$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XmRaIEak7VDdk-HzNx2j3grxJm0.roa File: XmRaIEak7VDdk-HzNx2j3grxJm0.roa (raw, json) Hash identifier: eqszs4owMf7fD/E4mjjudwU4tEzapx29Ka2grWZmphM= Subject key identifier: 5E:64:5A:20:46:A4:ED:50:DD:93:E1:F3:37:1D:A3:DE:0A:F1:26:6D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FC2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XmRaIEak7VDdk-HzNx2j3grxJm0.roa Signing time: Fri 01 Sep 2023 08:57:27 +0000 ROA not before: Fri 01 Sep 2023 08:57:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 15133 IP address blocks: 2001:b032:c101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4034 (0xfc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5E645A2046A4ED50DD93E1F3371DA3DE0AF1266D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:a1:1a:2d:5e:b8:c5:6c:66:cf:d1:7e:cf: e8:d0:83:a2:98:27:be:58:7e:4d:e7:32:8e:c5:cf: e6:8c:67:e7:d8:c6:06:c8:2c:d9:6a:b4:66:87:c8: 6f:e0:4b:93:81:d1:5f:1e:48:f2:e0:f8:e4:59:16: b0:d4:90:72:0b:a1:ea:75:d3:90:d0:3e:ee:eb:15: 90:40:6c:36:7c:0f:1d:cc:5d:d5:0d:07:1d:a2:7a: 52:75:02:2a:14:14:25:42:94:a6:bb:92:cf:e8:fd: f1:61:e1:ba:e5:e9:1d:ba:3b:16:73:5b:b5:82:1b: 5d:2a:c3:d4:14:68:15:46:53:ea:7f:2e:34:9e:23: 2f:13:c5:f2:39:50:14:46:52:b3:1d:28:74:3c:03: dc:f8:25:c1:84:d0:e5:4e:51:e2:cd:71:09:a1:bf: b9:35:c7:d2:4d:f5:52:6b:79:a7:06:c9:a0:ee:ee: f6:5c:44:5e:92:23:5e:dd:c4:00:4a:7c:14:71:8a: fc:53:fa:3e:8f:6f:5c:50:ae:85:d5:d5:b9:fa:52: 91:e6:95:b4:5b:7b:a8:58:f3:b9:12:a4:b8:9a:55: 6b:e7:14:b9:13:8a:57:31:ef:2f:dc:1c:6e:a6:fa: 53:38:13:f3:36:d2:15:b2:7a:49:a1:a8:af:04:a7: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:64:5A:20:46:A4:ED:50:DD:93:E1:F3:37:1D:A3:DE:0A:F1:26:6D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XmRaIEak7VDdk-HzNx2j3grxJm0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b032:c101::/48 Signature Algorithm: sha256WithRSAEncryption 7e:f3:b3:0d:5f:8f:a5:6a:aa:78:ba:f9:e6:91:db:7f:ee:a2: a1:44:84:8c:3b:74:4e:74:cb:3b:a3:52:15:dd:d7:c1:56:dc: 82:0f:1b:e8:f9:15:ce:9c:38:eb:25:8c:aa:48:3f:77:9f:ee: 29:3a:cc:47:65:3d:eb:1d:ad:0e:33:79:1e:b9:06:fa:a2:c2: b9:c1:37:59:a9:c8:09:b9:16:85:38:87:e3:6b:8a:da:58:fa: fd:8e:df:08:86:11:77:36:30:2f:af:81:d5:9d:d8:5d:8f:df: d0:79:c0:2e:a2:65:12:d7:d1:e0:96:91:66:69:df:1d:7a:d2: ea:7e:e1:3a:0a:19:ec:73:7b:37:51:39:cf:bf:02:de:51:5f: c8:7d:8b:0e:9c:4a:c7:ed:d1:c2:e8:df:5a:e6:8c:87:47:4a: 08:7d:f2:95:f9:43:58:b3:af:92:b1:d9:e8:02:73:3e:b9:e4: e0:49:35:98:f2:e5:3b:26:26:48:34:96:e9:ec:f9:f8:d2:4b: da:09:11:52:82:71:e8:6a:a2:63:00:bf:65:e8:b5:97:f7:19: e0:8f:97:df:08:de:c9:2b:50:7b:9c:f0:b0:cd:83:93:6e:2b: 90:22:bd:30:e5:8b:9f:29:c2:9c:01:20:ae:08:15:7b:59:e2: df:a7:43:6b -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICD8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVFNjQ1QTIwNDZBNEVE NTBERDkzRTFGMzM3MURBM0RFMEFGMTI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWG6EaLV64xWxmz9F+z+jQg6KYJ75Yfk3nMo7Fz+aMZ+fYxgbI LNlqtGaHyG/gS5OB0V8eSPLg+ORZFrDUkHILoep105DQPu7rFZBAbDZ8Dx3MXdUN Bx2ielJ1AioUFCVClKa7ks/o/fFh4brl6R26OxZzW7WCG10qw9QUaBVGU+p/LjSe Iy8TxfI5UBRGUrMdKHQ8A9z4JcGE0OVOUeLNcQmhv7k1x9JN9VJreacGyaDu7vZc RF6SI17dxABKfBRxivxT+j6Pb1xQroXV1bn6UpHmlbRbe6hY87kSpLiaVWvnFLkT ilcx7y/cHG6m+lM4E/M20hWyekmhqK8EpxS7AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUXmRaIEak7VDdk+HzNx2j3grxJm0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YbVJhSUVhazdWRGRrLUh6Tngy ajNncnhKbTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw MsEBMA0GCSqGSIb3DQEBCwUAA4IBAQB+87MNX4+laqp4uvnmkdt/7qKhRISMO3RO dMs7o1IV3dfBVtyCDxvo+RXOnDjrJYyqSD93n+4pOsxHZT3rHa0OM3keuQb6osK5 wTdZqcgJuRaFOIfja4raWPr9jt8IhhF3NjAvr4HVndhdj9/QecAuomUS19HglpFm ad8detLqfuE6Chnsc3s3UTnPvwLeUV/IfYsOnErH7dHC6N9a5oyHR0oIffKV+UNY s6+SsdnoAnM+ueTgSTWY8uU7JiZINJbp7Pn40kvaCRFSgnHoaqJjAL9l6LWX9xng j5ffCN7JK1B7nPCwzYOTbiuQIr0w5YufKcKcASCuCBV7WeLfp0Nr -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org