$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ceWq2FJi0AFiQfVQonBbW21x6QM.roa File: ceWq2FJi0AFiQfVQonBbW21x6QM.roa (raw, json) Hash identifier: njwBUxGdh5XfWWBtDuWswyYA1/UanR31ni8ln9JbKB0= Subject key identifier: 71:E5:AA:D8:52:62:D0:01:62:41:F5:50:A2:70:5B:5B:6D:71:E9:03 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F55 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ceWq2FJi0AFiQfVQonBbW21x6QM.roa Signing time: Fri 01 Sep 2023 08:56:57 +0000 ROA not before: Fri 01 Sep 2023 08:56:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 142005 IP address blocks: 210.61.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3925 (0xf55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=71E5AAD85262D0016241F550A2705B5B6D71E903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:6c:c7:fa:4a:c9:fc:60:39:e4:e7:24:91: da:f6:91:d5:86:86:99:b7:1d:58:7e:07:36:fb:17: 56:23:03:a3:8f:d1:11:06:0a:32:16:ee:a6:1f:66: 64:c7:18:11:64:ea:c7:ad:b6:9c:c8:f3:ad:02:42: 35:7f:0b:d8:3d:88:d0:1f:4a:95:a0:fb:83:41:0a: 64:ae:60:a7:52:b2:9a:60:89:12:c1:af:5b:b8:e3: 83:8f:6a:e1:13:63:12:75:79:f8:92:bf:19:b1:b5: cc:92:0e:f5:2c:ba:bf:b6:74:2a:4d:d5:5b:f5:4e: 51:34:6b:6e:0a:d7:44:a9:b6:48:45:9b:15:9f:5b: 99:50:4c:42:ff:fe:7f:46:61:e3:a7:b5:4c:88:10: 51:27:f8:ad:e5:41:b6:d8:c6:28:8f:aa:9b:cf:c0: 62:8e:7c:22:01:76:0e:14:59:a9:85:7c:cb:4f:0a: fc:f3:85:9c:eb:04:e7:f1:ad:d9:26:1a:ad:02:44: 30:9c:37:f3:85:22:d0:37:99:06:d3:e7:f8:b6:1b: 69:60:6b:7c:e8:6c:fe:a5:70:3c:50:fd:5b:62:1b: c9:c0:93:21:ed:3f:67:21:cf:c5:3f:28:a3:d3:18: b2:8f:ff:0a:15:7c:8e:26:08:61:c2:4a:85:57:fa: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E5:AA:D8:52:62:D0:01:62:41:F5:50:A2:70:5B:5B:6D:71:E9:03 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ceWq2FJi0AFiQfVQonBbW21x6QM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.114.0/24 Signature Algorithm: sha256WithRSAEncryption 89:f9:bb:11:69:e1:27:66:70:21:b0:e3:43:ff:80:3f:3e:45: d2:39:94:5b:fd:ce:66:46:37:14:d0:f6:12:99:d8:22:65:d3: 94:76:f3:7e:a1:f5:45:eb:ab:33:07:1c:93:9f:fd:bb:bc:9d: ab:91:6e:74:65:da:f8:31:ae:0e:81:b9:dc:8a:ab:51:50:59: 2c:a7:a9:8e:e7:b0:42:7e:a5:7b:16:c6:9d:1a:47:45:9e:9c: 17:fd:cf:b5:8f:e3:2e:1f:85:65:11:e6:f5:0c:ab:bc:e3:f9: 78:ef:84:21:c6:55:ff:cf:eb:eb:fa:3a:dd:e7:ea:87:a0:2a: 7f:59:9d:26:c2:cb:62:43:53:62:23:f7:56:e0:2b:23:80:41: 9b:7e:ed:c4:c7:1a:4f:5d:70:52:bc:28:6e:2a:45:15:e8:46: 45:a6:f3:28:e7:fe:2f:dd:8c:93:45:c6:99:cf:5e:0b:8b:3c: a0:17:49:dd:a3:b6:51:8f:2c:80:9a:52:01:b9:33:26:c4:f7: 81:ea:5c:36:b3:22:c9:fa:26:36:a1:ef:9d:81:b7:28:53:91: 96:9b:f5:ec:7d:74:54:c6:b0:36:fa:f1:dd:27:f2:c4:fd:5a: 20:f6:e5:ec:e0:53:e3:7a:bf:73:95:b5:fd:8d:8a:1d:64:e4: c9:00:ec:52 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD1UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcxRTVBQUQ4NTI2MkQw MDE2MjQxRjU1MEEyNzA1QjVCNkQ3MUU5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9J2zH+krJ/GA55Ockkdr2kdWGhpm3HVh+Bzb7F1YjA6OP0REG CjIW7qYfZmTHGBFk6settpzI860CQjV/C9g9iNAfSpWg+4NBCmSuYKdSsppgiRLB r1u444OPauETYxJ1efiSvxmxtcySDvUsur+2dCpN1Vv1TlE0a24K10SptkhFmxWf W5lQTEL//n9GYeOntUyIEFEn+K3lQbbYxiiPqpvPwGKOfCIBdg4UWamFfMtPCvzz hZzrBOfxrdkmGq0CRDCcN/OFItA3mQbT5/i2G2lga3zobP6lcDxQ/VtiG8nAkyHt P2chz8U/KKPTGLKP/woVfI4mCGHCSoVX+l5zAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUceWq2FJi0AFiQfVQonBbW21x6QMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9jZVdxMkZKaTBBRmlRZlZRb25C YlcyMXg2UU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j1y MA0GCSqGSIb3DQEBCwUAA4IBAQCJ+bsRaeEnZnAhsOND/4A/PkXSOZRb/c5mRjcU 0PYSmdgiZdOUdvN+ofVF66szBxyTn/27vJ2rkW50Zdr4Ma4OgbnciqtRUFksp6mO 57BCfqV7FsadGkdFnpwX/c+1j+MuH4VlEeb1DKu84/l474QhxlX/z+vr+jrd5+qH oCp/WZ0mwstiQ1NiI/dW4CsjgEGbfu3ExxpPXXBSvChuKkUV6EZFpvMo5/4v3YyT RcaZz14LizygF0ndo7ZRjyyAmlIBuTMmxPeB6lw2syLJ+iY2oe+dgbcoU5GWm/Xs fXRUxrA2+vHdJ/LE/Vog9uXs4FPjer9zlbX9jYodZOTJAOxS -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:03 2024 by rpki-client on console-ams.rpki-client.org