$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-InQRxhtXfNgIAg2QnKrM7847RE.roa File: -InQRxhtXfNgIAg2QnKrM7847RE.roa (raw, json) Hash identifier: 2uQxUgQNrOp5mJbyyb+Jn9rlejauf9Rbs81Bn7Zjm14= Subject key identifier: F8:89:D0:47:18:6D:5D:F3:60:20:08:36:42:72:AB:33:BF:38:ED:11 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F59 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-InQRxhtXfNgIAg2QnKrM7847RE.roa Signing time: Fri 01 Sep 2023 08:56:58 +0000 ROA not before: Fri 01 Sep 2023 08:56:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17421 IP address blocks: 111.70.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3929 (0xf59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F889D047186D5DF3602008364272AB33BF38ED11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:de:9e:f3:1d:7b:fc:6d:97:bf:9f:d3:03: 5f:e6:c2:af:90:df:ce:0a:94:27:61:22:28:35:15: ac:23:a4:43:66:dc:ff:24:ff:69:77:77:4f:41:85: ed:1f:af:5e:f3:fe:f5:60:09:45:b2:59:ab:40:b2: 59:83:d6:7c:ea:c1:ce:66:a2:58:11:c8:46:50:10: b2:b7:d1:c5:37:db:58:d8:9b:80:3a:b8:36:4c:3b: 42:a5:4c:b8:2b:7f:e0:5e:e6:c6:5b:b4:0e:45:92: cb:c6:be:57:47:0d:e5:f8:11:dc:46:e0:86:d8:2c: da:ea:98:af:db:4d:db:10:38:15:fa:6a:4e:36:2a: 2e:fb:f1:30:5d:e0:b3:6b:9c:a1:fd:be:d3:6f:04: 2b:4e:03:79:f1:9d:23:3f:7e:37:2a:35:6d:a8:3e: 8b:24:e9:db:bb:f4:cc:94:3b:d7:e0:c5:d6:da:6f: 3b:26:39:ac:47:61:dd:e2:95:6e:72:9f:31:46:a2: c2:49:c3:8f:23:b2:5a:75:08:81:b3:b2:c9:22:15: 58:f4:c6:ff:16:2a:24:5b:4a:26:62:c9:f9:df:90: 5e:62:f4:43:c9:7a:d5:20:9c:3d:cf:42:7b:6e:e2: 90:32:49:c9:16:bb:55:8d:56:f3:54:ef:b4:f8:de: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:89:D0:47:18:6D:5D:F3:60:20:08:36:42:72:AB:33:BF:38:ED:11 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-InQRxhtXfNgIAg2QnKrM7847RE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 111.70.0.0/15 Signature Algorithm: sha256WithRSAEncryption b3:20:a0:a3:2a:04:73:77:b6:38:d8:61:bc:2b:3d:c0:a4:aa: 5e:23:d7:ba:05:86:01:fa:54:0e:be:78:54:57:7f:2a:40:29: 68:eb:31:71:70:fa:30:98:56:35:6a:f6:f1:66:29:38:cf:fa: 02:25:cc:bf:e9:40:1c:00:fc:fb:8d:92:84:ff:09:bd:8a:2c: fa:8b:c5:c9:a4:1c:a0:28:bb:6f:e3:78:ca:fc:6a:c2:18:93: 56:3d:c6:25:de:ea:9f:ad:f4:d1:66:a6:88:ba:1a:68:dd:71: 59:ea:ec:07:61:d9:37:26:c3:06:78:e1:80:7d:67:3c:7a:cb: 8c:55:9d:0a:18:a3:f2:e2:37:03:a4:06:39:f7:f0:8f:fd:95: c2:bf:72:1c:06:43:0c:17:61:39:f7:18:3d:92:26:d3:42:f1: 32:47:85:8f:08:3f:24:5e:47:54:80:5b:d6:56:22:cf:09:63: 8a:53:a7:28:e3:d0:85:72:23:c1:df:7a:42:25:38:23:b4:61: e8:02:7f:a2:0e:ce:d9:c9:f1:88:f2:89:09:c0:e2:a7:32:e0: 89:67:97:d7:72:92:bd:8d:d6:2d:9d:e3:b6:ec:db:f4:df:5d: 67:f1:62:b6:59:58:f4:da:23:f9:51:78:5d:f1:10:3f:60:37: 79:07:89:ef -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY4ODlEMDQ3MTg2RDVE RjM2MDIwMDgzNjQyNzJBQjMzQkYzOEVEMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgqN6e8x17/G2Xv5/TA1/mwq+Q384KlCdhIig1FawjpENm3P8k /2l3d09Bhe0fr17z/vVgCUWyWatAslmD1nzqwc5molgRyEZQELK30cU321jYm4A6 uDZMO0KlTLgrf+Be5sZbtA5FksvGvldHDeX4EdxG4IbYLNrqmK/bTdsQOBX6ak42 Ki778TBd4LNrnKH9vtNvBCtOA3nxnSM/fjcqNW2oPosk6du79MyUO9fgxdbabzsm OaxHYd3ilW5ynzFGosJJw48jslp1CIGzsskiFVj0xv8WKiRbSiZiyfnfkF5i9EPJ etUgnD3PQntu4pAySckWu1WNVvNU77T43mvVAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU+InQRxhtXfNgIAg2QnKrM7847REwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8tSW5RUnhodFhmTmdJQWcyUW5L ck03ODQ3UkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBb0Yw DQYJKoZIhvcNAQELBQADggEBALMgoKMqBHN3tjjYYbwrPcCkql4j17oFhgH6VA6+ eFRXfypAKWjrMXFw+jCYVjVq9vFmKTjP+gIlzL/pQBwA/PuNkoT/Cb2KLPqLxcmk HKAou2/jeMr8asIYk1Y9xiXe6p+t9NFmpoi6GmjdcVnq7Adh2TcmwwZ44YB9Zzx6 y4xVnQoYo/LiNwOkBjn38I/9lcK/chwGQwwXYTn3GD2SJtNC8TJHhY8IPyReR1SA W9ZWIs8JY4pTpyjj0IVyI8HfekIlOCO0YegCf6IOztnJ8YjyiQnA4qcy4Ilnl9dy kr2N1i2d47bs2/TfXWfxYrZZWPTaI/lReF3xED9gN3kHie8= -----END CERTIFICATE-----Generated at Thu May 23 03:15:02 2024 by rpki-client on console-fra.rpki-client.org