$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/NfxghxQzkdt5oK-RIB50HI_pu14.roa File: NfxghxQzkdt5oK-RIB50HI_pu14.roa (raw, json) Hash identifier: hFQYY2Q0iaDVM13HRTrDT7W1lDNihuS4SuOUGXcgq7U= Subject key identifier: 35:FC:60:87:14:33:91:DB:79:A0:AF:91:20:1E:74:1C:8F:E9:BB:5E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F90 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NfxghxQzkdt5oK-RIB50HI_pu14.roa Signing time: Fri 01 Sep 2023 08:57:13 +0000 ROA not before: Fri 01 Sep 2023 08:57:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9505 IP address blocks: 203.78.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3984 (0xf90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=35FC6087143391DB79A0AF91201E741C8FE9BB5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:45:d8:59:50:d6:0d:d6:3b:ce:9b:4a:81: 4e:73:65:61:0a:65:6a:1f:e2:49:50:30:6a:0d:d9: fc:31:27:00:ce:66:d1:78:85:3f:98:b0:93:53:fa: de:07:44:e9:2e:10:fd:bb:8e:fd:78:a0:75:5c:81: d9:f4:15:af:af:7e:8c:0b:6e:83:40:59:47:69:b9: ed:4a:75:c9:fd:6f:c4:1b:e3:34:d4:d7:5a:99:a5: ca:5d:c6:e6:af:bb:2f:14:81:1d:14:18:95:d9:cf: 91:aa:82:ce:4b:ce:be:f9:25:46:9f:3a:2d:4e:87: 2a:39:37:30:1b:7f:71:2a:36:71:c5:47:c1:cc:38: 05:e2:6b:1d:ec:2f:1d:50:98:3b:57:55:14:78:e9: 68:9d:61:cf:d7:01:8b:c6:d9:7f:7b:6e:da:b0:86: 71:cd:9a:ed:52:b5:35:f6:1a:02:e1:2c:20:23:69: ae:5f:83:7d:7e:fc:4d:11:39:a1:e1:de:8b:33:d5: 88:81:37:83:6d:14:25:9e:84:dc:c2:22:ee:b0:46: f3:03:b7:68:d4:89:69:f6:cd:4a:4a:51:1b:60:0f: dc:e3:7e:b8:a4:a4:09:15:e3:ce:6d:b7:e4:89:bd: 6c:bd:12:ad:5b:bf:44:58:fe:b3:be:6c:3d:2e:32: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FC:60:87:14:33:91:DB:79:A0:AF:91:20:1E:74:1C:8F:E9:BB:5E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NfxghxQzkdt5oK-RIB50HI_pu14.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.78.176.0/20 Signature Algorithm: sha256WithRSAEncryption bc:5b:c3:03:c9:37:43:8a:c9:7f:25:23:33:a7:f0:cb:57:89: 50:ed:00:e3:8c:0c:cf:05:ca:30:19:46:ac:d9:5d:fa:5f:5a: 33:5b:9a:01:24:ab:e3:f9:12:96:41:50:99:ac:12:38:da:f4: 06:86:b2:a9:34:d7:45:ff:fc:d2:ad:69:3d:90:9c:6f:b6:5e: 1b:22:cb:ad:18:33:cf:cb:53:20:c6:bf:b3:5c:47:e8:7e:39: 37:34:45:00:f4:06:a3:a8:0b:f1:bb:02:0d:19:3c:eb:d4:e1: 40:1b:c6:b9:11:01:d5:e6:5f:96:9c:1b:77:f1:20:44:46:1d: 13:49:8e:6f:45:14:48:c2:b2:36:8c:4e:89:75:c7:70:c7:12: e8:bb:c3:a0:56:df:71:f7:03:c2:59:bf:0f:16:b1:c0:3e:20: 48:a6:27:d2:5c:ba:00:f8:23:d6:83:12:7f:0d:6b:9c:67:83: 8c:f7:24:e4:56:26:e4:33:71:1a:26:99:d7:91:98:19:77:3a: 3a:4b:fe:d5:1e:f3:e8:13:b3:fd:52:ff:a0:7a:9f:a2:50:45: e0:dc:a0:92:c7:de:2d:db:87:07:64:cf:9a:3a:fa:49:75:9e: 51:38:4e:7b:d3:43:a6:92:7f:ac:73:dd:7a:4d:f5:ab:c9:df: d5:a9:be:ec -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM1RkM2MDg3MTQzMzkx REI3OUEwQUY5MTIwMUU3NDFDOEZFOUJCNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjIEXYWVDWDdY7zptKgU5zZWEKZWof4klQMGoN2fwxJwDOZtF4 hT+YsJNT+t4HROkuEP27jv14oHVcgdn0Fa+vfowLboNAWUdpue1Kdcn9b8Qb4zTU 11qZpcpdxuavuy8UgR0UGJXZz5Gqgs5Lzr75JUafOi1Ohyo5NzAbf3EqNnHFR8HM OAXiax3sLx1QmDtXVRR46WidYc/XAYvG2X97btqwhnHNmu1StTX2GgLhLCAjaa5f g31+/E0ROaHh3osz1YiBN4NtFCWehNzCIu6wRvMDt2jUiWn2zUpKURtgD9zjfrik pAkV485tt+SJvWy9Eq1bv0RY/rO+bD0uMjdtAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUNfxghxQzkdt5oK+RIB50HI/pu14wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9OZnhnaHhRemtkdDVvSy1SSUI1 MEhJX3B1MTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy06w MA0GCSqGSIb3DQEBCwUAA4IBAQC8W8MDyTdDisl/JSMzp/DLV4lQ7QDjjAzPBcow GUas2V36X1ozW5oBJKvj+RKWQVCZrBI42vQGhrKpNNdF//zSrWk9kJxvtl4bIsut GDPPy1Mgxr+zXEfofjk3NEUA9AajqAvxuwINGTzr1OFAG8a5EQHV5l+WnBt38SBE Rh0TSY5vRRRIwrI2jE6JdcdwxxLou8OgVt9x9wPCWb8PFrHAPiBIpifSXLoA+CPW gxJ/DWucZ4OM9yTkVibkM3EaJpnXkZgZdzo6S/7VHvPoE7P9Uv+gep+iUEXg3KCS x94t24cHZM+aOvpJdZ5ROE5700Omkn+sc916TfWryd/Vqb7s -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org