$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/HpcaO0N_4L3MgLENs5NUyqmCsfg.roa File: HpcaO0N_4L3MgLENs5NUyqmCsfg.roa (raw, json) Hash identifier: KfK12bjunCddTJawovMUm8/3rylYYGgNpQK9FP/Dmjc= Subject key identifier: 1E:97:1A:3B:43:7F:E0:BD:CC:80:B1:0D:B3:93:54:CA:A9:82:B1:F8 Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0B45 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/HpcaO0N_4L3MgLENs5NUyqmCsfg.roa Signing time: Fri 01 Sep 2023 08:48:46 +0000 ROA not before: Fri 01 Sep 2023 08:48:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18411 IP address blocks: 61.56.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2885 (0xb45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Sep 1 08:48:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1E971A3B437FE0BDCC80B10DB39354CAA982B1F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:ca:f6:37:d7:44:6a:83:48:f9:59:64:fa: db:05:7c:cf:69:ae:b0:ac:76:b8:00:84:12:02:c5: 07:be:56:fb:5d:e4:53:fe:85:15:57:c2:6b:a7:f4: 7f:ff:d5:f1:20:c4:56:dc:eb:d7:c6:f4:2b:c4:0a: d5:f9:7b:4b:3f:9a:7c:18:67:7d:84:75:e9:73:59: b5:57:7a:b1:6e:5a:c3:66:39:c3:36:b4:5f:3a:24: c7:ad:e6:aa:e3:f7:90:6b:4a:37:79:02:81:c7:b7: 46:24:2c:84:7d:6f:be:7c:c7:21:f7:a5:6e:c5:da: a8:e7:cf:9c:7a:62:2e:fa:e7:c4:2c:0d:54:8c:f4: 0e:dd:23:40:5e:a4:59:f5:23:73:0a:d3:60:2b:e7: e2:3a:fa:8d:b8:e0:d8:e3:79:0c:62:f6:d6:da:75: f9:4d:a7:5a:12:38:6d:02:8e:74:0b:3f:0a:42:16: c4:10:70:8d:7f:76:fc:98:88:65:a4:6d:20:e3:47: 89:29:8e:80:2c:3c:76:32:93:d8:be:e4:b4:ab:c3: eb:6a:50:1f:28:37:9d:ee:d4:07:53:b0:4e:04:88: 26:49:a2:51:64:5a:7a:ab:c8:dc:28:ed:09:8b:81: 27:ed:bd:a8:46:72:24:a0:1a:6f:8c:b7:95:9c:60: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:97:1A:3B:43:7F:E0:BD:CC:80:B1:0D:B3:93:54:CA:A9:82:B1:F8 X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/HpcaO0N_4L3MgLENs5NUyqmCsfg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.16.0/20 Signature Algorithm: sha256WithRSAEncryption 33:0f:c7:51:b3:c6:64:7d:25:c9:fc:fb:8f:7c:fd:87:21:84: 0c:d3:e3:8d:c3:5a:04:18:cc:e4:5f:6a:7e:09:1c:a5:49:a7: 95:93:d8:59:5b:b3:29:27:03:71:0f:3b:b5:9f:7c:2c:4c:d9: 99:68:17:e5:5d:09:69:9d:0c:17:8c:61:fd:33:7f:41:c2:ef: 56:82:1a:ee:eb:4c:7a:2e:e5:34:6a:27:47:39:b6:59:e9:21: b7:7c:ac:ce:96:89:14:d7:a9:c5:fa:f0:f1:eb:4c:10:3c:f8: a4:52:33:05:d9:9f:f0:1a:30:4f:fb:47:e0:cd:aa:9a:0d:d0: 8a:de:3f:11:c2:21:4d:68:e0:fb:24:b1:db:93:e8:ef:b2:23: 44:5e:f6:9d:e0:04:e0:33:33:d7:f8:ec:dc:dd:b1:d2:cd:5d: b4:05:8a:aa:5c:ae:29:47:ac:84:09:27:75:6b:aa:a4:9c:31: 3e:3c:f7:d6:e0:97:c4:a4:c9:b4:46:cc:94:1f:e9:49:60:8e: 3b:10:89:12:ea:2f:ea:3a:dc:1c:38:4a:ac:7a:7c:4f:b4:96: 8f:4f:35:03:3d:59:a0:f2:c1:11:14:cd:a7:c7:0c:9e:a7:50: 28:78:c8:1f:4b:98:64:ea:3d:32:4c:59:70:06:63:cd:44:1c: 7e:2c:9e:99 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yMzA5MDEw ODQ4NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFFOTcxQTNCNDM3RkUw QkRDQzgwQjEwREIzOTM1NENBQTk4MkIxRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIXsr2N9dEaoNI+Vlk+tsFfM9prrCsdrgAhBICxQe+Vvtd5FP+ hRVXwmun9H//1fEgxFbc69fG9CvECtX5e0s/mnwYZ32EdelzWbVXerFuWsNmOcM2 tF86JMet5qrj95BrSjd5AoHHt0YkLIR9b758xyH3pW7F2qjnz5x6Yi7658QsDVSM 9A7dI0BepFn1I3MK02Ar5+I6+o244NjjeQxi9tbadflNp1oSOG0CjnQLPwpCFsQQ cI1/dvyYiGWkbSDjR4kpjoAsPHYyk9i+5LSrw+tqUB8oN53u1AdTsE4EiCZJolFk WnqryNwo7QmLgSftvahGciSgGm+Mt5WcYPBlAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUHpcaO0N/4L3MgLENs5NUyqmCsfgwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9IcGNhTzBOXzRMM01nTEVOczVO VXlxbUNzZmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTgQ MA0GCSqGSIb3DQEBCwUAA4IBAQAzD8dRs8ZkfSXJ/PuPfP2HIYQM0+ONw1oEGMzk X2p+CRylSaeVk9hZW7MpJwNxDzu1n3wsTNmZaBflXQlpnQwXjGH9M39Bwu9Wghru 60x6LuU0aidHObZZ6SG3fKzOlokU16nF+vDx60wQPPikUjMF2Z/wGjBP+0fgzaqa DdCK3j8RwiFNaOD7JLHbk+jvsiNEXvad4ATgMzPX+Ozc3bHSzV20BYqqXK4pR6yE CSd1a6qknDE+PPfW4JfEpMm0RsyUH+lJYI47EIkS6i/qOtwcOEqsenxPtJaPTzUD PVmg8sERFM2nxwyep1AoeMgfS5hk6j0yTFlwBmPNRBx+LJ6Z -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:32 2024 by rpki-client on console-ams.rpki-client.org