$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-Mq-lmuBWfS6bpXvycM1EUbLfys.roa File: -Mq-lmuBWfS6bpXvycM1EUbLfys.roa (raw, json) Hash identifier: EA2Hu3CNMtcrVa68WIDM1uyAESuK6K6mDjhdaHMcp7A= Subject key identifier: F8:CA:BE:96:6B:81:59:F4:BA:6E:95:EF:C9:C3:35:11:46:CB:7F:2B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F7F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-Mq-lmuBWfS6bpXvycM1EUbLfys.roa Signing time: Fri 01 Sep 2023 08:57:08 +0000 ROA not before: Fri 01 Sep 2023 08:57:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 211.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3967 (0xf7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F8CABE966B8159F4BA6E95EFC9C3351146CB7F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:44:30:13:30:d3:d2:bf:5f:b7:b9:1f:58: 0c:c4:22:86:54:e7:72:f7:49:e4:d0:32:54:d9:37: d9:cd:ba:39:50:41:7a:35:6e:c2:e4:52:85:9c:e4: e7:98:16:73:ae:76:c9:0c:54:64:82:61:08:d9:d3: 7f:1c:33:8e:c7:45:ba:51:76:d0:99:d7:36:50:e3: 50:78:9e:83:fa:60:19:99:54:95:3b:4b:2c:31:a4: c8:21:bc:1f:a0:d6:cb:9c:10:68:5f:b4:c7:f8:aa: 57:d7:5d:fc:ce:ae:3e:d2:53:91:51:22:aa:41:f7: 02:bd:32:05:13:f5:67:ac:73:39:e2:a7:db:48:2f: 56:34:55:8f:8c:c1:1f:ad:79:99:10:f6:ef:77:65: b2:c9:09:bf:85:2c:1b:93:4c:f2:bf:42:fb:72:22: 51:b0:5a:5e:e9:dd:7c:1c:84:e7:7b:85:0c:33:dc: ea:38:11:4c:7b:8b:30:6e:de:9e:4d:ff:b5:d2:41: 4f:d5:3c:30:39:5e:32:a6:f1:c4:a7:ee:d2:1d:5e: ab:7b:d7:52:d1:87:04:98:49:76:7c:46:39:0a:1f: 87:51:17:c7:23:2e:3f:23:31:9a:3e:48:0e:f9:cb: 0b:d9:21:85:45:da:4b:7e:89:32:d1:3e:b8:39:f0: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:BE:96:6B:81:59:F4:BA:6E:95:EF:C9:C3:35:11:46:CB:7F:2B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-Mq-lmuBWfS6bpXvycM1EUbLfys.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:d6:b0:ee:1a:eb:6a:80:3f:10:28:83:53:85:18:b3:b4:a9: f3:10:2a:ee:dc:4d:34:1b:9f:19:ae:20:61:9f:c8:49:51:9e: 29:de:78:08:8e:15:be:5d:f8:8e:6b:36:5f:03:64:ff:de:24: dc:2b:c6:8d:2c:ee:05:cd:89:5f:d4:f7:94:b9:71:82:44:a8: 6d:5c:58:45:36:7d:3f:fa:b9:90:d3:4e:68:00:19:08:5d:c4: 1d:fc:bc:c3:83:81:02:45:26:f3:37:6d:59:6c:03:c6:8a:f9: c5:40:4d:b4:4c:65:71:c1:bb:cc:d7:57:97:d2:8d:1c:ad:4b: 28:33:7f:94:19:73:a7:24:b4:50:e8:45:3d:52:5d:fa:0c:c0: 0d:09:3c:2c:dd:21:d1:ea:b2:18:27:43:9e:e5:6e:a5:be:e5: e1:b5:10:c8:d6:c6:c7:22:02:34:0b:63:59:6d:cf:6e:c1:8d: 07:33:6c:25:f3:47:f5:2c:b0:59:74:02:01:97:9c:13:ab:26: 03:67:70:21:61:1e:cf:b4:cc:c5:b2:4a:3f:72:37:83:e1:48: 2b:41:f5:6b:d3:4f:53:58:85:01:1e:e2:72:d7:a7:dc:77:d5: 67:ce:5f:c5:f3:f5:b0:eb:02:85:9e:29:a6:4f:8a:75:cf:cd: 42:b6:b7:39 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY4Q0FCRTk2NkI4MTU5 RjRCQTZFOTVFRkM5QzMzNTExNDZDQjdGMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrUkQwEzDT0r9ft7kfWAzEIoZU53L3SeTQMlTZN9nNujlQQXo1 bsLkUoWc5OeYFnOudskMVGSCYQjZ038cM47HRbpRdtCZ1zZQ41B4noP6YBmZVJU7 SywxpMghvB+g1sucEGhftMf4qlfXXfzOrj7SU5FRIqpB9wK9MgUT9Wescznip9tI L1Y0VY+MwR+teZkQ9u93ZbLJCb+FLBuTTPK/QvtyIlGwWl7p3XwchOd7hQwz3Oo4 EUx7izBu3p5N/7XSQU/VPDA5XjKm8cSn7tIdXqt711LRhwSYSXZ8RjkKH4dRF8cj Lj8jMZo+SA75ywvZIYVF2kt+iTLRPrg58HhFAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU+Mq+lmuBWfS6bpXvycM1EUbLfyswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8tTXEtbG11QldmUzZicFh2eWNN MUVVYkxmeXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0xQw DQYJKoZIhvcNAQELBQADggEBABnWsO4a62qAPxAog1OFGLO0qfMQKu7cTTQbnxmu IGGfyElRnineeAiOFb5d+I5rNl8DZP/eJNwrxo0s7gXNiV/U95S5cYJEqG1cWEU2 fT/6uZDTTmgAGQhdxB38vMODgQJFJvM3bVlsA8aK+cVATbRMZXHBu8zXV5fSjRyt Sygzf5QZc6cktFDoRT1SXfoMwA0JPCzdIdHqshgnQ57lbqW+5eG1EMjWxsciAjQL Y1ltz27BjQczbCXzR/UssFl0AgGXnBOrJgNncCFhHs+0zMWySj9yN4PhSCtB9WvT T1NYhQEe4nLXp9x31WfOX8Xz9bDrAoWeKaZPinXPzUK2tzk= -----END CERTIFICATE-----Generated at Tue Jun 4 20:03:01 2024 by rpki-client on console-ams.rpki-client.org