$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RHkRKqX8uguOPnRMIEq96S0FehI.roa File: RHkRKqX8uguOPnRMIEq96S0FehI.roa (raw, json) Hash identifier: 0CAIm2SrcQ1I3NXQUfUnyMmZY0oUaM3VDIoRVWZ2Skg= Subject key identifier: 44:79:11:2A:A5:FC:BA:0B:8E:3E:74:4C:20:4A:BD:E9:2D:05:7A:12 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F2B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RHkRKqX8uguOPnRMIEq96S0FehI.roa Signing time: Fri 01 Sep 2023 08:56:42 +0000 ROA not before: Fri 01 Sep 2023 08:56:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 118.168.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3883 (0xf2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4479112AA5FCBA0B8E3E744C204ABDE92D057A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:f5:e3:68:65:05:87:6b:41:c2:85:7c:f9: 86:40:cc:3a:9f:fd:75:c4:fd:a0:62:49:91:52:ad: 3c:f0:c5:fa:ba:a2:09:a8:61:64:e5:c7:4f:3c:50: 0b:33:67:79:ac:4d:2e:70:c5:b1:90:72:b3:fa:4e: 02:07:ef:36:2a:9b:52:26:2a:ce:75:38:8e:dd:eb: 27:c3:37:83:7f:57:be:12:93:86:d6:56:be:61:d1: f1:f8:f5:a9:21:3e:f6:02:0e:90:17:29:f0:c0:10: 14:a6:ff:63:cf:85:6e:98:a1:56:8d:74:bc:a5:76: a8:87:37:45:3a:46:5b:17:6e:67:3a:4b:b0:8a:de: 97:9f:98:e1:fc:4f:29:96:90:34:f5:4d:14:ad:23: 8d:0d:e8:4a:a7:41:86:9a:f7:a5:a6:28:6e:1d:4c: ce:29:54:6d:b4:61:d4:24:05:ca:ab:75:4e:92:48: a0:08:2e:db:24:8c:dc:4c:39:d3:40:9b:4d:85:10: e8:8f:06:c1:2b:fc:10:0a:bd:0c:34:a1:2d:88:14: a8:15:81:05:ec:6e:aa:ac:8a:0c:51:61:03:01:5f: 85:23:b5:44:ab:ba:18:66:d9:e4:de:8f:e5:d7:ba: 31:8b:94:69:ac:43:e6:33:80:f1:d9:2d:4c:fb:9f: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:11:2A:A5:FC:BA:0B:8E:3E:74:4C:20:4A:BD:E9:2D:05:7A:12 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RHkRKqX8uguOPnRMIEq96S0FehI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.168.0.0/14 Signature Algorithm: sha256WithRSAEncryption bd:d5:05:11:5b:93:7b:61:5e:11:f9:a8:7d:49:97:d1:4b:1f: 67:7c:ad:a9:17:c0:1c:40:21:c3:1b:bf:1e:1a:e5:77:03:a5: 0d:32:e4:30:98:32:27:eb:86:10:1d:ed:79:7b:86:62:fd:1f: ba:2d:93:98:53:0f:96:33:66:df:11:ac:91:a5:ce:ed:c6:fe: 16:2e:68:5c:b5:85:87:54:f1:4f:81:13:bb:74:7b:24:42:03: f6:b2:f7:e1:24:46:ce:03:3b:98:1e:7e:80:a3:8f:70:e7:7d: eb:1a:d9:51:bf:fb:5c:0b:20:2c:35:24:f5:26:9d:6f:ca:98: 55:8d:08:19:50:b8:ec:55:2a:52:8f:45:8f:48:b7:6d:88:db: 6d:9f:3e:aa:0c:2a:a3:b1:4f:73:06:09:19:4a:97:48:72:9c: 82:7a:f1:aa:81:2d:1a:80:93:c5:57:03:9f:38:8b:46:8d:81: af:fc:af:cf:04:f3:19:70:f8:dc:26:1b:af:cb:33:6a:bc:c7: 15:db:0c:09:a6:c5:a8:39:b9:74:f2:d7:1f:05:85:b9:bd:e8: ae:74:f4:7d:d6:a8:e1:f4:b0:04:5a:f6:a3:b2:28:89:d4:5b: e5:6f:44:4e:00:6a:6f:1b:90:53:da:3c:b9:f2:26:3e:25:b1: 82:51:be:ad -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ0NzkxMTJBQTVGQ0JB MEI4RTNFNzQ0QzIwNEFCREU5MkQwNTdBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJm/XjaGUFh2tBwoV8+YZAzDqf/XXE/aBiSZFSrTzwxfq6ogmo YWTlx088UAszZ3msTS5wxbGQcrP6TgIH7zYqm1ImKs51OI7d6yfDN4N/V74Sk4bW Vr5h0fH49akhPvYCDpAXKfDAEBSm/2PPhW6YoVaNdLyldqiHN0U6RlsXbmc6S7CK 3pefmOH8TymWkDT1TRStI40N6EqnQYaa96WmKG4dTM4pVG20YdQkBcqrdU6SSKAI LtskjNxMOdNAm02FEOiPBsEr/BAKvQw0oS2IFKgVgQXsbqqsigxRYQMBX4UjtUSr uhhm2eTej+XXujGLlGmsQ+YzgPHZLUz7n4dxAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQURHkRKqX8uguOPnRMIEq96S0FehIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9SSGtSS3FYOHVndU9QblJNSUVx OTZTMEZlaEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCdqgw DQYJKoZIhvcNAQELBQADggEBAL3VBRFbk3thXhH5qH1Jl9FLH2d8rakXwBxAIcMb vx4a5XcDpQ0y5DCYMifrhhAd7Xl7hmL9H7otk5hTD5YzZt8RrJGlzu3G/hYuaFy1 hYdU8U+BE7t0eyRCA/ay9+EkRs4DO5gefoCjj3Dnfesa2VG/+1wLICw1JPUmnW/K mFWNCBlQuOxVKlKPRY9It22I222fPqoMKqOxT3MGCRlKl0hynIJ68aqBLRqAk8VX A584i0aNga/8r88E8xlw+NwmG6/LM2q8xxXbDAmmxag5uXTy1x8Fhbm96K509H3W qOH0sARa9qOyKInUW+VvRE4Aam8bkFPaPLnyJj4lsYJRvq0= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org