$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SP1C5lcWpAeu1uJQfOT7s3i3DYo.roa File: SP1C5lcWpAeu1uJQfOT7s3i3DYo.roa (raw, json) Hash identifier: hneAcUQ/3guvffBSKgoktTGTZLVk5o8DVbu5oJQtAGk= Subject key identifier: 48:FD:42:E6:57:16:A4:07:AE:D6:E2:50:7C:E4:FB:B3:78:B7:0D:8A Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F72 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SP1C5lcWpAeu1uJQfOT7s3i3DYo.roa Signing time: Fri 01 Sep 2023 08:57:06 +0000 ROA not before: Fri 01 Sep 2023 08:57:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 36040 IP address blocks: 202.39.67.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3954 (0xf72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=48FD42E65716A407AED6E2507CE4FBB378B70D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:4d:86:8b:ca:cb:a3:19:62:99:8e:4b:ee: 61:1e:4c:3c:18:49:4c:84:e6:f0:f7:82:a9:b8:15: 3c:40:7e:8d:0f:5a:65:f8:74:3a:7e:14:5f:dc:d0: 70:67:4a:af:90:f1:57:a3:69:de:3e:81:b8:be:40: ce:9b:4c:ad:4d:d7:05:0e:10:4f:ca:d2:c0:49:86: 72:a4:f4:42:41:e1:90:c0:73:98:13:ec:40:aa:3c: b5:aa:d8:07:8e:36:9f:4d:43:79:17:a6:07:83:14: 80:78:ec:dc:bc:f5:36:87:20:8e:ec:7c:e0:c3:8f: 5d:55:2e:9f:5e:36:8a:d2:0c:4c:39:ad:44:5c:05: 2b:24:e9:43:f3:14:e1:49:b0:42:f2:c9:00:3b:75: 97:7a:07:7f:82:f6:e2:61:1a:04:68:e6:b3:1f:b7: 1b:3c:43:5f:16:b9:71:8e:1d:78:9c:65:6b:81:01: ed:0e:51:03:c2:71:2f:f8:07:af:86:04:8a:87:8e: b3:cf:f0:a6:31:42:97:5d:25:8e:e1:7c:f2:65:4f: e6:fb:2f:f3:b1:21:23:39:ae:01:2b:36:fd:b4:5c: ae:7c:54:62:6b:8c:61:4c:16:3a:6f:f3:de:c9:b0: 7d:11:98:b9:86:0f:2f:2b:02:77:ad:58:3a:08:39: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FD:42:E6:57:16:A4:07:AE:D6:E2:50:7C:E4:FB:B3:78:B7:0D:8A X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SP1C5lcWpAeu1uJQfOT7s3i3DYo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.67.128/27 Signature Algorithm: sha256WithRSAEncryption 9f:a7:b7:f4:98:fb:41:bd:e0:03:a0:1b:44:29:f6:66:7d:72: 0f:ef:92:30:a8:d7:f2:4a:25:48:14:cc:5d:99:35:52:d5:3f: ad:a0:72:86:3c:a7:52:22:01:c3:4f:f9:83:dd:75:5c:27:c2: 40:5a:18:c2:41:2b:fc:1a:0b:af:69:ab:f2:8d:95:7a:4f:89: 9e:35:06:f7:77:ac:f3:9d:c4:9f:80:05:7d:82:2d:ad:b5:ce: 5d:83:e4:13:0c:d9:68:c4:1f:22:84:6e:f4:32:f1:61:da:fd: 35:0b:d7:d6:90:30:b2:b0:27:57:5f:98:f2:70:fd:0f:ca:29: c9:e0:59:64:93:08:7d:94:22:aa:cf:fe:8d:b7:7c:6c:96:c6: 0f:e6:53:47:09:eb:f4:ff:78:b4:da:7e:26:62:f2:73:4c:60: c9:20:b9:7c:4c:ce:a7:21:b9:d6:6e:b2:1c:96:79:e6:e6:b2: 09:9e:23:9a:3d:2d:18:d3:01:40:09:a9:e0:28:9f:e4:80:29: 80:d3:51:bd:b2:f8:87:f4:fa:6a:fb:eb:27:5a:7e:42:23:9a: da:2e:61:4c:fc:0f:29:d1:80:cf:83:f2:2d:83:f3:df:d9:b9: 53:e1:54:aa:bd:9c:3c:8e:43:61:62:87:4e:85:29:e8:e6:08: 4a:4e:71:fc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICD3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ4RkQ0MkU2NTcxNkE0 MDdBRUQ2RTI1MDdDRTRGQkIzNzhCNzBEOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTA02Gi8rLoxlimY5L7mEeTDwYSUyE5vD3gqm4FTxAfo0PWmX4 dDp+FF/c0HBnSq+Q8Vejad4+gbi+QM6bTK1N1wUOEE/K0sBJhnKk9EJB4ZDAc5gT 7ECqPLWq2AeONp9NQ3kXpgeDFIB47Ny89TaHII7sfODDj11VLp9eNorSDEw5rURc BSsk6UPzFOFJsELyyQA7dZd6B3+C9uJhGgRo5rMftxs8Q18WuXGOHXicZWuBAe0O UQPCcS/4B6+GBIqHjrPP8KYxQpddJY7hfPJlT+b7L/OxISM5rgErNv20XK58VGJr jGFMFjpv897JsH0RmLmGDy8rAnetWDoIOcAxAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUSP1C5lcWpAeu1uJQfOT7s3i3DYowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9TUDFDNWxjV3BBZXUxdUpRZk9U N3MzaTNEWW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFyidD gDANBgkqhkiG9w0BAQsFAAOCAQEAn6e39Jj7Qb3gA6AbRCn2Zn1yD++SMKjX8kol SBTMXZk1UtU/raByhjynUiIBw0/5g911XCfCQFoYwkEr/BoLr2mr8o2Vek+JnjUG 93es853En4AFfYItrbXOXYPkEwzZaMQfIoRu9DLxYdr9NQvX1pAwsrAnV1+Y8nD9 D8opyeBZZJMIfZQiqs/+jbd8bJbGD+ZTRwnr9P94tNp+JmLyc0xgySC5fEzOpyG5 1m6yHJZ55uayCZ4jmj0tGNMBQAmp4Cif5IApgNNRvbL4h/T6avvrJ1p+QiOa2i5h TPwPKdGAz4PyLYPz39m5U+FUqr2cPI5DYWKHToUp6OYISk5x/A== -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org