$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa File: yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa (raw, json) Hash identifier: vs46lLp4Csb/H13FIwk7PM5k2hnq48DSV5bQVc2N9L8= Subject key identifier: CA:B4:BA:71:86:AA:5C:4E:F0:F3:83:49:0A:38:F6:45:F0:4E:33:74 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F33 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa Signing time: Fri 01 Sep 2023 08:56:44 +0000 ROA not before: Fri 01 Sep 2023 08:56:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9505 IP address blocks: 175.41.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3891 (0xf33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:44 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CAB4BA7186AA5C4EF0F383490A38F645F04E3374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:99:1d:4c:c8:5e:42:32:a4:44:40:9a:1d: f5:c5:05:50:c0:29:c1:d9:c9:1c:d3:c1:83:82:09: 6b:4d:21:39:b5:4d:51:e8:79:5c:d0:84:9d:0e:49: 86:38:cc:aa:bf:d0:e7:12:43:a9:d2:09:c3:03:08: a4:a7:0e:49:a0:a6:87:dd:32:7c:d4:76:99:cb:d4: ba:e7:36:2a:89:d5:9c:bb:69:32:3f:fc:60:00:4b: c3:4b:08:c1:7a:8d:83:13:b9:ea:0a:89:d1:72:fa: 40:13:d0:b7:3e:d4:ff:68:fb:91:4b:6b:95:00:61: f9:2f:07:2c:75:ea:99:2d:6c:d1:b8:92:3d:f9:a6: ae:74:33:e9:6f:0f:91:26:61:1b:a2:ae:e7:64:7c: b3:a4:48:df:f1:51:f5:07:16:93:22:38:c2:21:d4: 80:1d:a9:f1:a9:f9:1c:58:8e:91:29:f2:be:5a:fd: f9:df:c8:b9:60:08:7f:22:71:dd:b1:16:7a:63:98: 9c:f3:46:0f:0b:e5:2e:a4:43:8e:71:54:bf:14:ce: 8f:51:5b:0a:f3:39:61:83:32:3f:21:cb:99:42:df: c2:1b:c6:0b:b2:13:d6:5e:2f:df:3c:0a:75:c8:46: 5d:a4:f3:3c:4d:c8:18:45:5d:c2:47:ff:8d:29:92: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:BA:71:86:AA:5C:4E:F0:F3:83:49:0A:38:F6:45:F0:4E:33:74 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.41.48.0/20 Signature Algorithm: sha256WithRSAEncryption 93:e3:48:ee:55:87:35:da:4c:30:9c:69:ba:ce:4c:e7:d4:83: d4:0d:70:e6:62:eb:15:6b:98:33:69:62:d8:90:fc:49:fd:01: 99:b6:c9:f2:59:0e:f3:3f:02:12:87:4c:a6:6d:22:da:81:0e: 1f:42:56:ed:52:da:4a:56:a3:dd:34:e8:34:bd:34:8f:cd:bc: f5:b5:d0:90:94:20:23:ea:de:19:53:8c:e4:99:66:e4:a2:97: 18:2d:6f:33:2f:55:85:a4:3c:f8:32:5a:db:a3:af:51:8e:d8: b8:11:da:b3:16:5f:f3:64:0a:51:db:d5:d3:75:23:84:d2:6f: e8:af:bf:b5:aa:38:3d:c7:63:ec:f6:7e:2b:a3:64:15:6c:d9: 49:61:39:1e:ce:b2:7d:db:ee:3b:07:8d:8f:cf:b6:a0:50:d1: ec:1c:0b:f5:bb:f1:6c:57:4e:43:d3:42:28:ac:b5:c0:fd:ea: 8b:40:cf:f1:b6:44:fc:1f:a9:bf:87:13:39:a4:4d:74:ee:59: fd:88:68:ef:f5:11:ba:c4:cc:9e:3f:17:4c:4a:8e:42:d6:0d: 27:fd:1f:9d:99:84:1b:4c:73:7e:be:aa:78:09:a4:3a:6d:c8: 40:48:89:a9:b3:77:c1:66:59:4f:e3:c8:56:75:4e:c5:4f:c1: 62:f3:40:62 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENBQjRCQTcxODZBQTVD NEVGMEYzODM0OTBBMzhGNjQ1RjA0RTMzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHgpkdTMheQjKkRECaHfXFBVDAKcHZyRzTwYOCCWtNITm1TVHo eVzQhJ0OSYY4zKq/0OcSQ6nSCcMDCKSnDkmgpofdMnzUdpnL1LrnNiqJ1Zy7aTI/ /GAAS8NLCMF6jYMTueoKidFy+kAT0Lc+1P9o+5FLa5UAYfkvByx16pktbNG4kj35 pq50M+lvD5EmYRuirudkfLOkSN/xUfUHFpMiOMIh1IAdqfGp+RxYjpEp8r5a/fnf yLlgCH8icd2xFnpjmJzzRg8L5S6kQ45xVL8Uzo9RWwrzOWGDMj8hy5lC38Ibxguy E9ZeL988CnXIRl2k8zxNyBhFXcJH/40pktTrAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUyrS6cYaqXE7w84NJCjj2RfBOM3QwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC95clM2Y1lhcVhFN3c4NE5KQ2pq MlJmQk9NM1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErykw MA0GCSqGSIb3DQEBCwUAA4IBAQCT40juVYc12kwwnGm6zkzn1IPUDXDmYusVa5gz aWLYkPxJ/QGZtsnyWQ7zPwISh0ymbSLagQ4fQlbtUtpKVqPdNOg0vTSPzbz1tdCQ lCAj6t4ZU4zkmWbkopcYLW8zL1WFpDz4Mlrbo69Rjti4EdqzFl/zZApR29XTdSOE 0m/or7+1qjg9x2Ps9n4ro2QVbNlJYTkezrJ92+47B42Pz7agUNHsHAv1u/FsV05D 00IorLXA/eqLQM/xtkT8H6m/hxM5pE107ln9iGjv9RG6xMyePxdMSo5C1g0n/R+d mYQbTHN+vqp4CaQ6bchASImps3fBZllP48hWdU7FT8Fi80Bi -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:38 2024 by rpki-client on console-fra.rpki-client.org