$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa File: 5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa (raw, json) Hash identifier: T/Xab3o+ziKx3ui7LXmq195J2RvsLwEAZFVRvOqE8pA= Subject key identifier: E6:51:77:41:BE:15:4B:0A:74:62:E1:09:5F:2A:C9:EF:97:56:EE:A4 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F6A Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa Signing time: Fri 01 Sep 2023 08:57:03 +0000 ROA not before: Fri 01 Sep 2023 08:57:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 220.128.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3946 (0xf6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E6517741BE154B0A7462E1095F2AC9EF9756EEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:82:e8:52:85:e8:f1:e1:f4:25:a6:11:3c: e2:30:34:5c:52:f5:09:8d:c8:5f:4f:0d:85:5d:0a: b6:5c:ae:a3:04:a4:e9:1d:54:8e:89:6d:e8:9a:b8: f8:66:67:89:2f:11:7c:d8:7f:b6:e7:f6:93:98:90: 50:db:f2:fa:66:a7:6e:fa:2d:3e:31:6c:e5:d4:d5: a1:b5:c4:a6:6f:39:cf:42:8e:c4:cd:96:08:cc:1e: 57:31:ac:ff:66:ee:67:c9:e5:64:4d:c7:3d:46:32: 5e:cd:a4:10:9c:22:8c:87:8c:f5:dd:d7:7d:8d:91: d6:4c:5c:3b:ad:98:07:38:19:6f:ef:99:f5:a5:c9: 5e:0a:1b:ad:0c:af:1d:dd:a2:41:70:3d:60:22:ab: e7:ed:9f:c3:98:3d:fb:5d:a4:4f:f3:d2:b5:ee:1c: d2:ab:d2:f9:48:ed:95:a3:24:b5:58:fd:4f:2d:b8: fe:ba:f4:06:64:3c:04:07:8a:57:0c:9d:4f:6e:70: 34:11:a5:62:68:12:92:32:5a:d9:2d:3b:55:ee:1a: 8b:02:eb:4b:cf:19:dc:ff:1a:bc:be:7b:cc:d3:f5: f5:3a:cd:0d:57:22:4d:ed:24:4f:4d:ad:1e:63:39: 61:a3:8e:08:15:98:14:e9:b7:1f:0a:64:70:07:f7: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:51:77:41:BE:15:4B:0A:74:62:E1:09:5F:2A:C9:EF:97:56:EE:A4 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5lF3Qb4VSwp0YuEJXyrJ75dW7qQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.61.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:8a:f0:fb:a1:61:cd:ab:cf:bd:b1:32:eb:0f:ec:d2:05:1e: d2:6f:a8:ed:b4:b5:b8:a9:03:35:e3:f7:65:ad:61:2a:5a:b2: 6c:20:b3:63:31:19:c5:8c:4f:0d:28:67:f1:02:b8:8d:89:b1: 24:01:3b:25:fc:17:c0:90:1a:1c:c3:c3:4c:ce:e8:61:3d:5d: 0d:b6:0d:dd:93:0e:2c:5d:46:cb:9b:b3:0e:b8:be:af:5d:54: fb:52:99:54:35:ef:73:10:28:7b:22:8e:bc:b6:27:e1:2e:11: e0:cc:f6:e3:d8:d0:9f:85:b3:69:63:6a:e1:c9:08:08:7e:76: 1b:e1:23:fb:62:f9:1b:a5:79:85:ce:20:da:56:2a:3b:c9:a8: 57:3b:61:df:b0:cf:2d:09:5a:80:cc:44:7b:03:ad:8b:86:f1: 49:21:4a:f4:31:00:a9:23:7d:5c:69:03:ad:3a:98:1e:c0:76: 4d:32:52:8c:8c:98:9e:fc:c5:e4:25:3e:40:6a:1b:8b:3c:71: 5d:f3:9e:0e:72:6d:53:46:31:46:8d:fd:4f:75:f6:6c:5b:87: 36:51:c0:3a:19:5c:b2:41:bf:be:c6:02:23:de:cb:18:54:21: 96:e4:ac:d6:f8:76:13:f8:43:6d:f2:7a:ef:0c:9a:07:78:aa: a3:84:0e:92 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU2NTE3NzQxQkUxNTRC MEE3NDYyRTEwOTVGMkFDOUVGOTc1NkVFQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGSoLoUoXo8eH0JaYRPOIwNFxS9QmNyF9PDYVdCrZcrqMEpOkd VI6JbeiauPhmZ4kvEXzYf7bn9pOYkFDb8vpmp276LT4xbOXU1aG1xKZvOc9CjsTN lgjMHlcxrP9m7mfJ5WRNxz1GMl7NpBCcIoyHjPXd132NkdZMXDutmAc4GW/vmfWl yV4KG60Mrx3dokFwPWAiq+ftn8OYPftdpE/z0rXuHNKr0vlI7ZWjJLVY/U8tuP66 9AZkPAQHilcMnU9ucDQRpWJoEpIyWtktO1XuGosC60vPGdz/Gry+e8zT9fU6zQ1X Ik3tJE9NrR5jOWGjjggVmBTptx8KZHAH97QnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU5lF3Qb4VSwp0YuEJXyrJ75dW7qQwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC81bEYzUWI0VlN3cDBZdUVKWHly Sjc1ZFc3cVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IA9 MA0GCSqGSIb3DQEBCwUAA4IBAQAeivD7oWHNq8+9sTLrD+zSBR7Sb6jttLW4qQM1 4/dlrWEqWrJsILNjMRnFjE8NKGfxAriNibEkATsl/BfAkBocw8NMzuhhPV0Ntg3d kw4sXUbLm7MOuL6vXVT7UplUNe9zECh7Io68tifhLhHgzPbj2NCfhbNpY2rhyQgI fnYb4SP7YvkbpXmFziDaVio7yahXO2HfsM8tCVqAzER7A62LhvFJIUr0MQCpI31c aQOtOpgewHZNMlKMjJie/MXkJT5AahuLPHFd854Ocm1TRjFGjf1PdfZsW4c2UcA6 GVyyQb++xgIj3ssYVCGW5KzW+HYT+ENt8nrvDJoHeKqjhA6S -----END CERTIFICATE-----Generated at Mon Jun 3 23:10:41 2024 by rpki-client on console-ams.rpki-client.org