$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/J_zd8UrIm_Uz8mdSugWdsM2I34U.roa File: J_zd8UrIm_Uz8mdSugWdsM2I34U.roa (raw, json) Hash identifier: DmApfzHIzracQ3aqJ2OEoC+MnG6NcMypZXASw6tKVVE= Subject key identifier: 27:FC:DD:F1:4A:C8:9B:F5:33:F2:67:52:BA:05:9D:B0:CD:88:DF:85 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FBE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J_zd8UrIm_Uz8mdSugWdsM2I34U.roa Signing time: Fri 01 Sep 2023 08:57:26 +0000 ROA not before: Fri 01 Sep 2023 08:57:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 54994 IP address blocks: 61.221.181.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4030 (0xfbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=27FCDDF14AC89BF533F26752BA059DB0CD88DF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:1c:fe:5a:35:92:c6:32:dc:9e:84:1d:cf: c2:26:66:20:3f:ff:10:fd:41:55:e9:e0:68:fe:52: 7c:d4:3c:02:f3:7b:ec:0a:5a:3c:ab:24:af:a8:ef: 62:e1:fb:59:e8:20:12:c2:05:a4:07:62:c5:d5:49: 4a:9e:d5:a9:6c:14:bd:b2:b4:c4:03:1f:2f:2b:3e: cb:22:0b:db:42:d2:6c:94:6b:a7:f3:a6:42:7a:cb: 82:1c:f9:8b:a7:be:27:86:56:7c:76:4c:5d:45:fe: 56:23:62:43:be:21:3d:7e:c2:51:23:bb:73:ea:35: 93:b7:d5:78:78:37:de:69:eb:05:64:1d:86:9b:70: 99:47:b7:1c:5a:82:0c:0a:01:8c:91:f7:34:de:1b: 8a:d8:7a:3e:bc:08:0f:5b:aa:c1:3d:4b:f0:9e:39: 5b:19:fc:64:45:ae:21:62:7b:4c:a8:1f:c1:fa:44: fc:12:d0:a0:52:1c:b8:4d:0b:07:0e:28:d6:5e:9f: 12:df:ac:f2:4a:52:f8:bd:51:9c:0d:ee:dc:fb:0f: ae:ca:e7:65:00:09:c9:2e:82:45:f4:80:6b:51:a7: 95:0d:9e:67:9b:3e:27:0f:7e:1f:b5:0b:38:f5:84: 25:ad:61:8d:98:27:1b:d8:b7:1e:40:82:eb:3f:da: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:DD:F1:4A:C8:9B:F5:33:F2:67:52:BA:05:9D:B0:CD:88:DF:85 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/J_zd8UrIm_Uz8mdSugWdsM2I34U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.221.181.0/26 Signature Algorithm: sha256WithRSAEncryption 82:82:a4:4b:bc:fe:44:04:2d:74:3a:f8:19:fc:b1:89:69:08: 94:94:94:e4:79:75:7a:1c:82:76:fd:98:29:a0:d5:9c:d3:8b: 69:84:4d:ad:29:c4:59:71:b9:f7:59:ac:21:67:01:e0:8d:d0: 71:82:98:61:79:82:f1:41:39:71:a4:e7:6a:24:7e:bb:43:0a: 12:9b:e4:8d:38:eb:61:78:f9:08:d3:1b:c7:f3:6b:a2:70:67: 91:53:a5:18:1b:97:8f:85:be:49:53:27:5c:8a:da:71:ca:4e: 4f:ea:4f:f8:2b:cd:b1:48:ed:07:76:b7:d6:c6:fa:d7:7a:cd: 42:3e:34:88:10:98:ca:64:ee:93:09:d4:47:63:59:51:d7:19: 2e:b5:6a:ad:8c:70:c9:9f:a0:4a:48:39:af:0a:15:aa:72:a2: b0:74:69:7a:dc:9a:8a:da:0c:2b:f6:82:f4:c4:ea:47:45:c0: 2e:cc:7c:b1:e9:3a:10:88:cc:5b:eb:e5:1a:4e:76:a5:8a:fb: e6:85:37:f4:c0:9a:9b:04:41:bd:07:f2:fd:ea:54:6f:fd:97: 3c:1b:ed:ad:68:c2:9f:99:da:28:a7:80:fd:60:5a:d9:92:1a: 5d:de:42:99:eb:64:6e:ba:ce:6d:58:d1:07:34:be:b6:5b:f1: ec:02:69:60 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICD74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI3RkNEREYxNEFDODlC RjUzM0YyNjc1MkJBMDU5REIwQ0Q4OERGODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmPRz+WjWSxjLcnoQdz8ImZiA//xD9QVXp4Gj+UnzUPALze+wK WjyrJK+o72Lh+1noIBLCBaQHYsXVSUqe1alsFL2ytMQDHy8rPssiC9tC0myUa6fz pkJ6y4Ic+YunvieGVnx2TF1F/lYjYkO+IT1+wlEju3PqNZO31Xh4N95p6wVkHYab cJlHtxxaggwKAYyR9zTeG4rYej68CA9bqsE9S/CeOVsZ/GRFriFie0yoH8H6RPwS 0KBSHLhNCwcOKNZenxLfrPJKUvi9UZwN7tz7D67K52UACckugkX0gGtRp5UNnmeb PicPfh+1Czj1hCWtYY2YJxvYtx5Agus/2v9hAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUJ/zd8UrIm/Uz8mdSugWdsM2I34UwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KX3pkOFVySW1fVXo4bWRTdWdX ZHNNMkkzNFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPd21 ADANBgkqhkiG9w0BAQsFAAOCAQEAgoKkS7z+RAQtdDr4GfyxiWkIlJSU5Hl1ehyC dv2YKaDVnNOLaYRNrSnEWXG591msIWcB4I3QcYKYYXmC8UE5caTnaiR+u0MKEpvk jTjrYXj5CNMbx/NronBnkVOlGBuXj4W+SVMnXIraccpOT+pP+CvNsUjtB3a31sb6 13rNQj40iBCYymTukwnUR2NZUdcZLrVqrYxwyZ+gSkg5rwoVqnKisHRpetyaitoM K/aC9MTqR0XALsx8sek6EIjMW+vlGk52pYr75oU39MCamwRBvQfy/epUb/2XPBvt rWjCn5naKKeA/WBa2ZIaXd5CmetkbrrObVjRBzS+tlvx7AJpYA== -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org