$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa File: Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa (raw, json) Hash identifier: ssr8XqZ8M0g+TxZuo9b2HDagH13QuqQlvK2M26blPZ8= Subject key identifier: 06:1E:6A:0F:91:5F:D9:9B:E8:4B:17:1B:60:CF:7E:58:1A:DE:D3:1B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FCC Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa Signing time: Fri 01 Sep 2023 08:57:30 +0000 ROA not before: Fri 01 Sep 2023 08:57:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 23675 IP address blocks: 203.66.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4044 (0xfcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=061E6A0F915FD99BE84B171B60CF7E581ADED31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:02:31:17:5b:e6:20:37:d0:0b:46:bd:6f: 05:ef:c9:d8:4c:95:e5:94:4c:1e:22:0d:f1:f2:65: 22:65:51:9a:56:19:c7:0c:63:8c:61:1d:b6:bb:43: 8a:66:00:52:46:be:58:4a:4e:20:a7:3d:46:49:55: 21:54:34:67:19:bf:01:3d:57:5e:29:d9:c1:fc:8f: 68:1b:c4:7a:e1:11:5e:64:8d:13:04:21:43:7b:bc: 8e:1e:75:73:55:b7:87:69:81:6c:85:4f:39:12:dd: cf:9b:3f:cf:82:e9:b9:1f:29:1e:3b:cd:bd:50:67: 29:d6:46:bd:c0:11:7f:bb:6a:44:a1:31:5e:b6:24: 62:2a:a9:63:e1:5b:36:ba:9d:47:77:bb:54:a8:5f: 22:47:a0:0f:a9:95:69:d2:23:aa:c6:de:14:eb:de: 99:63:e4:fc:00:db:e2:09:72:98:b2:d5:28:05:dd: 43:06:0f:49:2d:17:af:69:75:90:87:08:b6:66:ad: ca:fc:12:0c:c2:9a:2c:6a:6f:a3:b6:f0:25:91:00: d9:d3:c7:dc:fe:c5:3a:bd:ab:24:f3:16:e9:fb:60: d5:8d:87:f2:f5:af:25:47:72:50:58:e5:a2:16:55: 1f:5e:5d:37:1d:99:40:b2:9c:f7:b9:6b:ae:69:7e: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1E:6A:0F:91:5F:D9:9B:E8:4B:17:1B:60:CF:7E:58:1A:DE:D3:1B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.101.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:0c:dc:14:69:b9:e2:a6:bf:a0:0c:35:73:85:91:67:84:77: 51:2d:97:16:31:76:e8:81:fe:ec:ea:cf:ab:c1:8a:38:11:ff: 7c:78:c2:53:d1:1f:d8:96:61:80:c1:1f:b8:c8:f7:23:b7:57: e1:15:20:38:51:c3:45:75:58:e6:86:5d:61:d1:9f:a8:b6:af: db:0f:1b:b2:a3:05:24:38:c2:95:0f:1f:b5:f1:07:53:e0:5d: ee:5d:e6:d2:e9:b4:c6:4e:3a:c8:ee:84:84:5f:4b:35:0d:13: 9a:9b:ec:c6:84:53:48:bc:6c:40:a9:b2:41:de:14:89:01:a7: b3:5d:05:67:cd:fa:62:30:da:b1:18:46:4a:4c:31:e4:4e:2f: 9f:1d:3b:a1:dc:10:57:c2:27:cb:fe:9b:f5:18:72:ec:d3:a9: 87:30:2c:0c:b0:5e:b4:fa:d5:1f:92:29:30:10:03:a6:09:80: 96:de:d6:24:42:bb:56:6c:2e:ca:0a:e0:30:98:47:87:32:f6: f2:27:6a:98:1c:0d:66:ae:2b:90:b4:2f:6d:ce:ec:35:db:db: b1:77:3f:a2:5f:cb:aa:ea:7d:c5:8a:2e:8f:74:4b:76:eb:8d: 11:bf:b2:83:12:04:99:38:69:e8:3f:28:f4:ed:e2:d1:aa:9f: b3:53:b8:57 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA2MUU2QTBGOTE1RkQ5 OUJFODRCMTcxQjYwQ0Y3RTU4MUFERUQzMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKpAIxF1vmIDfQC0a9bwXvydhMleWUTB4iDfHyZSJlUZpWGccM Y4xhHba7Q4pmAFJGvlhKTiCnPUZJVSFUNGcZvwE9V14p2cH8j2gbxHrhEV5kjRME IUN7vI4edXNVt4dpgWyFTzkS3c+bP8+C6bkfKR47zb1QZynWRr3AEX+7akShMV62 JGIqqWPhWza6nUd3u1SoXyJHoA+plWnSI6rG3hTr3plj5PwA2+IJcpiy1SgF3UMG D0ktF69pdZCHCLZmrcr8EgzCmixqb6O28CWRANnTx9z+xTq9qyTzFun7YNWNh/L1 ryVHclBY5aIWVR9eXTcdmUCynPe5a65pfkyDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUBh5qD5Ff2ZvoSxcbYM9+WBre0xswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9CaDVxRDVGZjJadm9TeGNiWU05 LVdCcmUweHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Jl MA0GCSqGSIb3DQEBCwUAA4IBAQBqDNwUabnipr+gDDVzhZFnhHdRLZcWMXbogf7s 6s+rwYo4Ef98eMJT0R/YlmGAwR+4yPcjt1fhFSA4UcNFdVjmhl1h0Z+otq/bDxuy owUkOMKVDx+18QdT4F3uXebS6bTGTjrI7oSEX0s1DROam+zGhFNIvGxAqbJB3hSJ AaezXQVnzfpiMNqxGEZKTDHkTi+fHTuh3BBXwifL/pv1GHLs06mHMCwMsF60+tUf kikwEAOmCYCW3tYkQrtWbC7KCuAwmEeHMvbyJ2qYHA1mriuQtC9tzuw129uxdz+i X8uq6n3Fii6PdEt2640Rv7KDEgSZOGnoPyj07eLRqp+zU7hX -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org