$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/fF6IVm0zf9zQitICGC9O01kdPW0.roa File: fF6IVm0zf9zQitICGC9O01kdPW0.roa (raw, json) Hash identifier: iFZrhYyFa5duRjpa+z+YHXDhR8lWbfSuku2BeC+f1Ao= Subject key identifier: 7C:5E:88:56:6D:33:7F:DC:D0:8A:D2:02:18:2F:4E:D3:59:1D:3D:6D Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Certificate serial: 0C2C Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fF6IVm0zf9zQitICGC9O01kdPW0.roa Signing time: Fri 01 Sep 2023 08:56:42 +0000 ROA not before: Fri 01 Sep 2023 08:56:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 168.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Validity Not Before: Sep 1 08:56:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7C5E88566D337FDCD08AD202182F4ED3591D3D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:a0:3d:0f:76:9b:f8:87:80:93:8a:e3:1f: 78:85:06:87:66:36:8a:c7:77:74:0d:04:45:d6:9b: c8:0c:93:25:d6:21:43:5d:99:fb:ea:e7:28:f4:fa: da:a7:eb:0b:5e:57:0a:ae:5b:8c:1a:ad:95:7c:6c: 93:8a:57:7f:86:42:be:f4:3d:82:fe:ea:57:1b:1d: 9e:d6:83:32:ac:e5:01:04:6e:2b:83:1a:ee:c9:54: 54:b0:dd:e0:09:df:a4:5c:3a:38:96:31:55:81:f2: f8:eb:be:79:41:1b:1b:26:8e:36:ac:ef:73:b8:1a: 83:8e:f6:61:b7:5e:2c:08:36:8d:d0:37:f4:b0:03: 67:2a:c2:07:67:87:0f:12:78:79:2c:23:ad:fd:8c: d0:00:0a:70:3f:5d:24:9f:ee:8f:1e:47:d9:f3:e0: fe:af:3a:6e:7d:53:84:8e:02:a9:57:35:54:5a:c2: fd:30:3a:a2:5b:7e:c6:87:3f:ff:6a:4b:b8:bb:6d: 57:e1:7c:91:76:ba:97:ba:27:a5:02:09:da:8e:e8: 98:a6:53:92:4c:10:f5:c5:2b:02:70:b1:e0:ce:0a: 33:a2:9b:79:37:08:6e:26:fe:ff:10:30:91:a1:bb: 14:3f:3c:25:44:f7:3e:ad:ed:2b:77:7c:d8:41:8e: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5E:88:56:6D:33:7F:DC:D0:8A:D2:02:18:2F:4E:D3:59:1D:3D:6D X509v3 Authority Key Identifier: keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fF6IVm0zf9zQitICGC9O01kdPW0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 168.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:26:76:c2:cf:e9:34:4b:54:86:b7:8f:9a:36:c5:3e:b4:d0: e3:aa:04:ed:0f:f8:1b:a2:78:f8:2a:2b:77:b7:dd:70:3f:12: 7f:21:36:fc:a5:26:33:e8:f6:c1:1d:7c:71:03:0b:68:b9:f0: e6:e3:2e:ec:ab:ba:08:b4:70:04:1d:ce:4b:08:86:32:88:53: ca:14:5e:0b:d9:02:ec:dc:74:8e:c1:e9:c0:ec:bb:71:f8:26: 94:04:c9:6f:f4:aa:ee:16:9d:5a:69:f6:dd:23:da:d2:84:84: a1:42:7e:3e:c4:75:9a:25:2f:d0:59:d3:b8:f6:39:9f:83:41: c0:b9:18:6f:41:93:e8:a1:79:a7:39:7d:08:24:2e:18:16:3a: 34:18:8a:b1:bd:b3:c4:13:68:e5:46:5f:2f:6d:94:f9:2b:3d: 00:f4:ac:be:d6:17:9d:da:e6:bb:2e:f2:e7:43:70:4f:51:0e: 57:28:aa:a2:3b:16:41:3a:3e:be:39:ad:44:80:3b:af:4d:ba: 21:65:dc:49:50:8f:11:1a:c6:ff:aa:12:1a:ed:3d:0b:10:a3: 7e:d7:0e:ff:4f:0c:12:d5:1a:a1:13:7f:74:1a:52:7f:a0:50: e0:5e:7e:30:8b:95:7f:d6:6f:39:65:d6:50:29:21:31:88:49: 5d:8d:fc:0e -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3 NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yMzA5MDEw ODU2NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdDNUU4ODU2NkQzMzdG RENEMDhBRDIwMjE4MkY0RUQzNTkxRDNENkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbpaA9D3ab+IeAk4rjH3iFBodmNorHd3QNBEXWm8gMkyXWIUNd mfvq5yj0+tqn6wteVwquW4warZV8bJOKV3+GQr70PYL+6lcbHZ7WgzKs5QEEbiuD Gu7JVFSw3eAJ36RcOjiWMVWB8vjrvnlBGxsmjjas73O4GoOO9mG3XiwINo3QN/Sw A2cqwgdnhw8SeHksI639jNAACnA/XSSf7o8eR9nz4P6vOm59U4SOAqlXNVRawv0w OqJbfsaHP/9qS7i7bVfhfJF2upe6J6UCCdqO6JimU5JMEPXFKwJwseDOCjOim3k3 CG4m/v8QMJGhuxQ/PCVE9z6t7St3fNhBjnNVAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUfF6IVm0zf9zQitICGC9O01kdPW0wHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9mRjZJVm0wemY5elFpdElDR0M5 TzAxa2RQVzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqF8w DQYJKoZIhvcNAQELBQADggEBAFAmdsLP6TRLVIa3j5o2xT600OOqBO0P+BuiePgq K3e33XA/En8hNvylJjPo9sEdfHEDC2i58ObjLuyrugi0cAQdzksIhjKIU8oUXgvZ AuzcdI7B6cDsu3H4JpQEyW/0qu4WnVpp9t0j2tKEhKFCfj7EdZolL9BZ07j2OZ+D QcC5GG9Bk+iheac5fQgkLhgWOjQYirG9s8QTaOVGXy9tlPkrPQD0rL7WF53a5rsu 8udDcE9RDlcoqqI7FkE6Pr45rUSAO69NuiFl3ElQjxEaxv+qEhrtPQsQo37XDv9P DBLVGqETf3QaUn+gUOBefjCLlX/Wbzll1lApITGISV2N/A4= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org