$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/neGXyXsze1F0hIM2YDyH8wwV3U0.roa File: neGXyXsze1F0hIM2YDyH8wwV3U0.roa (raw, json) Hash identifier: KJuZbnVKXZTvD5sfdicZAS0/kLYLJpT8+oRE09iqjfQ= Subject key identifier: 9D:E1:97:C9:7B:33:7B:51:74:84:83:36:60:3C:87:F3:0C:15:DD:4D Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F85 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/neGXyXsze1F0hIM2YDyH8wwV3U0.roa Signing time: Fri 01 Sep 2023 08:57:10 +0000 ROA not before: Fri 01 Sep 2023 08:57:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131660 IP address blocks: 2001:b000:591::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3973 (0xf85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9DE197C97B337B5174848336603C87F30C15DD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:03:aa:f3:b2:d2:ba:e1:56:69:a1:af:85:e5: 57:cb:14:b9:35:fe:2d:29:fa:04:e6:b6:66:d9:f7: 87:07:ef:38:2f:88:f0:77:05:16:9e:89:15:43:60: 2d:83:1e:50:0c:94:7c:de:ad:a0:a5:64:68:04:bd: 74:e7:11:1f:d3:4e:d2:22:2c:d9:28:eb:8c:63:a7: be:59:9b:8b:32:73:66:a0:fd:d4:fc:89:ad:56:36: cb:4d:0b:9d:2f:41:50:15:01:ac:40:43:d8:3b:2d: bc:06:16:5d:02:53:59:21:8b:db:c4:a5:e0:3f:fb: a4:26:1a:62:52:25:f5:bc:fe:7a:ee:41:ba:74:d7: 69:6f:f3:fb:a7:a2:d8:b7:78:68:b4:1b:98:c6:ff: 27:3e:35:f9:96:57:f9:08:2c:f0:f3:99:ac:3a:6b: 15:10:c7:ab:3a:16:88:d4:54:74:bf:8e:a0:a4:69: 83:e8:f1:ff:41:cf:18:6f:b3:43:97:5d:c4:df:74: 3d:81:f2:ed:7d:16:14:70:14:1d:12:53:cd:7f:ee: 8b:ef:49:74:b3:7a:a8:19:db:66:cc:50:23:0e:c9: 04:8b:43:ae:29:c8:16:d3:87:01:47:ff:0b:0f:40: 6f:94:34:5a:84:a9:a9:da:7d:d8:e4:1f:1f:78:32: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E1:97:C9:7B:33:7B:51:74:84:83:36:60:3C:87:F3:0C:15:DD:4D X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/neGXyXsze1F0hIM2YDyH8wwV3U0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000:591::/48 Signature Algorithm: sha256WithRSAEncryption a3:82:2b:c5:5b:25:ed:ee:a9:47:1e:de:d9:d8:20:4b:bd:5c: 2b:4b:78:55:ec:1e:a6:63:35:a4:52:c4:06:f1:3c:ea:26:f3: ae:54:09:57:40:82:10:5f:42:94:35:20:c8:ad:7f:2e:4a:bb: d3:69:4b:61:21:65:08:2f:4b:66:f0:2b:14:b8:54:f7:ac:9e: 2c:56:c5:04:b9:4a:63:d4:be:cb:c0:30:ea:a1:48:f8:d9:a5: ec:82:62:5f:2c:98:29:b8:8d:52:b4:78:14:0d:e3:51:7f:ec: ac:77:21:29:76:f4:89:0f:24:23:3e:39:77:7b:9a:f3:34:e7: 42:fc:77:38:6e:70:32:f2:63:9c:46:42:eb:bb:7f:21:02:ec: 83:d7:62:fc:c7:01:78:2e:36:ad:09:56:4e:8e:1c:1f:81:e5: 74:4b:3f:df:2c:c2:87:3f:b1:ed:fe:ca:08:5e:dc:2a:9b:90: 52:69:3a:15:59:89:f2:14:1d:3c:49:22:42:00:e8:a5:8c:5f: af:68:df:ce:ed:44:d3:fe:a9:7b:60:32:fc:58:13:b3:4b:39: ed:cf:f6:cf:fa:82:39:d4:e7:c5:3d:4e:6d:d0:f3:c0:1a:9e: 97:0e:3f:63:d5:13:6f:95:20:5b:83:78:f2:ef:5b:de:bf:6b: 46:37:1d:f7 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlERTE5N0M5N0IzMzdC NTE3NDg0ODMzNjYwM0M4N0YzMEMxNURENEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqA6rzstK64VZpoa+F5VfLFLk1/i0p+gTmtmbZ94cH7zgviPB3 BRaeiRVDYC2DHlAMlHzeraClZGgEvXTnER/TTtIiLNko64xjp75Zm4syc2ag/dT8 ia1WNstNC50vQVAVAaxAQ9g7LbwGFl0CU1khi9vEpeA/+6QmGmJSJfW8/nruQbp0 12lv8/unoti3eGi0G5jG/yc+NfmWV/kILPDzmaw6axUQx6s6FojUVHS/jqCkaYPo 8f9Bzxhvs0OXXcTfdD2B8u19FhRwFB0SU81/7ovvSXSzeqgZ22bMUCMOyQSLQ64p yBbThwFH/wsPQG+UNFqEqanafdjkHx94Mq8rAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUneGXyXsze1F0hIM2YDyH8wwV3U0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uZUdYeVhzemUxRjBoSU0yWUR5 SDh3d1YzVTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw AAWRMA0GCSqGSIb3DQEBCwUAA4IBAQCjgivFWyXt7qlHHt7Z2CBLvVwrS3hV7B6m YzWkUsQG8TzqJvOuVAlXQIIQX0KUNSDIrX8uSrvTaUthIWUIL0tm8CsUuFT3rJ4s VsUEuUpj1L7LwDDqoUj42aXsgmJfLJgpuI1StHgUDeNRf+ysdyEpdvSJDyQjPjl3 e5rzNOdC/Hc4bnAy8mOcRkLru38hAuyD12L8xwF4LjatCVZOjhwfgeV0Sz/fLMKH P7Ht/soIXtwqm5BSaToVWYnyFB08SSJCAOiljF+vaN/O7UTT/ql7YDL8WBOzSznt z/bP+oI51OfFPU5t0PPAGp6XDj9j1RNvlSBbg3jy71vev2tGNx33 -----END CERTIFICATE-----Generated at Tue Jun 18 12:54:04 2024 by rpki-client on console-ams.rpki-client.org