$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa File: JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa (raw, json) Hash identifier: hEkV0aDCynF4ae7MXQdQAooNhLKBZM3HskXmAaH65J8= Subject key identifier: 26:36:E2:09:7B:6E:BF:E1:7E:B3:74:E3:95:86:C7:36:71:FF:2C:90 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FAF Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa Signing time: Fri 01 Sep 2023 08:57:23 +0000 ROA not before: Fri 01 Sep 2023 08:57:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 211.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4015 (0xfaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2636E2097B6EBFE17EB374E39586C73671FF2C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:df:35:5c:54:27:81:67:14:51:8e:7b:8f: b7:c8:45:b5:4a:4a:98:e4:59:70:cd:fd:97:58:6f: ee:97:e6:90:8a:5e:aa:bd:95:d0:d4:51:60:22:f8: 1b:a9:7a:b2:08:ac:86:e7:e5:1f:98:6d:4a:52:a8: 14:a2:80:c8:e1:08:51:f0:da:3e:a2:47:7f:d4:aa: 17:37:e3:a8:7a:21:0f:f5:9a:61:c5:89:b7:6c:28: 57:70:f9:9c:96:66:e1:30:08:a4:b5:30:30:0b:c2: 76:bc:8a:ca:98:cf:e4:ae:a0:c3:8d:55:0f:7d:ce: 0f:ad:d3:95:74:38:8e:7f:b6:d7:14:b7:41:64:09: 53:e1:65:52:93:1e:01:dd:c8:9a:b2:ba:97:96:9a: 10:4e:e4:7c:fa:bd:d6:21:41:95:c2:cc:85:c7:7d: 2a:b4:59:3b:37:a0:dc:e6:23:53:a3:f6:a6:16:3e: 71:77:ee:92:84:ce:2f:92:27:01:82:e5:d3:71:8a: 4c:fc:81:0c:a2:1c:90:27:9f:68:56:2a:c3:8f:05: 29:84:83:9c:dc:a6:08:f4:73:c0:c2:2f:1f:b1:00: 9d:b9:1a:f3:a1:c9:e0:29:01:15:8a:be:39:04:46: c0:6c:76:3d:7e:dd:3e:27:d2:fb:3d:64:cc:ef:7f: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:E2:09:7B:6E:BF:E1:7E:B3:74:E3:95:86:C7:36:71:FF:2C:90 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:73:fc:02:41:ab:82:ef:09:91:65:1b:76:79:e9:21:91:0e: 50:02:8e:7c:8c:90:52:98:78:d5:89:dd:d0:68:55:c7:27:25: 1f:ab:fd:ff:6a:c2:c3:42:10:d4:5b:40:3a:8a:f9:91:9b:7c: b5:8a:31:52:b6:da:ff:1f:b5:85:b8:a0:73:4d:89:09:10:06: 2c:95:bd:74:1d:b6:ce:e2:35:0d:9e:18:0a:a1:20:44:c5:69: 4f:82:4a:32:7b:f6:c8:18:f7:0e:42:ce:92:cf:5d:bc:cc:dc: 11:c0:09:91:38:8a:5b:9f:3e:c2:75:ca:8b:ea:95:e7:56:db: 0d:7d:df:2c:fa:11:1f:88:7a:b4:29:23:c6:94:4f:b5:ff:6a: c7:05:63:3e:fe:60:59:7b:2d:64:23:df:bd:34:53:25:51:8b: 07:b3:69:cd:69:5b:f0:d0:57:94:63:d3:04:90:ed:32:c7:5c: 5b:01:81:1f:93:72:49:42:08:cd:84:3f:50:d4:9a:26:aa:7a: 7e:4f:33:ee:31:70:bc:26:52:ba:3f:3b:7a:0f:f8:a2:91:d7: 64:72:72:44:f4:0f:16:99:5a:e6:be:35:a5:01:db:c4:46:7e: 2a:7e:a5:0e:1c:55:d6:ee:d0:82:70:ff:4f:9b:25:f0:d1:85: 4c:1b:be:6d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI2MzZFMjA5N0I2RUJG RTE3RUIzNzRFMzk1ODZDNzM2NzFGRjJDOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhFN81XFQngWcUUY57j7fIRbVKSpjkWXDN/ZdYb+6X5pCKXqq9 ldDUUWAi+BuperIIrIbn5R+YbUpSqBSigMjhCFHw2j6iR3/Uqhc346h6IQ/1mmHF ibdsKFdw+ZyWZuEwCKS1MDALwna8isqYz+SuoMONVQ99zg+t05V0OI5/ttcUt0Fk CVPhZVKTHgHdyJqyupeWmhBO5Hz6vdYhQZXCzIXHfSq0WTs3oNzmI1Oj9qYWPnF3 7pKEzi+SJwGC5dNxikz8gQyiHJAnn2hWKsOPBSmEg5zcpgj0c8DCLx+xAJ25GvOh yeApARWKvjkERsBsdj1+3T4n0vs9ZMzvf2LTAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUJjbiCXtuv+F+s3TjlYbHNnH/LJAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KamJpQ1h0dXYtRi1zM1RqbFli SE5uSF9MSkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0xYw DQYJKoZIhvcNAQELBQADggEBACNz/AJBq4LvCZFlG3Z56SGRDlACjnyMkFKYeNWJ 3dBoVccnJR+r/f9qwsNCENRbQDqK+ZGbfLWKMVK22v8ftYW4oHNNiQkQBiyVvXQd ts7iNQ2eGAqhIETFaU+CSjJ79sgY9w5CzpLPXbzM3BHACZE4ilufPsJ1yovqledW 2w193yz6ER+IerQpI8aUT7X/ascFYz7+YFl7LWQj3700UyVRiwezac1pW/DQV5Rj 0wSQ7TLHXFsBgR+TcklCCM2EP1DUmiaqen5PM+4xcLwmUro/O3oP+KKR12RyckT0 DxaZWua+NaUB28RGfip+pQ4cVdbu0IJw/0+bJfDRhUwbvm0= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org