$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa File: Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa (raw, json) Hash identifier: H+5SO/uhsS1NuEAO34KYhnh8cdIfp1OKRUtxusnIlgU= Subject key identifier: 06:1D:E5:B4:43:F8:3B:71:5A:EB:52:A3:D0:E4:57:C9:CC:BE:C4:10 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F58 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa Signing time: Fri 01 Sep 2023 08:56:58 +0000 ROA not before: Fri 01 Sep 2023 08:56:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 210.59.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3928 (0xf58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=061DE5B443F83B715AEB52A3D0E457C9CCBEC410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:f9:20:31:7b:f0:2f:72:8f:c3:6e:52:17: 74:64:5a:30:4e:59:54:48:de:0b:dd:f6:da:b4:e0: 04:a3:34:d4:52:fb:fd:1c:cb:6d:eb:75:89:a1:d7: 00:75:b8:f6:9b:49:1e:d1:22:ed:b4:e9:88:ab:26: 1d:f1:df:9e:0e:b3:2d:f1:b4:74:bc:fb:3b:d1:b9: a5:f4:f7:74:6e:82:0e:5e:69:76:31:59:9b:14:c2: 5f:b3:5c:c1:10:85:8d:1a:7c:64:d5:1d:a9:a4:c7: 68:f8:e9:ae:69:e8:3d:1c:f3:13:4e:99:a1:bf:79: 90:7e:83:f9:67:6f:12:78:db:c7:f4:1b:1d:fd:8c: 31:41:ff:1d:50:89:75:8d:e0:a0:89:36:e4:05:b9: cd:b7:50:88:8b:52:90:53:18:33:9c:84:6e:2b:cd: 64:57:1c:fe:20:24:be:46:08:52:c7:7c:5b:3d:07: fc:d1:77:fc:11:b7:b9:65:a1:fc:50:11:ea:c3:cf: 2e:16:41:e0:f8:25:45:91:fe:a7:c6:f7:94:42:3b: 85:0c:85:34:3f:f9:34:63:ce:78:99:32:53:55:e2: d1:97:a7:8a:56:6b:98:94:e3:31:ee:ac:29:11:fc: 51:db:cb:e5:12:cf:a7:1b:10:d9:b0:a9:a4:2a:d0: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1D:E5:B4:43:F8:3B:71:5A:EB:52:A3:D0:E4:57:C9:CC:BE:C4:10 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh3ltEP4O3Fa61Kj0ORXycy-xBA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.59.128.0/17 Signature Algorithm: sha256WithRSAEncryption 24:3d:42:58:4c:f9:fc:6f:6e:bd:45:79:9f:e4:f7:5b:5b:10: 8c:56:df:ce:f2:91:b5:e9:86:82:d7:30:2a:7c:6d:05:73:74: 1d:a8:0a:12:7d:50:81:30:6e:06:b7:bc:eb:f0:6d:19:51:55: f3:0c:8a:89:5e:5d:e7:d1:4d:5d:14:84:24:32:09:a6:c9:13: 53:46:5d:89:21:b4:2b:27:51:46:f0:bb:37:6d:63:3d:18:e1: 9a:33:30:62:2d:49:29:6c:c9:ec:49:72:0d:45:85:43:cb:8d: 5c:ce:93:e2:1b:86:4d:a8:4c:c4:7c:87:ca:08:e7:04:35:d3: a7:91:7b:c1:2f:04:52:a7:ec:cb:b9:5e:29:f2:9b:5c:40:9e: d4:86:52:d3:97:68:2c:24:16:09:80:cd:63:6c:39:5e:6d:79: a6:8e:0b:e7:c5:9a:15:51:a5:d3:6a:b6:88:67:c3:df:f0:08: 58:95:ad:2c:98:84:07:8f:9b:08:b2:97:2b:45:c3:99:dd:6f: d9:cf:83:22:57:5b:f9:d3:60:26:77:06:50:5b:a8:2e:16:d9: b0:7d:47:d3:c0:fc:57:f1:e9:a7:b6:2c:b6:82:4b:05:1a:cf: 80:1d:2c:5f:39:c5:07:a1:7a:4b:7a:e5:15:cc:fc:3e:12:6f: 5a:7d:23:e7 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA2MURFNUI0NDNGODNC NzE1QUVCNTJBM0QwRTQ1N0M5Q0NCRUM0MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC25vkgMXvwL3KPw25SF3RkWjBOWVRI3gvd9tq04ASjNNRS+/0c y23rdYmh1wB1uPabSR7RIu206YirJh3x354Osy3xtHS8+zvRuaX093Rugg5eaXYx WZsUwl+zXMEQhY0afGTVHamkx2j46a5p6D0c8xNOmaG/eZB+g/lnbxJ428f0Gx39 jDFB/x1QiXWN4KCJNuQFuc23UIiLUpBTGDOchG4rzWRXHP4gJL5GCFLHfFs9B/zR d/wRt7llofxQEerDzy4WQeD4JUWR/qfG95RCO4UMhTQ/+TRjzniZMlNV4tGXp4pW a5iU4zHurCkR/FHby+USz6cbENmwqaQq0AWjAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUBh3ltEP4O3Fa61Kj0ORXycy+xBAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9CaDNsdEVQNE8zRmE2MUtqME9S WHljeS14QkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0juA MA0GCSqGSIb3DQEBCwUAA4IBAQAkPUJYTPn8b269RXmf5PdbWxCMVt/O8pG16YaC 1zAqfG0Fc3QdqAoSfVCBMG4Gt7zr8G0ZUVXzDIqJXl3n0U1dFIQkMgmmyRNTRl2J IbQrJ1FG8Ls3bWM9GOGaMzBiLUkpbMnsSXINRYVDy41czpPiG4ZNqEzEfIfKCOcE NdOnkXvBLwRSp+zLuV4p8ptcQJ7UhlLTl2gsJBYJgM1jbDlebXmmjgvnxZoVUaXT araIZ8Pf8AhYla0smIQHj5sIspcrRcOZ3W/Zz4MiV1v502AmdwZQW6guFtmwfUfT wPxX8emntiy2gksFGs+AHSxfOcUHoXpLeuUVzPw+Em9afSPn -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org