$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/APj9htQN9w_1--VZJaFh1FSjGiM.roa File: APj9htQN9w_1--VZJaFh1FSjGiM.roa (raw, json) Hash identifier: GftRJUUuF+7jiSbMLLhwmQAi59JIHH1qSqV6gFvL4zQ= Subject key identifier: 00:F8:FD:86:D4:0D:F7:0F:F5:FB:E5:59:25:A1:61:D4:54:A3:1A:23 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F9B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/APj9htQN9w_1--VZJaFh1FSjGiM.roa Signing time: Fri 01 Sep 2023 08:57:17 +0000 ROA not before: Fri 01 Sep 2023 08:57:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 20940 IP address blocks: 210.65.144.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3995 (0xf9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=00F8FD86D40DF70FF5FBE55925A161D454A31A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:92:02:d7:d6:03:b2:bd:fb:2d:10:b8:ba: 13:48:93:2f:c1:b8:87:3c:5e:61:28:22:ae:c3:50: ac:32:e1:63:17:4f:47:70:d7:61:0a:89:52:1d:ec: 39:24:64:85:5a:c4:89:63:14:68:3d:0a:96:dc:54: 54:80:60:31:d2:fc:61:d0:87:26:9c:5a:53:d9:28: 8d:04:ae:d1:64:1a:0d:ac:b6:31:07:32:b7:8d:45: fb:bf:46:89:95:f0:31:6f:8a:f8:4e:f3:2d:db:12: 4e:e8:7f:93:d3:d4:8b:29:f0:2a:c2:55:73:fe:f0: 08:0a:40:48:38:31:16:d2:31:72:ff:ef:f0:25:f5: 5a:0e:c4:44:14:18:32:fd:e6:a9:79:85:95:70:42: 32:9a:73:5e:98:45:c3:92:17:89:f9:54:74:5f:82: 72:00:32:57:1e:c5:dc:6d:be:cd:c8:aa:06:ef:1f: 91:f2:08:e1:86:16:d6:ab:e7:65:46:d8:36:f7:55: 0c:9e:db:14:af:e5:e8:47:36:3a:94:0a:cc:49:30: de:ba:2e:56:6f:d3:1b:2e:31:45:bc:9f:e3:37:87: 54:51:69:d5:8d:97:8e:f0:b9:7f:0f:68:89:92:80: 7c:be:f0:b5:81:01:20:d0:7b:d9:ef:30:be:55:30: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F8:FD:86:D4:0D:F7:0F:F5:FB:E5:59:25:A1:61:D4:54:A3:1A:23 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/APj9htQN9w_1--VZJaFh1FSjGiM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.65.144.192/26 Signature Algorithm: sha256WithRSAEncryption 05:af:bc:c4:ba:5e:bc:e8:a6:dd:8d:e3:91:e2:75:05:94:1c: 9e:fb:8c:20:74:c3:c2:fd:22:49:84:8b:78:6a:c9:95:f4:52: bb:d1:0c:ac:ce:3c:69:d6:e7:fd:11:9a:ee:ed:7d:d9:ba:9f: cf:61:69:59:b7:39:4c:ae:95:f7:eb:5d:c7:a6:c0:7b:8c:79: 35:ed:ed:9c:cd:31:1b:df:c8:8b:71:80:13:8d:52:9e:57:67: 56:14:ae:3f:ad:54:00:d5:88:d7:7c:fe:2f:92:4c:7d:63:7f: 73:d6:80:49:fd:3c:58:35:2a:0b:aa:17:d7:f1:0e:b9:3e:e2: a4:1c:55:31:c9:bd:fd:0e:e2:41:05:9f:a6:ec:4a:a6:11:52: 1f:7e:69:c8:0d:db:2d:1f:f6:11:0f:c4:30:d5:b4:e2:a4:38: 7d:ba:ec:f9:16:54:65:9d:a6:fe:02:0b:07:09:97:27:17:90: 37:87:ee:41:d3:70:59:9c:e2:04:d0:2b:29:13:7a:25:b4:db: 73:18:49:03:39:e8:a0:8e:23:a6:8d:cb:f1:5a:f7:fe:a7:cc: 87:df:5a:c3:5e:0c:4f:e7:da:82:76:df:a4:61:5e:91:de:43: aa:97:97:63:f4:e2:d4:03:4f:ca:65:93:c0:af:ea:f7:d6:c9: 04:33:25:d7 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICD5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwRjhGRDg2RDQwREY3 MEZGNUZCRTU1OTI1QTE2MUQ0NTRBMzFBMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC48pIC19YDsr37LRC4uhNIky/BuIc8XmEoIq7DUKwy4WMXT0dw 12EKiVId7DkkZIVaxIljFGg9CpbcVFSAYDHS/GHQhyacWlPZKI0ErtFkGg2stjEH MreNRfu/RomV8DFvivhO8y3bEk7of5PT1Isp8CrCVXP+8AgKQEg4MRbSMXL/7/Al 9VoOxEQUGDL95ql5hZVwQjKac16YRcOSF4n5VHRfgnIAMlcexdxtvs3IqgbvH5Hy COGGFtar52VG2Db3VQye2xSv5ehHNjqUCsxJMN66LlZv0xsuMUW8n+M3h1RRadWN l47wuX8PaImSgHy+8LWBASDQe9nvML5VMFg/AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUAPj9htQN9w/1++VZJaFh1FSjGiMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BUGo5aHRRTjl3XzEtLVZaSmFG aDFGU2pHaU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUG0kGQ wDANBgkqhkiG9w0BAQsFAAOCAQEABa+8xLpevOim3Y3jkeJ1BZQcnvuMIHTDwv0i SYSLeGrJlfRSu9EMrM48adbn/RGa7u192bqfz2FpWbc5TK6V9+tdx6bAe4x5Ne3t nM0xG9/Ii3GAE41SnldnVhSuP61UANWI13z+L5JMfWN/c9aASf08WDUqC6oX1/EO uT7ipBxVMcm9/Q7iQQWfpuxKphFSH35pyA3bLR/2EQ/EMNW04qQ4fbrs+RZUZZ2m /gILBwmXJxeQN4fuQdNwWZziBNArKRN6JbTbcxhJAznooI4jpo3L8Vr3/qfMh99a w14MT+fagnbfpGFekd5DqpeXY/Ti1ANPymWTwK/q99bJBDMl1w== -----END CERTIFICATE-----Generated at Tue Jun 4 22:58:27 2024 by rpki-client on console-fra.rpki-client.org