$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2nnaLPHFQ8hiyslx68R3MjlA4kk.roa File: 2nnaLPHFQ8hiyslx68R3MjlA4kk.roa (raw, json) Hash identifier: MWuFRI+h2qnfHUYC6eIkrsxaE+on7h/cKAqzlMjw6oI= Subject key identifier: DA:79:DA:2C:F1:C5:43:C8:62:CA:C9:71:EB:C4:77:32:39:40:E2:49 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FA3 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2nnaLPHFQ8hiyslx68R3MjlA4kk.roa Signing time: Fri 01 Sep 2023 08:57:19 +0000 ROA not before: Fri 01 Sep 2023 08:57:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 114.30.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4003 (0xfa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DA79DA2CF1C543C862CAC971EBC477323940E249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:a5:18:1b:a5:2f:89:27:23:07:e8:ed:dc: a9:2b:24:7a:5d:e4:bc:ae:9b:06:09:5b:c2:79:fc: c5:bf:68:1f:a0:a9:4c:e7:fb:fb:14:76:65:b6:ab: 30:0f:8c:18:cf:7d:26:c1:47:97:e2:36:1c:b7:ac: 1d:dd:bc:0c:54:15:5a:61:d8:68:c5:b7:b9:f9:37: cf:c9:79:71:69:ba:91:c6:e6:c0:62:b3:8d:0f:c2: f1:9e:be:33:fa:71:53:5b:51:e2:4e:cc:7e:a2:d5: 5c:ae:0a:22:96:26:d8:a4:da:52:36:42:cf:69:f2: c9:0a:7a:0d:ba:67:b2:4d:91:2c:28:5e:d4:d8:ab: 82:c6:16:d0:14:d1:e5:3c:0c:e1:ae:e2:f5:11:90: 59:ae:d8:d2:de:e5:05:f6:7a:15:5c:57:80:b3:b1: 2f:9c:f3:90:19:c0:85:8f:69:ab:dc:ea:2b:4f:ba: 73:ef:81:de:b6:58:05:d1:c0:81:a4:c0:52:56:77: 33:96:d3:12:f5:a7:32:e0:8b:ab:cc:80:59:37:a7: 36:91:ab:89:fa:97:cc:ac:d3:64:11:e8:68:6c:53: 60:6b:bf:3c:66:7f:7d:94:7b:a8:17:15:75:ca:fc: 01:f0:98:de:cf:3e:64:8e:27:5b:a6:49:1e:d0:49: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:79:DA:2C:F1:C5:43:C8:62:CA:C9:71:EB:C4:77:32:39:40:E2:49 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2nnaLPHFQ8hiyslx68R3MjlA4kk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.30.44.0/24 Signature Algorithm: sha256WithRSAEncryption ce:16:28:46:c0:27:c6:38:c5:b0:2a:b4:f9:5b:18:d1:cc:43: 9d:db:2b:23:27:bf:a9:ab:a7:55:b6:92:74:61:46:af:35:43: 29:b8:30:af:48:a0:53:53:b3:22:ae:3e:42:a4:96:b1:b6:1c: 19:e4:17:83:98:c0:28:a5:f7:66:a8:38:f6:47:e7:ef:af:59: b1:a7:0a:75:38:c0:7d:53:18:91:71:26:ca:e5:fa:ce:49:de: 5b:12:47:8e:57:e7:31:f0:e6:35:1f:8e:ec:47:0d:c4:cb:90: 73:f7:84:ac:ea:a5:57:c5:70:44:e3:81:e7:5a:0c:ab:ed:64: 73:3c:9a:d5:9b:02:e0:49:66:fe:ee:96:a6:28:e2:db:96:1c: 23:9c:3f:f6:47:da:ac:84:bf:8a:12:5e:da:ca:08:20:af:68: aa:df:f3:2e:97:c4:35:1a:97:2a:43:68:76:f8:b7:56:b1:da: 51:28:c9:9c:a9:1a:69:66:54:34:f7:4c:7e:28:2f:26:82:af: c6:a7:bc:e7:f7:bd:e8:31:74:1c:74:68:f2:35:fd:d3:86:4f: 04:23:58:55:47:1e:b1:56:32:7b:33:5a:87:b5:14:5b:e2:3d: 4e:c3:de:ae:39:73:f9:05:24:69:e5:63:9e:e4:3d:fa:2a:53: 5c:10:71:69 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERBNzlEQTJDRjFDNTQz Qzg2MkNBQzk3MUVCQzQ3NzMyMzk0MEUyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFs6UYG6UviScjB+jt3KkrJHpd5LyumwYJW8J5/MW/aB+gqUzn +/sUdmW2qzAPjBjPfSbBR5fiNhy3rB3dvAxUFVph2GjFt7n5N8/JeXFpupHG5sBi s40PwvGevjP6cVNbUeJOzH6i1VyuCiKWJtik2lI2Qs9p8skKeg26Z7JNkSwoXtTY q4LGFtAU0eU8DOGu4vURkFmu2NLe5QX2ehVcV4CzsS+c85AZwIWPaavc6itPunPv gd62WAXRwIGkwFJWdzOW0xL1pzLgi6vMgFk3pzaRq4n6l8ys02QR6GhsU2Brvzxm f32Ue6gXFXXK/AHwmN7PPmSOJ1umSR7QScEPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU2nnaLPHFQ8hiyslx68R3MjlA4kkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8ybm5hTFBIRlE4aGl5c2x4NjhS M01qbEE0a2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAch4s MA0GCSqGSIb3DQEBCwUAA4IBAQDOFihGwCfGOMWwKrT5WxjRzEOd2ysjJ7+pq6dV tpJ0YUavNUMpuDCvSKBTU7Mirj5CpJaxthwZ5BeDmMAopfdmqDj2R+fvr1mxpwp1 OMB9UxiRcSbK5frOSd5bEkeOV+cx8OY1H47sRw3Ey5Bz94Ss6qVXxXBE44HnWgyr 7WRzPJrVmwLgSWb+7pamKOLblhwjnD/2R9qshL+KEl7aygggr2iq3/Mul8Q1Gpcq Q2h2+LdWsdpRKMmcqRppZlQ090x+KC8mgq/Gp7zn973oMXQcdGjyNf3Thk8EI1hV Rx6xVjJ7M1qHtRRb4j1Ow96uOXP5BSRp5WOe5D36KlNcEHFp -----END CERTIFICATE-----Generated at Mon Jun 3 19:07:54 2024 by rpki-client on console-fra.rpki-client.org