$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa File: 1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa (raw, json) Hash identifier: sWuh/BrZmIv6ZcrQvBOYRWuVoAd608KJ8DblP9m5bkE= Subject key identifier: D6:C6:F2:38:43:D6:36:03:10:81:04:87:B6:E8:4F:6E:CD:48:EC:16 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F7C Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa Signing time: Fri 01 Sep 2023 08:57:07 +0000 ROA not before: Fri 01 Sep 2023 08:57:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 21859 IP address blocks: 210.61.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3964 (0xf7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D6C6F23843D6360310810487B6E84F6ECD48EC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:96:95:71:33:58:f3:5e:e6:fb:89:0a:36: a3:fc:76:c1:50:9d:58:53:2f:ab:ff:32:e7:22:a5: 74:7f:ad:f0:f2:44:05:89:32:52:9a:9c:69:e1:f9: 3d:56:0b:59:bd:6a:4d:8f:70:fb:a5:78:58:32:87: d0:7e:a0:f1:8b:d3:d3:bd:0a:1e:d9:4c:76:38:1b: 57:c9:be:9a:ae:57:0c:43:1c:b7:9c:2c:91:25:ac: be:45:87:1f:49:68:79:7b:55:87:30:bd:a6:e4:45: 60:b1:e4:74:a1:a1:8f:c6:b5:fb:6d:50:f2:01:0c: 0b:d9:22:68:a9:d1:31:a6:82:f7:ba:8b:92:f4:57: c1:49:48:70:ad:92:90:06:31:25:51:b7:46:22:26: 04:3a:29:77:a2:0f:60:c4:b7:4c:ed:88:7d:50:33: c9:cd:b4:63:be:26:42:29:b7:d9:d5:9c:ed:3b:88: ed:b7:de:a8:87:1d:ca:af:65:da:c3:67:15:1f:2a: b3:ef:65:ae:b5:25:98:64:ba:1c:93:81:6f:ec:af: c5:1f:89:96:18:b4:fe:da:17:c6:ab:45:31:ff:87: 74:ba:ec:ea:b9:25:15:a9:f5:9c:a2:d8:17:21:ee: 00:22:f1:c4:d7:e3:45:0d:61:39:17:f8:4c:5c:43: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:F2:38:43:D6:36:03:10:81:04:87:B6:E8:4F:6E:CD:48:EC:16 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.201.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:8e:aa:06:2b:6a:54:c4:be:68:11:3d:4d:a3:82:0b:42:e1: f6:1c:40:84:3f:73:7e:16:b4:19:d3:ef:f7:5a:36:4d:77:53: 8f:1c:57:52:b2:b2:0c:ce:cf:c0:9c:15:d7:51:a9:05:58:af: 2e:54:7e:a1:57:c2:df:47:d6:8f:91:51:c9:7c:a1:cd:a0:ed: f8:16:ae:fe:b3:aa:5e:c6:e5:59:cd:9a:87:e3:93:ca:4a:e4: d7:ce:25:b9:d0:ce:20:f2:15:92:bb:40:80:55:e2:e0:7b:5a: 7b:62:6a:66:3c:ba:88:8e:88:de:39:3c:04:a3:c3:9d:69:a8: 79:df:7f:50:2c:ab:1a:2f:70:39:47:1f:b7:d6:c7:bc:e5:33: 56:a1:79:0c:75:f8:54:f6:95:de:69:cc:b9:3a:96:44:0e:d2: d2:51:2c:6f:8e:7a:66:2b:42:de:f7:6f:33:93:4e:59:85:f0: 11:a7:40:b6:4b:cd:5c:98:48:48:59:b6:4d:e5:0c:83:63:48: 1b:5c:77:0c:4d:48:d8:51:e6:5b:ec:88:52:48:4d:2f:cd:f0: 13:6c:d0:d8:2f:d6:4c:86:58:70:43:93:d0:02:f3:de:11:15: 60:d6:68:b7:18:0c:8e:9d:81:34:8d:72:c6:de:41:35:d7:06: f8:b6:2a:5b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ2QzZGMjM4NDNENjM2 MDMxMDgxMDQ4N0I2RTg0RjZFQ0Q0OEVDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvUZaVcTNY817m+4kKNqP8dsFQnVhTL6v/MucipXR/rfDyRAWJ MlKanGnh+T1WC1m9ak2PcPuleFgyh9B+oPGL09O9Ch7ZTHY4G1fJvpquVwxDHLec LJElrL5Fhx9JaHl7VYcwvabkRWCx5HShoY/GtfttUPIBDAvZImip0TGmgve6i5L0 V8FJSHCtkpAGMSVRt0YiJgQ6KXeiD2DEt0ztiH1QM8nNtGO+JkIpt9nVnO07iO23 3qiHHcqvZdrDZxUfKrPvZa61JZhkuhyTgW/sr8UfiZYYtP7aF8arRTH/h3S67Oq5 JRWp9Zyi2Bch7gAi8cTX40UNYTkX+ExcQx21AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU1sbyOEPWNgMQgQSHtuhPbs1I7BYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8xc2J5T0VQV05nTVFnUVNIdHVo UGJzMUk3Qlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j3J MA0GCSqGSIb3DQEBCwUAA4IBAQB+jqoGK2pUxL5oET1No4ILQuH2HECEP3N+FrQZ 0+/3WjZNd1OPHFdSsrIMzs/AnBXXUakFWK8uVH6hV8LfR9aPkVHJfKHNoO34Fq7+ s6pexuVZzZqH45PKSuTXziW50M4g8hWSu0CAVeLge1p7YmpmPLqIjojeOTwEo8Od aah5339QLKsaL3A5Rx+31se85TNWoXkMdfhU9pXeacy5OpZEDtLSUSxvjnpmK0Le 928zk05ZhfARp0C2S81cmEhIWbZN5QyDY0gbXHcMTUjYUeZb7IhSSE0vzfATbNDY L9ZMhlhwQ5PQAvPeERVg1mi3GAyOnYE0jXLG3kE11wb4tipb -----END CERTIFICATE-----Generated at Thu May 2 22:22:41 2024 by rpki-client on console-fra.rpki-client.org