$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa File: jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa (raw, json) Hash identifier: yyCBZ5CL2o4E2D8O+JuZy4DwVTiVXTwRNzXUoSfItOs= Subject key identifier: 8C:82:BA:C2:C2:60:5C:33:2B:99:83:51:FF:D8:06:E4:39:81:2C:0D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FC5 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa Signing time: Fri 01 Sep 2023 08:57:28 +0000 ROA not before: Fri 01 Sep 2023 08:57:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 210.242.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4037 (0xfc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8C82BAC2C2605C332B998351FFD806E439812C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:24:43:ef:ce:a2:12:19:3a:64:1f:2b:19: a8:79:fb:7a:18:32:5c:0c:24:5d:9e:0c:37:51:c2: ba:02:e4:46:23:e7:cd:c2:f3:7f:d2:e4:31:3a:1c: 23:48:ed:f4:60:12:8a:d0:59:92:46:ad:38:ed:b2: 10:08:5a:c0:94:ab:3f:88:35:8b:53:6b:2a:3f:5c: 52:12:be:cc:12:2a:bc:17:de:77:f3:3b:99:38:68: ff:be:75:2c:b0:35:cd:f8:b5:2a:97:da:ea:c8:9b: 45:ee:9a:a3:b1:bb:c3:84:33:2f:f0:a9:0f:e1:c9: 02:1d:02:99:c0:2f:eb:2a:f7:64:d9:e4:a2:ea:2e: 0a:c0:2f:29:e2:b2:af:1f:13:e6:42:0a:1c:52:f2: cc:57:25:b2:f8:50:39:ed:66:bb:e5:bb:0b:dc:9e: a0:10:fa:8a:c2:3b:76:c1:90:39:6c:e1:a4:0c:c2: 69:98:95:f2:fa:2b:e8:9e:b1:5b:0e:58:7c:f1:21: d2:29:dc:7f:1b:0f:84:3b:cc:f6:32:9e:f0:1e:03: 7e:93:65:cf:51:33:45:6b:2c:7d:3f:26:c9:e4:b7: a8:84:1d:11:18:15:a6:6d:a0:f0:0f:b8:52:1b:31: 61:f3:a2:39:e5:58:55:dc:51:4b:80:ec:f7:e0:f9: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:82:BA:C2:C2:60:5C:33:2B:99:83:51:FF:D8:06:E4:39:81:2C:0D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:a3:2b:aa:9a:6a:4c:5c:5c:1e:5a:9d:ce:10:ce:38:f8:c2: 0a:d4:d2:38:c1:d1:44:9e:35:b6:81:b2:68:0d:f4:f9:a6:54: f4:72:1a:95:56:4b:02:71:64:b2:88:08:55:43:bf:09:ae:2b: 95:1d:d6:02:8d:f1:da:1c:ce:65:f0:e7:43:fb:aa:4e:12:f0: 16:03:a0:b4:ca:98:84:02:e8:31:fe:56:d0:0f:4d:91:e8:d0: 98:d1:81:3f:1f:af:b6:6f:3b:b2:ce:90:18:28:dd:43:4c:5a: 32:67:0a:0f:30:47:7a:a6:74:3e:6d:c8:1b:78:88:ee:15:2a: 14:96:5a:68:27:15:3e:b4:07:cd:e5:85:c6:98:0c:9d:51:46: 03:38:c3:50:0f:b5:57:51:e6:19:07:80:0e:ae:b0:36:1f:35: 0d:df:67:56:f4:ef:e5:82:7a:1b:07:6c:da:ba:ea:64:a2:6a: c4:18:3c:1f:ec:de:dd:c6:dc:c3:61:8d:54:31:89:f2:7c:65: 4c:25:99:9a:d9:aa:80:34:67:2a:53:5a:a0:9c:53:9a:dc:b2: ee:fd:4b:fa:37:12:d6:6e:35:ec:92:37:c0:f6:b6:9f:18:58: 19:63:f5:d0:29:34:4b:01:90:bc:0f:f4:a9:9a:40:60:b0:85: 84:cf:b6:74 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhDODJCQUMyQzI2MDVD MzMyQjk5ODM1MUZGRDgwNkU0Mzk4MTJDMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJQiRD786iEhk6ZB8rGah5+3oYMlwMJF2eDDdRwroC5EYj583C 83/S5DE6HCNI7fRgEorQWZJGrTjtshAIWsCUqz+INYtTayo/XFISvswSKrwX3nfz O5k4aP++dSywNc34tSqX2urIm0XumqOxu8OEMy/wqQ/hyQIdApnAL+sq92TZ5KLq LgrALynisq8fE+ZCChxS8sxXJbL4UDntZrvluwvcnqAQ+orCO3bBkDls4aQMwmmY lfL6K+iesVsOWHzxIdIp3H8bD4Q7zPYynvAeA36TZc9RM0VrLH0/Jsnkt6iEHREY FaZtoPAPuFIbMWHzojnlWFXcUUuA7Pfg+W4HAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUjIK6wsJgXDMrmYNR/9gG5DmBLA0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9qSUs2d3NKZ1hETXJtWU5SXzln RzVEbUJMQTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0vIw DQYJKoZIhvcNAQELBQADggEBAEijK6qaakxcXB5anc4Qzjj4wgrU0jjB0USeNbaB smgN9PmmVPRyGpVWSwJxZLKICFVDvwmuK5Ud1gKN8doczmXw50P7qk4S8BYDoLTK mIQC6DH+VtAPTZHo0JjRgT8fr7ZvO7LOkBgo3UNMWjJnCg8wR3qmdD5tyBt4iO4V KhSWWmgnFT60B83lhcaYDJ1RRgM4w1APtVdR5hkHgA6usDYfNQ3fZ1b07+WCehsH bNq66mSiasQYPB/s3t3G3MNhjVQxifJ8ZUwlmZrZqoA0ZypTWqCcU5rcsu79S/o3 EtZuNeySN8D2tp8YWBlj9dApNEsBkLwP9KmaQGCwhYTPtnQ= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org