:6e:77:13:89:f1:a3:9b:97:37:6f:c3:6c: 93:0e:ae:6f:73:a7:2a:e4:60:a0:1c:f9:6a:29:f8: 69:9c:3d:e1:b3:7e:9e:9b:6a:b5:3f:eb:95:87:3c: 64:e7:47:77:86:ea:95:fb:32:a6:e4:d1:70:c0:81: ee:56:be:ef:5d:34:84:8c:3f:94:89:0f:aa:86:40: bd:99:ca:05:6a:9c:09:f2:31:04:11:05:82:b5:09: 36:43:fb:6d:56:50:c5:bc:4e:1e:41:84:86:b7:ba: 47:39:bf:b6:b2:a1:37:d5:00:1a:c6:19:e5:87:95: 61:b0:73:59:08:f4:1c:ac:c7:32:8f:e5:b2:8b:76: 2f:1a:d0:83:2a:1b:b2:22:86:f7:27:2a:0c:f3:32: a7:41:be:1b:9d:a4:f9:cd:da:c9:dc:33:7b:2d:3c: 6a:fc:75:a9:da:d7:20:5d:b1:2c:11:34:a6:c8:3c: ce:d0:4b:81:18:0e:e8:73:64:6b:aa:48:f2:61:0e: 25:29:08:78:22:92:0e:e8:d2:99:5e:4b:0f:d5:80: 28:d8:64:b6:19:4e:d2:12:93:cc:19:19:09:a7:b5: 21:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3A:53:25:BB:3E:12:78:53:17:3E:5F:9E:54:44:6E:80:5E:07:B2 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BDpTJbs-EnhTFz5fnlREboBeB7I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.120.0.0/13 Signature Algorithm: sha256WithRSAEncryption 9b:bc:62:6a:03:2d:12:77:75:c6:4a:6a:ac:aa:b5:20:31:ba: 2c:50:76:2f:48:c1:e1:54:26:9f:fa:f7:72:3b:59:de:16:55: f5:f0:83:68:a0:79:f5:d4:62:7c:9b:d0:7c:38:fc:5a:5e:58: f0:a1:9c:ca:35:75:be:8f:b3:8d:c4:b0:97:fe:04:3c:20:2c: 8a:b5:96:95:a8:2b:ee:0a:67:e8:53:c3:c8:88:2f:20:df:9b: a6:0c:e0:41:ae:8f:4d:4a:1f:a8:6c:7c:41:9a:d7:4e:10:48: a5:51:d6:eb:dd:56:ff:0f:a9:91:96:1c:87:a4:04:29:50:be: d7:a7:29:0b:70:63:c3:9b:32:eb:b1:2b:75:1d:58:54:a2:57: 2e:d3:f8:96:e0:6d:bd:17:d3:24:b4:a9:0e:dd:30:b4:1b:e1: ff:29:02:1e:ea:c8:21:a4:08:0e:47:fc:f3:d8:90:17:75:39: 75:16:df:e1:7f:76:0c:bf:c9:84:e5:a0:77:f5:fa:d4:2b:54: d1:07:2d:8f:7a:b0:fb:44:90:14:8c:33:91:a3:0e:81:f3:7c: aa:e7:56:a0:9b:b9:78:6b:b2:a7:b6:82:12:1e:2f:06:f8:4a: 6a:0c:6e:6c:6f:cb:17:fc:7c:6f:7b:48:be:c6:92:0f:20:ff: ff:74:b4:68 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA0M0E1MzI1QkIzRTEy Nzg1MzE3M0U1RjlFNTQ0NDZFODA1RTA3QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9JXK4s/5ywj/NcdilwcUzKX+6nsD1lnf7AtWZEDjjn253E4nx o5uXN2/DbJMOrm9zpyrkYKAc+Wop+GmcPeGzfp6barU/65WHPGTnR3eG6pX7Mqbk 0XDAge5Wvu9dNISMP5SJD6qGQL2ZygVqnAnyMQQRBYK1CTZD+21WUMW8Th5BhIa3 ukc5v7ayoTfVABrGGeWHlWGwc1kI9BysxzKP5bKLdi8a0IMqG7IihvcnKgzzMqdB vhudpPnN2sncM3stPGr8dana1yBdsSwRNKbIPM7QS4EYDuhzZGuqSPJhDiUpCHgi kg7o0pleSw/VgCjYZLYZTtISk8wZGQmntSEfAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUBDpTJbs+EnhTFz5fnlREboBeB7IwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9CRHBUSmJzLUVuaFRGejVmbmxS RWJvQmVCN0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDengw DQYJKoZIhvcNAQELBQADggEBAJu8YmoDLRJ3dcZKaqyqtSAxuixQdi9IweFUJp/6 93I7Wd4WVfXwg2igefXUYnyb0Hw4/FpeWPChnMo1db6Ps43EsJf+BDwgLIq1lpWo K+4KZ+hTw8iILyDfm6YM4EGuj01KH6hsfEGa104QSKVR1uvdVv8PqZGWHIekBClQ vtenKQtwY8ObMuuxK3UdWFSiVy7T+Jbgbb0X0yS0qQ7dMLQb4f8pAh7qyCGkCA5H /PPYkBd1OXUW3+F/dgy/yYTloHf1+tQrVNEHLY96sPtEkBSMM5GjDoHzfKrnVqCb uXhrsqe2ghIeLwb4SmoMbmxvyxf8fG97SL7Gkg8g//90tGg= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org