$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mewZfh7f6x5mFf-SeBRGyPpL6RU.roa File: mewZfh7f6x5mFf-SeBRGyPpL6RU.roa (raw, json) Hash identifier: 4YzQmUSZNk/MiJJhcCLJr6/8mE9kJSqUaHrqTVDYREM= Subject key identifier: 99:EC:19:7E:1E:DF:EB:1E:66:15:FF:92:78:14:46:C8:FA:4B:E9:15 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FA1 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mewZfh7f6x5mFf-SeBRGyPpL6RU.roa Signing time: Fri 01 Sep 2023 08:57:18 +0000 ROA not before: Fri 01 Sep 2023 08:57:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 210.62.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4001 (0xfa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=99EC197E1EDFEB1E6615FF92781446C8FA4BE915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b9:a1:b1:68:e7:16:80:1e:12:8f:d3:ca:f0: c9:9a:9c:a0:04:b6:1c:55:dd:cb:05:00:13:63:5d: f1:a8:2d:e8:c9:14:db:44:94:03:1b:7b:e8:78:33: 8b:d0:dd:2e:e0:db:e0:3c:f0:f0:71:9d:65:9c:ab: 49:2c:96:bc:39:e4:d3:2a:27:be:a8:66:41:f7:3a: 59:d2:04:9d:28:0a:d6:af:b1:6a:57:5f:35:ee:df: 2e:5d:01:78:b3:74:81:02:59:57:52:f4:cb:38:a6: ab:e4:e8:31:9a:77:d3:69:eb:a0:a6:31:57:30:28: 1f:47:34:ea:76:89:7c:d5:1c:46:f9:36:9a:ae:26: d4:b3:dc:04:8f:08:57:cd:5a:df:0e:26:4e:5a:6e: ad:f5:14:6f:c9:c5:d9:0e:cf:94:62:e2:cb:0d:04: cd:6b:07:e1:bc:7c:49:50:b9:24:79:8a:ae:2e:b2: d3:d7:9f:f1:d2:1f:ea:a5:77:31:34:64:62:e3:71: de:60:6e:0f:17:69:c8:04:8a:68:fa:2c:c4:30:bc: 23:36:9a:e8:6f:42:b5:fd:da:c1:77:8c:6f:de:a8: 56:8a:39:2c:12:9a:e2:7a:76:21:da:a0:87:df:79: e9:fe:09:82:9f:a9:d3:28:bf:65:c0:ea:c9:9d:99: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EC:19:7E:1E:DF:EB:1E:66:15:FF:92:78:14:46:C8:FA:4B:E9:15 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mewZfh7f6x5mFf-SeBRGyPpL6RU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.248.0/21 Signature Algorithm: sha256WithRSAEncryption 16:1f:5a:23:5b:71:69:3b:41:58:44:0d:ed:46:d2:8a:69:2d: d5:cc:fa:4d:1d:14:f7:98:79:fa:f7:16:18:3b:3b:04:5b:5a: e8:5f:61:8c:4e:07:5b:2a:6a:10:bc:7a:c1:ca:5f:ea:56:f4: da:c5:74:cf:03:d2:2c:2b:11:ed:fd:44:b2:a0:ec:91:e8:50: 51:a0:b8:31:46:1f:d4:34:27:8c:f7:4e:1a:b3:8e:7f:57:c3: 26:3f:2d:29:86:f3:5b:66:23:8a:09:de:21:71:28:53:8b:46: 1e:26:fd:57:ae:1c:45:56:04:a5:14:32:3b:eb:57:8b:e1:17: 2c:87:72:c0:59:8a:8a:b5:34:c9:b9:62:66:00:b5:5c:6a:cd: 50:08:b6:e1:b3:e2:7e:29:ae:74:15:5a:55:90:ee:4e:46:7a: 9d:41:3e:20:08:05:f2:5a:c7:ea:16:d7:65:c7:b1:06:dc:4a: 52:02:b2:20:96:6e:19:ea:d5:e3:8a:6e:68:a2:40:20:a8:5d: cb:46:0b:1f:1a:de:f9:dd:6c:6f:66:87:65:81:8f:ea:42:c7: f5:a0:a2:8c:52:31:58:76:ec:2e:6d:ab:7e:32:27:4c:a1:8c: b8:fd:af:52:9b:16:0e:9a:04:a2:08:68:78:fb:03:e3:db:48: a7:38:e5:ab -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk5RUMxOTdFMUVERkVC MUU2NjE1RkY5Mjc4MTQ0NkM4RkE0QkU5MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpuaGxaOcWgB4Sj9PK8MmanKAEthxV3csFABNjXfGoLejJFNtE lAMbe+h4M4vQ3S7g2+A88PBxnWWcq0kslrw55NMqJ76oZkH3OlnSBJ0oCtavsWpX XzXu3y5dAXizdIECWVdS9Ms4pqvk6DGad9Np66CmMVcwKB9HNOp2iXzVHEb5Npqu JtSz3ASPCFfNWt8OJk5abq31FG/JxdkOz5Ri4ssNBM1rB+G8fElQuSR5iq4ustPX n/HSH+qldzE0ZGLjcd5gbg8XacgEimj6LMQwvCM2muhvQrX92sF3jG/eqFaKOSwS muJ6diHaoIffeen+CYKfqdMov2XA6smdmePNAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUmewZfh7f6x5mFf+SeBRGyPpL6RUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9tZXdaZmg3ZjZ4NW1GZi1TZUJS R3lQcEw2UlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0j74 MA0GCSqGSIb3DQEBCwUAA4IBAQAWH1ojW3FpO0FYRA3tRtKKaS3VzPpNHRT3mHn6 9xYYOzsEW1roX2GMTgdbKmoQvHrByl/qVvTaxXTPA9IsKxHt/USyoOyR6FBRoLgx Rh/UNCeM904as45/V8MmPy0phvNbZiOKCd4hcShTi0YeJv1XrhxFVgSlFDI761eL 4Rcsh3LAWYqKtTTJuWJmALVcas1QCLbhs+J+Ka50FVpVkO5ORnqdQT4gCAXyWsfq Ftdlx7EG3EpSArIglm4Z6tXjim5ookAgqF3LRgsfGt753WxvZodlgY/qQsf1oKKM UjFYduwubat+MidMoYy4/a9SmxYOmgSiCGh4+wPj20inOOWr -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org