$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/msICjnuxsA2kgKe6h4KIlcaYKII.roa File: msICjnuxsA2kgKe6h4KIlcaYKII.roa (raw, json) Hash identifier: 2jUurzYhhS+NVby53brW1id8yDJKV0QHtV26N9FumNw= Subject key identifier: 9A:C2:02:8E:7B:B1:B0:0D:A4:80:A7:BA:87:82:88:95:C6:98:28:82 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F49 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/msICjnuxsA2kgKe6h4KIlcaYKII.roa Signing time: Fri 01 Sep 2023 08:56:52 +0000 ROA not before: Fri 01 Sep 2023 08:56:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 15133 IP address blocks: 61.221.181.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3913 (0xf49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9AC2028E7BB1B00DA480A7BA87828895C6982882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:27:0e:79:16:57:7c:cc:f0:5f:bd:a5:25: 4e:73:48:08:38:70:fc:5a:be:6c:70:35:de:4a:34: 98:2d:67:ee:38:ed:a5:1b:4a:eb:86:5b:0e:07:7d: b1:db:2e:c3:7f:f0:58:06:8a:25:97:ce:4c:4e:d8: e9:12:78:e7:f3:ef:45:80:18:a3:60:34:f0:6a:22: 85:b4:65:a1:c5:de:82:2f:9d:37:eb:7f:d6:31:ce: 5d:94:67:20:18:3a:bb:be:71:47:a3:b6:92:56:df: 95:98:01:6c:3c:4b:a4:d2:9b:3d:fb:5b:60:f0:37: a6:71:7b:d5:ef:74:a9:6a:f8:3c:11:3c:66:b7:ec: 73:01:9f:3e:1f:04:24:95:f1:4d:94:b7:09:2f:cf: 05:ee:95:8c:ec:06:41:ec:e9:21:7d:31:94:53:b1: c7:d7:de:d7:0f:7c:27:dc:43:fd:8c:19:77:fb:df: 71:be:a1:1a:4e:5d:98:f5:ed:9d:9d:3f:36:d6:1a: cd:28:24:67:1a:f5:d1:90:63:ba:61:de:49:fb:af: 43:bd:34:f0:d6:f8:2b:f1:ac:f9:d5:cd:9a:00:6f: 1d:dd:00:17:6a:9c:2c:f7:66:4b:86:78:93:fe:3b: d4:87:e0:f0:29:77:dd:a9:4c:54:63:55:18:6e:1c: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C2:02:8E:7B:B1:B0:0D:A4:80:A7:BA:87:82:88:95:C6:98:28:82 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/msICjnuxsA2kgKe6h4KIlcaYKII.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.221.181.64/26 Signature Algorithm: sha256WithRSAEncryption 84:a9:66:b0:9b:15:60:de:cf:9c:22:d8:14:86:54:97:04:60: ee:ae:f5:de:8c:d2:8d:c0:53:a2:16:ae:10:75:6e:8f:54:75: 95:49:c6:1e:63:5b:65:00:1e:8e:67:de:db:6f:56:8e:1b:36: 9f:2b:2a:44:c5:a5:ce:43:ec:65:41:55:c9:2b:e1:f5:6b:bd: ff:06:45:46:50:bc:0a:57:37:5d:96:f0:fa:28:7f:e8:e5:ab: 5f:a5:47:17:01:52:2a:ea:46:e3:04:fb:78:57:c5:1e:74:08: 08:a9:0d:25:07:63:37:49:11:43:a1:2f:40:54:0b:42:40:88: 16:81:b5:d5:c5:ec:5b:e0:57:b6:77:cf:80:6d:fe:df:0e:da: 08:9f:2b:6d:42:c7:05:13:74:83:13:09:45:c2:9b:91:ef:a4: 0e:af:35:f1:96:76:46:d2:d2:08:7d:23:5c:a9:ab:74:e5:8a: 24:b6:b9:8e:43:c3:9d:8e:f1:8c:73:75:61:f1:a4:56:60:b8: 8a:b1:02:88:7b:1b:11:5a:b3:fe:af:04:08:81:6c:70:6e:83: 2b:e7:70:f3:07:5e:01:d8:77:39:8e:6d:02:80:49:cb:d5:ca: 24:36:22:db:fe:43:e3:a1:4c:a6:b8:19:cf:01:8e:bf:65:05: 30:f4:f7:60 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICD0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlBQzIwMjhFN0JCMUIw MERBNDgwQTdCQTg3ODI4ODk1QzY5ODI4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjkCcOeRZXfMzwX72lJU5zSAg4cPxavmxwNd5KNJgtZ+447aUb SuuGWw4HfbHbLsN/8FgGiiWXzkxO2OkSeOfz70WAGKNgNPBqIoW0ZaHF3oIvnTfr f9Yxzl2UZyAYOru+cUejtpJW35WYAWw8S6TSmz37W2DwN6Zxe9XvdKlq+DwRPGa3 7HMBnz4fBCSV8U2UtwkvzwXulYzsBkHs6SF9MZRTscfX3tcPfCfcQ/2MGXf733G+ oRpOXZj17Z2dPzbWGs0oJGca9dGQY7ph3kn7r0O9NPDW+CvxrPnVzZoAbx3dABdq nCz3ZkuGeJP+O9SH4PApd92pTFRjVRhuHL1dAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUmsICjnuxsA2kgKe6h4KIlcaYKIIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9tc0lDam51eHNBMmtnS2U2aDRL SWxjYVlLSUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPd21 QDANBgkqhkiG9w0BAQsFAAOCAQEAhKlmsJsVYN7PnCLYFIZUlwRg7q713ozSjcBT ohauEHVuj1R1lUnGHmNbZQAejmfe229Wjhs2nysqRMWlzkPsZUFVySvh9Wu9/wZF RlC8Clc3XZbw+ih/6OWrX6VHFwFSKupG4wT7eFfFHnQICKkNJQdjN0kRQ6EvQFQL QkCIFoG11cXsW+BXtnfPgG3+3w7aCJ8rbULHBRN0gxMJRcKbke+kDq818ZZ2RtLS CH0jXKmrdOWKJLa5jkPDnY7xjHN1YfGkVmC4irECiHsbEVqz/q8ECIFscG6DK+dw 8wdeAdh3OY5tAoBJy9XKJDYi2/5D46FMprgZzwGOv2UFMPT3YA== -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org