$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/t8ugT-7mpphV0DyuXpeD7BLb0tc.roa File: t8ugT-7mpphV0DyuXpeD7BLb0tc.roa (raw, json) Hash identifier: SWqEtt3RXRE8xvf8kClycmYcCt/yXR+7vtOKgc6nFrs= Subject key identifier: B7:CB:A0:4F:EE:E6:A6:98:55:D0:3C:AE:5E:97:83:EC:12:DB:D2:D7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FC3 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/t8ugT-7mpphV0DyuXpeD7BLb0tc.roa Signing time: Fri 01 Sep 2023 08:57:27 +0000 ROA not before: Fri 01 Sep 2023 08:57:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 1.34.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4035 (0xfc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B7CBA04FEEE6A69855D03CAE5E9783EC12DBD2D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:7f:ff:3c:52:25:3e:ac:83:d8:be:81:3f: 38:18:32:dc:0d:9b:99:a8:3a:59:b1:91:44:8e:29: 15:ab:2f:13:ed:08:0c:bf:e6:da:b7:8d:a9:79:1f: 9f:2c:33:26:b0:3e:69:40:51:03:26:06:11:c5:0f: d8:bc:c3:16:89:d3:21:00:08:1b:65:52:46:44:0f: 5e:68:61:14:e2:37:74:e0:6c:66:c5:2c:9e:8e:b6: 6b:57:c8:8d:c5:4d:e5:c2:6c:18:15:d6:56:55:cd: 8d:d5:f8:03:e8:d8:a5:77:3a:4b:a6:4f:fe:3f:77: 6b:68:c2:8b:7f:98:91:c8:09:3d:8c:69:f9:7a:26: 44:6b:c0:8b:78:a3:c0:19:24:d2:ba:dc:5c:c9:8e: af:79:2a:36:4d:4a:cc:49:1e:07:16:c3:1c:80:f4: 2e:ce:6e:e9:c9:4b:8d:b2:bc:ae:60:47:d2:c6:5d: ed:ac:4b:ab:c7:91:05:6b:f7:d2:99:80:ec:0b:1c: 5b:90:d1:33:84:c2:0a:39:ba:96:0b:1d:7e:83:de: fc:0f:f7:79:f4:8c:91:28:93:a7:00:80:65:5a:df: 6d:cb:2a:5d:e3:e5:4a:fc:3b:5e:69:ac:c3:9a:6e: e7:75:22:98:dc:c6:48:8b:1d:60:72:e8:61:c4:d5: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:A0:4F:EE:E6:A6:98:55:D0:3C:AE:5E:97:83:EC:12:DB:D2:D7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/t8ugT-7mpphV0DyuXpeD7BLb0tc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 1.34.0.0/15 Signature Algorithm: sha256WithRSAEncryption c4:82:61:6b:7e:af:16:09:6f:dc:36:34:60:a6:a2:79:5a:e0: 97:38:e0:db:87:50:4e:ad:36:f1:ce:a3:53:aa:65:c3:00:b8: b6:db:d4:4a:73:d6:e1:0e:43:d6:b6:bd:e8:1b:71:de:e1:7a: 5c:51:48:1f:22:a2:f1:93:a1:3d:a4:d6:83:29:05:1a:2a:a6: b8:29:f7:c4:49:25:86:9e:33:d4:83:89:be:d1:2a:74:c2:08: bc:6a:33:9c:a3:27:91:50:7d:e5:c4:be:dc:29:17:21:bc:ad: 39:a6:ff:eb:cf:89:29:f6:a2:68:e9:91:01:90:dd:4e:bf:22: fb:e6:7c:10:39:c7:43:36:95:e3:dd:cc:d6:c8:4f:08:c3:8c: dc:19:7f:9a:20:3d:65:28:38:ea:2c:63:0b:b1:af:4c:3f:16: 3e:55:19:49:b1:51:ca:b0:5d:39:d2:12:7a:d8:a1:a3:d9:40: d5:6c:e2:7d:fc:5c:76:82:84:5c:03:ce:c2:5b:d1:5b:d9:0b: 1d:c0:66:39:11:7c:ef:33:57:ad:c1:c2:67:58:b7:29:66:af: 98:2e:c2:47:dc:b5:24:8a:9f:be:a9:51:7c:45:c0:4b:ec:7e: 89:bc:a7:16:27:c3:c9:e3:a5:70:79:07:cb:0f:a0:b1:da:a2: a9:e6:52:fe -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3Q0JBMDRGRUVFNkE2 OTg1NUQwM0NBRTVFOTc4M0VDMTJEQkQyRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChl3//PFIlPqyD2L6BPzgYMtwNm5moOlmxkUSOKRWrLxPtCAy/ 5tq3jal5H58sMyawPmlAUQMmBhHFD9i8wxaJ0yEACBtlUkZED15oYRTiN3TgbGbF LJ6OtmtXyI3FTeXCbBgV1lZVzY3V+APo2KV3OkumT/4/d2towot/mJHICT2Mafl6 JkRrwIt4o8AZJNK63FzJjq95KjZNSsxJHgcWwxyA9C7ObunJS42yvK5gR9LGXe2s S6vHkQVr99KZgOwLHFuQ0TOEwgo5upYLHX6D3vwP93n0jJEok6cAgGVa323LKl3j 5Ur8O15prMOabud1IpjcxkiLHWBy6GHE1RCrAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUt8ugT+7mpphV0DyuXpeD7BLb0tcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC90OHVnVC03bXBwaFYwRHl1WHBl RDdCTGIwdGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBASIw DQYJKoZIhvcNAQELBQADggEBAMSCYWt+rxYJb9w2NGCmonla4Jc44NuHUE6tNvHO o1OqZcMAuLbb1Epz1uEOQ9a2vegbcd7helxRSB8iovGToT2k1oMpBRoqprgp98RJ JYaeM9SDib7RKnTCCLxqM5yjJ5FQfeXEvtwpFyG8rTmm/+vPiSn2omjpkQGQ3U6/ IvvmfBA5x0M2lePdzNbITwjDjNwZf5ogPWUoOOosYwuxr0w/Fj5VGUmxUcqwXTnS EnrYoaPZQNVs4n38XHaChFwDzsJb0VvZCx3AZjkRfO8zV63BwmdYtylmr5guwkfc tSSKn76pUXxFwEvsfom8pxYnw8njpXB5B8sPoLHaoqnmUv4= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:38 2024 by rpki-client on console-fra.rpki-client.org