$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa File: nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa (raw, json) Hash identifier: l+ifMi29DuIA1JzYJQEuOV16Yp2XwEQM/TzfFYBtcwo= Subject key identifier: 9D:94:49:F8:29:C4:1A:9E:2A:D4:F6:F6:E8:82:C9:5B:D8:47:F1:EE Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F2C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa Signing time: Fri 01 Sep 2023 08:56:42 +0000 ROA not before: Fri 01 Sep 2023 08:56:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 1.160.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3884 (0xf2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9D9449F829C41A9E2AD4F6F6E882C95BD847F1EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:a6:57:f4:2f:65:08:a4:b9:99:54:fd:b3: aa:1d:4b:97:c4:bf:bb:4c:42:b9:f3:9c:ba:8e:41: 95:ea:32:ad:20:21:8e:46:9a:58:ca:04:16:ea:c5: 57:cc:b3:77:15:04:d7:7b:58:d6:62:95:6c:ba:81: 7d:55:56:8f:77:d7:5a:84:d7:77:a5:83:92:ad:f6: 42:99:0f:b5:8a:cc:f8:5f:e2:82:b3:29:d8:b6:21: 5d:58:49:1d:ed:7b:80:4f:a7:ad:ae:30:d1:fa:9e: 71:79:53:5b:17:15:d2:59:20:cf:84:0e:b1:f4:fb: f4:af:0a:5f:96:a4:6e:e6:97:50:f5:fd:70:a6:26: 67:a3:5c:79:68:e3:62:25:43:c5:fc:15:9a:f1:98: b3:b0:30:d6:1f:8e:85:53:9f:34:a6:7c:4b:31:07: 71:2a:b7:f0:e0:90:df:82:f0:10:4b:2f:ac:98:a4: 11:40:02:d9:c5:22:6d:5e:c6:54:b5:94:d5:6d:ce: 75:e4:25:76:50:53:7a:1c:e7:8c:cd:05:65:93:6d: e6:ef:b3:53:8a:48:91:8e:be:6e:08:b1:85:b2:53: e8:e9:ca:ca:e7:ef:9c:85:e1:91:1a:b0:c9:df:44: 07:f7:65:2a:d5:70:3e:27:e1:0e:3b:b6:98:7f:c6: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:49:F8:29:C4:1A:9E:2A:D4:F6:F6:E8:82:C9:5B:D8:47:F1:EE X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 1.160.0.0/12 Signature Algorithm: sha256WithRSAEncryption 0d:65:65:b4:bd:89:ac:75:a2:23:18:e3:ec:a4:b1:98:39:a4: 70:19:52:23:65:5b:1e:ce:11:4a:f7:67:1d:51:96:9b:40:9d: b0:74:84:f0:9d:2b:37:e7:ed:eb:47:f5:5c:ab:eb:43:be:87: 23:0f:8d:75:8a:8d:b4:f5:b2:91:c2:69:c8:4d:6b:21:0c:87: 1f:0e:33:77:90:89:a9:28:35:e5:b1:62:45:44:b0:25:9d:44: fc:cb:fc:2f:c2:34:02:ea:41:de:5a:ff:fa:57:ec:ba:b4:a5: fd:24:ef:7e:c9:a2:46:31:6c:1d:0f:4c:62:a9:0a:cd:c0:ae: d7:63:98:ff:1d:99:d8:b1:19:6d:11:88:fe:af:ab:c5:3e:51: 91:86:ef:b8:49:0f:6a:e6:cb:86:2d:e2:b9:b1:d4:61:0a:a0: 01:1a:79:73:61:e5:34:9d:69:f7:a1:fc:35:6e:10:fa:2a:fd: 42:91:f9:d7:69:67:0b:39:07:a3:a0:f5:ac:f1:55:14:91:f0: c2:21:00:27:2a:04:71:3d:fe:ce:5c:8f:90:c5:a5:1a:6c:aa: 5b:df:47:e0:cd:5b:e8:bc:e3:66:66:19:25:7f:fb:07:75:1c: 54:21:81:5b:57:2a:54:c5:b9:9c:31:d9:4f:3a:4e:b5:f7:6e: 3a:de:89:6d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlEOTQ0OUY4MjlDNDFB OUUyQUQ0RjZGNkU4ODJDOTVCRDg0N0YxRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF8KZX9C9lCKS5mVT9s6odS5fEv7tMQrnznLqOQZXqMq0gIY5G mljKBBbqxVfMs3cVBNd7WNZilWy6gX1VVo9311qE13elg5Kt9kKZD7WKzPhf4oKz Kdi2IV1YSR3te4BPp62uMNH6nnF5U1sXFdJZIM+EDrH0+/SvCl+WpG7ml1D1/XCm JmejXHlo42IlQ8X8FZrxmLOwMNYfjoVTnzSmfEsxB3Eqt/DgkN+C8BBLL6yYpBFA AtnFIm1exlS1lNVtznXkJXZQU3oc54zNBWWTbebvs1OKSJGOvm4IsYWyU+jpysrn 75yF4ZEasMnfRAf3ZSrVcD4n4Q47tph/xjp7AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUnZRJ+CnEGp4q1Pb26ILJW9hH8e4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uWlJKLUNuRUdwNHExUGIyNklM Slc5aEg4ZTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEAaAw DQYJKoZIhvcNAQELBQADggEBAA1lZbS9iax1oiMY4+yksZg5pHAZUiNlWx7OEUr3 Zx1RlptAnbB0hPCdKzfn7etH9Vyr60O+hyMPjXWKjbT1spHCachNayEMhx8OM3eQ iakoNeWxYkVEsCWdRPzL/C/CNALqQd5a//pX7Lq0pf0k737JokYxbB0PTGKpCs3A rtdjmP8dmdixGW0RiP6vq8U+UZGG77hJD2rmy4Yt4rmx1GEKoAEaeXNh5TSdafeh /DVuEPoq/UKR+ddpZws5B6Og9azxVRSR8MIhACcqBHE9/s5cj5DFpRpsqlvfR+DN W+i842ZmGSV/+wd1HFQhgVtXKlTFuZwx2U86TrX3bjreiW0= -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:04 2024 by rpki-client on console-ams.rpki-client.org