$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa File: nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa (raw, json) Hash identifier: M8j/GROvxM+cRJgBqTaPIWBtvJl4Px1vKOcV7C6E+UQ= Subject key identifier: 9C:B4:70:62:1F:92:2E:67:F6:FE:10:BE:E9:78:00:C4:75:9A:51:D1 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FB9 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa Signing time: Fri 01 Sep 2023 08:57:25 +0000 ROA not before: Fri 01 Sep 2023 08:57:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 203.69.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4025 (0xfb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:25 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9CB470621F922E67F6FE10BEE97800C4759A51D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:a9:a2:83:59:fa:d3:e4:84:c0:fa:f8:5f: 18:f4:df:d3:ab:66:8b:8d:a7:24:50:c6:80:47:b4: aa:42:47:9a:c8:d7:13:27:84:6a:04:ad:d8:11:b3: a1:64:4b:36:2f:51:01:e7:56:c6:5d:dd:e3:ba:75: f6:a9:3f:94:dc:26:eb:d9:f7:51:8c:88:f9:80:fa: 12:2a:4a:a3:78:c2:99:3e:b8:81:f4:65:87:a2:8c: 0d:4b:d0:fd:92:f1:c1:17:42:c6:e4:a0:62:e6:71: d5:f2:27:1a:22:77:03:d3:81:4f:4e:25:29:66:bd: 53:7b:4f:f8:61:b4:a0:7e:e4:fe:ef:b7:45:05:42: ea:44:aa:1b:9b:6f:c9:31:a4:37:41:50:ab:78:2a: 3f:ac:70:c6:ed:0c:16:ca:2b:e7:b4:5d:1c:76:16: 79:72:c4:61:3b:1c:4c:1d:30:fd:27:61:0a:9f:5a: 5f:1e:91:a9:9b:52:46:5e:0d:36:7c:5b:22:4d:e6: 19:83:85:64:33:16:9b:02:f7:a7:0b:09:e1:30:65: 58:ab:7c:1e:ac:38:dc:63:9f:ca:48:89:28:3f:59: 14:7d:f4:b4:ab:53:0d:ae:6c:9b:5a:d4:a9:9e:e4: 8d:4a:e1:b1:5b:10:9e:e8:fe:a8:95:32:a9:a7:95: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B4:70:62:1F:92:2E:67:F6:FE:10:BE:E9:78:00:C4:75:9A:51:D1 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.69.0.0/16 Signature Algorithm: sha256WithRSAEncryption c3:12:ea:5a:dd:3f:2d:65:64:e5:b9:b5:15:63:59:5d:d1:f3: 15:15:22:8f:f4:8d:43:e4:c7:fc:9b:84:d6:7f:87:de:9f:1e: 06:de:2a:47:39:8c:b7:b5:7e:e1:23:cc:1e:f7:e8:22:bb:1c: b6:fd:b5:e6:46:04:56:34:90:fa:e3:bb:f1:48:95:28:53:c9: 4b:08:f8:2a:3f:2e:c5:79:e2:f0:16:2b:dd:16:0d:b7:2e:89: ed:26:98:2c:75:be:a3:f6:6a:e4:71:60:da:5d:d2:4c:95:44: 54:3b:65:9d:53:9e:60:e8:85:6a:69:52:db:6b:30:49:29:7a: 90:e9:b8:a3:68:d2:af:30:32:50:5d:9a:7c:77:ca:a2:e1:5a: 4a:72:c2:bd:0f:53:87:7c:7e:7b:8a:77:d6:37:42:1e:9f:2f: 47:ce:89:5c:d5:3f:0d:0b:cc:78:bc:ac:b4:75:f0:b9:77:08: fa:75:40:25:8c:99:c5:f5:9a:ee:cb:06:40:4c:74:7c:0c:06: 1e:57:e2:d4:d0:8e:60:d0:b2:af:91:41:61:1b:97:ca:bb:4f: e4:f9:5d:45:31:03:5b:66:11:b6:95:59:b0:8b:a5:d4:c1:5b: b6:d4:f4:25:10:c4:6b:40:6e:b2:e4:36:01:20:78:e1:21:07: ad:ba:00:8b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlDQjQ3MDYyMUY5MjJF NjdGNkZFMTBCRUU5NzgwMEM0NzU5QTUxRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3C6mig1n60+SEwPr4Xxj039OrZouNpyRQxoBHtKpCR5rI1xMn hGoErdgRs6FkSzYvUQHnVsZd3eO6dfapP5TcJuvZ91GMiPmA+hIqSqN4wpk+uIH0 ZYeijA1L0P2S8cEXQsbkoGLmcdXyJxoidwPTgU9OJSlmvVN7T/hhtKB+5P7vt0UF QupEqhubb8kxpDdBUKt4Kj+scMbtDBbKK+e0XRx2FnlyxGE7HEwdMP0nYQqfWl8e kambUkZeDTZ8WyJN5hmDhWQzFpsC96cLCeEwZVirfB6sONxjn8pIiSg/WRR99LSr Uw2ubJta1Kme5I1K4bFbEJ7o/qiVMqmnlb/vAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUnLRwYh+SLmf2/hC+6XgAxHWaUdEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uTFJ3WWgtU0xtZjJfaEMtNlhn QXhIV2FVZEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0Uw DQYJKoZIhvcNAQELBQADggEBAMMS6lrdPy1lZOW5tRVjWV3R8xUVIo/0jUPkx/yb hNZ/h96fHgbeKkc5jLe1fuEjzB736CK7HLb9teZGBFY0kPrju/FIlShTyUsI+Co/ LsV54vAWK90WDbcuie0mmCx1vqP2auRxYNpd0kyVRFQ7ZZ1TnmDohWppUttrMEkp epDpuKNo0q8wMlBdmnx3yqLhWkpywr0PU4d8fnuKd9Y3Qh6fL0fOiVzVPw0LzHi8 rLR18Ll3CPp1QCWMmcX1mu7LBkBMdHwMBh5X4tTQjmDQsq+RQWEbl8q7T+T5XUUx A1tmEbaVWbCLpdTBW7bU9CUQxGtAbrLkNgEgeOEhB626AIs= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:04 2024 by rpki-client on console-ams.rpki-client.org