$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ips2FsdjCj3EVqqb2x3Q3jyLG44.roa File: ips2FsdjCj3EVqqb2x3Q3jyLG44.roa (raw, json) Hash identifier: GvxoT9GdwYQIwfmtwnWYsBhXNcndRr4syg9jjjGoVLc= Subject key identifier: 8A:9B:36:16:C7:63:0A:3D:C4:56:AA:9B:DB:1D:D0:DE:3C:8B:1B:8E Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Certificate serial: 0C2D Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ips2FsdjCj3EVqqb2x3Q3jyLG44.roa Signing time: Fri 01 Sep 2023 08:57:11 +0000 ROA not before: Fri 01 Sep 2023 08:57:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9680 IP address blocks: 168.95.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A Validity Not Before: Sep 1 08:57:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8A9B3616C7630A3DC456AA9BDB1DD0DE3C8B1B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:1e:d9:86:5f:27:a1:63:11:35:b9:59:75: 45:70:fe:ab:ab:86:fa:da:f6:51:e6:29:08:79:c1: 45:29:36:dd:9f:a3:9d:fa:db:eb:68:3e:a4:44:19: fc:70:44:12:60:7a:ac:cd:b0:cd:18:14:2b:bc:29: 2a:9f:fd:c0:d7:83:7a:ed:ea:9a:c4:14:46:32:4c: 6f:42:01:96:8c:02:fe:a6:d7:33:59:54:03:e8:80: c7:79:89:60:9a:f9:6f:1c:64:f7:2d:08:e5:1f:4b: 17:fa:72:80:26:46:97:fa:dc:4c:d1:be:f3:b7:19: 1c:01:c4:e7:7c:18:5b:63:45:91:71:92:69:11:b9: 18:d3:47:4e:74:3b:6e:79:08:8f:a6:f2:b2:ba:44: c1:7f:b0:ba:60:3a:3b:81:8c:91:d5:49:3a:5c:94: 27:d5:43:bf:28:93:20:57:5e:b8:83:f3:cf:5f:e8: e4:1b:45:0d:5f:75:8a:03:57:9d:05:7a:d3:eb:ea: 10:4f:f6:26:3e:26:4a:94:18:49:29:4e:11:1b:53: a3:c1:66:36:a6:00:db:c2:77:cd:22:ae:94:bb:ac: ea:9e:fe:99:d2:56:29:58:a4:27:ef:8a:59:a5:08: e1:8c:5d:1c:a7:44:38:49:22:51:d3:90:3d:4b:06: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9B:36:16:C7:63:0A:3D:C4:56:AA:9B:DB:1D:D0:DE:3C:8B:1B:8E X509v3 Authority Key Identifier: keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ips2FsdjCj3EVqqb2x3Q3jyLG44.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 168.95.246.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:f0:55:0c:ca:f2:db:cc:73:01:11:18:04:13:6d:ec:8e:af: 68:4f:ee:b6:af:40:49:49:c8:3e:8d:bf:9d:9f:28:cc:2b:5f: 1b:6b:a8:2b:b2:97:68:26:a3:62:2b:ce:3e:6c:df:90:18:40: fe:9f:87:8c:02:a5:9d:99:35:b9:a4:a2:08:66:d1:e4:c7:ae: 0d:a5:37:1f:8c:8a:10:bd:c1:35:fa:37:57:d8:a2:75:62:bb: 3a:48:e4:76:fa:83:08:58:ba:68:7b:ac:ff:5c:0f:94:ed:ea: 16:b0:3f:aa:2b:00:75:c0:f2:1a:c2:ed:55:ac:a0:3f:11:19: 9c:2e:31:39:5b:ea:fe:ff:2d:a1:64:6f:a6:45:86:cb:02:cc: be:ab:eb:46:38:34:ab:16:12:2a:3a:cc:d0:a0:e0:45:08:1a: 77:81:bb:5b:6b:90:7c:94:30:96:03:dd:82:b1:8a:8e:98:7e: 5d:eb:ae:8f:cc:77:4a:64:22:f8:ac:ee:68:ec:6d:3c:c9:4b: 0f:cb:f6:d0:2e:c3:9c:5d:47:5e:10:e0:84:92:a9:bf:c2:cb: 5e:0f:aa:cb:90:dd:f6:09:34:e4:91:77:c3:f2:1e:af:13:a8: af:63:4e:fa:ae:53:5f:da:04:24:8f:2e:79:dc:5e:87:b7:bb: ad:1b:7d:a0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3 NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yMzA5MDEw ODU3MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhBOUIzNjE2Qzc2MzBB M0RDNDU2QUE5QkRCMUREMERFM0M4QjFCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv4h7Zhl8noWMRNblZdUVw/qurhvra9lHmKQh5wUUpNt2fo536 2+toPqREGfxwRBJgeqzNsM0YFCu8KSqf/cDXg3rt6prEFEYyTG9CAZaMAv6m1zNZ VAPogMd5iWCa+W8cZPctCOUfSxf6coAmRpf63EzRvvO3GRwBxOd8GFtjRZFxkmkR uRjTR050O255CI+m8rK6RMF/sLpgOjuBjJHVSTpclCfVQ78okyBXXriD889f6OQb RQ1fdYoDV50FetPr6hBP9iY+JkqUGEkpThEbU6PBZjamANvCd80irpS7rOqe/pnS VilYpCfvilmlCOGMXRynRDhJIlHTkD1LBucjAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUips2FsdjCj3EVqqb2x3Q3jyLG44wHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9pcHMyRnNkakNqM0VWcXFiMngz UTNqeUxHNDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF/2 MA0GCSqGSIb3DQEBCwUAA4IBAQCd8FUMyvLbzHMBERgEE23sjq9oT+62r0BJScg+ jb+dnyjMK18ba6grspdoJqNiK84+bN+QGED+n4eMAqWdmTW5pKIIZtHkx64NpTcf jIoQvcE1+jdX2KJ1Yrs6SOR2+oMIWLpoe6z/XA+U7eoWsD+qKwB1wPIawu1VrKA/ ERmcLjE5W+r+/y2hZG+mRYbLAsy+q+tGODSrFhIqOszQoOBFCBp3gbtba5B8lDCW A92CsYqOmH5d666PzHdKZCL4rO5o7G08yUsPy/bQLsOcXUdeEOCEkqm/wsteD6rL kN32CTTkkXfD8h6vE6ivY076rlNf2gQkjy553F6Ht7utG32g -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:04 2024 by rpki-client on console-ams.rpki-client.org