$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WI6wNhi4GyzM235Iob8j3BY_zlE.roa File: WI6wNhi4GyzM235Iob8j3BY_zlE.roa (raw, json) Hash identifier: y+QbSxtkj+jgVuODrm7vuW37hrOqdS1lb5FjgvEasLQ= Subject key identifier: 58:8E:B0:36:18:B8:1B:2C:CC:DB:7E:48:A1:BF:23:DC:16:3F:CE:51 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F64 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WI6wNhi4GyzM235Iob8j3BY_zlE.roa Signing time: Fri 01 Sep 2023 08:57:00 +0000 ROA not before: Fri 01 Sep 2023 08:57:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 20940 IP address blocks: 203.66.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3940 (0xf64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=588EB03618B81B2CCCDB7E48A1BF23DC163FCE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:12:42:19:dc:cf:36:08:69:d3:d8:77:90: 05:d7:80:21:ed:62:a1:ab:6a:d9:cd:54:60:9f:25: 2c:7e:07:49:aa:52:e8:62:8d:91:cb:9d:7e:0c:49: f1:59:b1:52:52:aa:32:37:14:fd:7e:05:0c:e2:8c: 54:e9:f5:20:f5:29:10:03:4d:96:b1:1d:df:29:19: 60:e6:69:77:25:df:a6:8d:86:48:9a:2e:ba:03:5d: 3f:99:fa:c0:fe:fa:de:1a:44:a1:be:7d:ad:17:5f: 96:b2:fd:7a:57:f4:09:d6:a9:e2:75:98:72:89:3c: d9:57:99:c9:30:e0:f5:03:63:7f:cc:29:ee:21:90: f1:53:b6:31:43:09:51:8b:d3:ba:13:c2:e7:82:fa: 3a:83:ef:b6:a8:62:c8:a9:ad:2d:e1:7f:3d:21:cc: 27:ff:5e:49:ad:a2:ad:06:e1:c2:f6:2c:42:dc:8d: ae:7a:37:a8:af:d9:ac:25:1e:fd:3f:08:23:60:14: e5:13:fd:ae:c9:7c:82:55:ee:61:5a:59:4f:43:1a: dc:b9:f5:2c:3f:55:d7:57:29:b0:24:6b:e3:5c:a6: f3:e4:71:68:15:cc:b4:87:dc:4a:d6:40:cf:a5:68: 8c:0c:5b:9a:f4:c2:6d:50:bc:6e:f2:71:3e:78:39: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8E:B0:36:18:B8:1B:2C:CC:DB:7E:48:A1:BF:23:DC:16:3F:CE:51 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WI6wNhi4GyzM235Iob8j3BY_zlE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.226.0/24 Signature Algorithm: sha256WithRSAEncryption 96:a0:bf:02:04:e1:40:b0:61:5c:95:c4:4a:6a:b2:fb:3e:30: e6:06:fc:e8:3e:40:2e:dd:bc:92:f9:9d:b5:2f:b5:30:ae:15: 7f:1a:e8:42:e5:04:f5:56:13:b5:c0:80:e3:e2:59:21:67:ff: 9a:ff:07:a0:2a:33:13:37:9d:6f:bd:d0:7a:68:8f:44:2c:1e: a3:f8:63:dd:f2:c0:67:45:fc:40:e2:5e:b8:4b:75:e1:f4:c4: 2c:a9:b6:2d:9a:99:16:c9:d9:1c:a7:5a:d6:43:23:08:bf:6c: b5:d1:aa:ad:31:dc:c8:93:97:c8:2b:9b:76:40:8b:49:df:2c: cb:11:bd:92:a5:24:15:ad:5f:5f:17:e1:d3:84:18:b2:8e:74: 6a:c6:31:aa:8b:35:27:1a:ee:2d:ca:28:ce:6d:f6:2e:3e:6c: 07:21:35:b9:5a:f2:e4:a0:40:c5:d7:c5:80:49:97:f9:f1:c8: d9:5e:40:b2:33:fd:a7:6c:0d:3b:88:13:40:55:52:2e:fb:e7: f6:43:49:a2:d3:ec:8d:61:fc:39:4b:98:9e:3c:0e:53:07:5a: ed:1f:6b:7e:71:7b:48:4d:6f:b8:aa:e0:aa:4f:e4:fb:be:9e: 6a:09:6f:f3:c3:3e:5e:4c:5f:17:af:27:0f:a6:aa:18:57:91: 27:ac:d9:59 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU4OEVCMDM2MThCODFC MkNDQ0RCN0U0OEExQkYyM0RDMTYzRkNFNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChlRJCGdzPNghp09h3kAXXgCHtYqGratnNVGCfJSx+B0mqUuhi jZHLnX4MSfFZsVJSqjI3FP1+BQzijFTp9SD1KRADTZaxHd8pGWDmaXcl36aNhkia LroDXT+Z+sD++t4aRKG+fa0XX5ay/XpX9AnWqeJ1mHKJPNlXmckw4PUDY3/MKe4h kPFTtjFDCVGL07oTwueC+jqD77aoYsiprS3hfz0hzCf/Xkmtoq0G4cL2LELcja56 N6iv2awlHv0/CCNgFOUT/a7JfIJV7mFaWU9DGty59Sw/VddXKbAka+NcpvPkcWgV zLSH3ErWQM+laIwMW5r0wm1QvG7ycT54OcPTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUWI6wNhi4GyzM235Iob8j3BY/zlEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9XSTZ3TmhpNEd5ek0yMzVJb2I4 ajNCWV96bEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Li MA0GCSqGSIb3DQEBCwUAA4IBAQCWoL8CBOFAsGFclcRKarL7PjDmBvzoPkAu3byS +Z21L7UwrhV/GuhC5QT1VhO1wIDj4lkhZ/+a/wegKjMTN51vvdB6aI9ELB6j+GPd 8sBnRfxA4l64S3Xh9MQsqbYtmpkWydkcp1rWQyMIv2y10aqtMdzIk5fIK5t2QItJ 3yzLEb2SpSQVrV9fF+HThBiyjnRqxjGqizUnGu4tyijObfYuPmwHITW5WvLkoEDF 18WASZf58cjZXkCyM/2nbA07iBNAVVIu++f2Q0mi0+yNYfw5S5iePA5TB1rtH2t+ cXtITW+4quCqT+T7vp5qCW/zwz5eTF8XrycPpqoYV5EnrNlZ -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:21 2024 by rpki-client on console-fra.rpki-client.org