$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa File: af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa (raw, json) Hash identifier: 6HCQCBfbu/gwTyI69fI1G7kmL88LFhg6JRk9IEXU8Rg= Subject key identifier: 69:FE:96:70:9C:D9:15:11:EA:AE:D7:58:C8:0D:27:F3:2A:FB:1E:58 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F37 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa Signing time: Fri 01 Sep 2023 08:56:46 +0000 ROA not before: Fri 01 Sep 2023 08:56:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 221.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3895 (0xf37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=69FE96709CD91511EAAED758C80D27F32AFB1E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:86:c0:76:8e:a2:a0:be:47:ed:85:55:86: 7c:f3:14:26:59:ff:29:4f:7f:56:3f:f2:44:e4:eb: a1:c1:8a:ef:95:c6:ff:c5:b6:77:23:54:7e:60:a3: cd:eb:81:d7:1d:2b:9d:2f:8a:78:1c:b8:21:10:25: 9e:48:58:a6:0d:76:16:4f:75:f1:fa:19:2c:bb:ec: 4d:44:36:2b:e4:fa:9a:1a:77:95:83:29:f7:d4:2c: 46:f7:8e:e3:9b:05:c8:d0:63:71:fe:ba:25:bb:43: e7:04:ae:44:43:d9:0f:6d:c5:5c:b4:b0:98:55:58: 97:51:07:3f:7f:30:06:3c:95:cb:7e:4d:4b:06:e6: 4e:8c:50:87:bd:5a:3f:ef:12:66:8f:30:58:b3:fb: af:87:82:1f:84:b0:a9:5e:bf:35:f6:70:1b:50:35: e5:19:0c:7f:1d:55:73:7d:dd:3c:05:5d:f2:95:55: f1:0a:1e:8b:7b:f8:96:3a:a4:42:b0:d1:2e:f9:0b: e2:37:ed:e6:94:74:be:ce:c7:d3:64:62:c0:28:5e: 19:60:e8:1a:93:7d:b2:20:10:94:6f:ed:3a:13:0a: 2c:1a:93:fd:ab:69:79:6b:10:aa:ca:ce:79:ee:db: 45:fd:95:a4:71:91:ee:73:25:58:d9:f5:f6:88:ba: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FE:96:70:9C:D9:15:11:EA:AE:D7:58:C8:0D:27:F3:2A:FB:1E:58 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.120.21.0/24 Signature Algorithm: sha256WithRSAEncryption 88:a3:11:09:12:18:78:bf:4f:20:9d:f9:f8:98:d1:de:9d:7b: 91:f5:2d:76:f4:6e:05:de:d8:b5:c9:b5:b3:29:a5:f3:2b:a6: fa:ef:57:e4:b9:3e:a4:37:a7:34:8c:6a:8f:c0:eb:24:d5:6f: 51:85:78:3c:29:94:73:9b:4e:71:31:17:a5:e2:e4:c2:05:ed: fc:d1:fe:e2:85:b7:6a:32:2a:8a:8f:f8:cd:ed:64:2a:7a:f8: db:5a:fa:b9:8d:ca:aa:bb:58:8d:5e:45:14:d0:4c:00:b5:91: 74:81:ae:d1:a1:8c:33:ec:a1:30:4b:5c:ca:5e:b7:e4:65:18: cb:f4:dd:09:ed:dd:76:b5:07:fc:3a:f5:0e:40:cf:49:cc:09: df:04:35:f0:88:f3:22:07:6d:2b:62:cc:05:13:ce:6c:68:82: 3a:93:fc:2c:57:70:5e:b1:6d:1a:d9:07:04:04:e9:28:d3:c6: 06:4a:76:d7:e0:56:dc:06:de:93:6e:81:19:86:b7:25:38:46: 5a:39:c1:6a:e3:47:ba:f5:93:87:fb:60:a2:87:48:26:ac:0d: 16:70:27:4d:9a:5c:e5:b7:07:3b:45:26:e9:d4:b0:dd:5c:d1: 06:00:58:5a:55:81:aa:8d:08:d6:58:73:dd:ca:d5:5b:df:42: 3c:c8:9c:4c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5RkU5NjcwOUNEOTE1 MTFFQUFFRDc1OEM4MEQyN0YzMkFGQjFFNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9FYbAdo6ioL5H7YVVhnzzFCZZ/ylPf1Y/8kTk66HBiu+Vxv/F tncjVH5go83rgdcdK50vingcuCEQJZ5IWKYNdhZPdfH6GSy77E1ENivk+poad5WD KffULEb3juObBcjQY3H+uiW7Q+cErkRD2Q9txVy0sJhVWJdRBz9/MAY8lct+TUsG 5k6MUIe9Wj/vEmaPMFiz+6+Hgh+EsKlevzX2cBtQNeUZDH8dVXN93TwFXfKVVfEK Hot7+JY6pEKw0S75C+I37eaUdL7Ox9NkYsAoXhlg6BqTfbIgEJRv7ToTCiwak/2r aXlrEKrKznnu20X9laRxke5zJVjZ9faIul9vAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUaf6WcJzZFRHqrtdYyA0n8yr7HlgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9hZjZXY0p6WkZSSHFydGRZeUEw bjh5cjdIbGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3XgV MA0GCSqGSIb3DQEBCwUAA4IBAQCIoxEJEhh4v08gnfn4mNHenXuR9S129G4F3ti1 ybWzKaXzK6b671fkuT6kN6c0jGqPwOsk1W9RhXg8KZRzm05xMRel4uTCBe380f7i hbdqMiqKj/jN7WQqevjbWvq5jcqqu1iNXkUU0EwAtZF0ga7RoYwz7KEwS1zKXrfk ZRjL9N0J7d12tQf8OvUOQM9JzAnfBDXwiPMiB20rYswFE85saII6k/wsV3BesW0a 2QcEBOko08YGSnbX4FbcBt6TboEZhrclOEZaOcFq40e69ZOH+2Cih0gmrA0WcCdN mlzltwc7RSbp1LDdXNEGAFhaVYGqjQjWWHPdytVb30I8yJxM -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org