$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa File: EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa (raw, json) Hash identifier: Jn3wkJWKSRka1pxVnz3x9yxCST3lR9URcREnIhKXST8= Subject key identifier: 13:09:55:CF:BC:FD:48:75:CC:58:55:41:93:E9:AF:36:0A:FC:09:8A Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F8B Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa Signing time: Fri 01 Sep 2023 08:57:11 +0000 ROA not before: Fri 01 Sep 2023 08:57:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 203.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3979 (0xf8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=130955CFBCFD4875CC58554193E9AF360AFC098A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:24:9d:ec:ee:32:4d:e7:50:5f:e5:5b:31: 4b:14:8f:ab:d5:80:3b:48:a8:39:e2:a2:00:06:f3: 28:62:33:9f:76:ac:83:96:fb:6d:72:75:e7:a2:0f: 43:3a:75:3c:55:92:04:6f:a3:fc:0e:3c:6e:c0:d0: 1d:f3:f9:9b:bf:47:c4:75:b3:af:f5:3c:59:5e:70: f1:23:cb:bf:fd:29:4c:ab:d9:15:c3:0b:00:53:c1: 1b:e5:71:85:7c:68:03:2b:eb:57:ac:39:0d:3d:ae: de:3b:10:2f:9e:7f:0b:3c:2b:94:69:fb:6d:47:8d: 43:4d:70:12:0e:19:19:6f:38:c9:28:a6:ee:f2:df: e0:10:e9:fd:eb:1b:94:6e:f7:b7:27:69:3d:c6:02: 10:6c:d7:d0:dd:92:e3:0e:6b:dd:db:72:47:65:ae: b9:0e:8f:37:57:71:28:a6:d1:af:4e:b9:2e:55:3d: 8a:5d:9a:9c:ba:c4:69:56:9d:db:7e:75:32:d2:99: da:65:32:1d:b7:43:ec:c5:73:fd:d1:78:89:4c:a8: 07:90:52:1a:40:d6:96:06:3f:a1:53:27:a6:7b:0c: 62:3e:7b:d8:14:fb:f6:40:16:93:df:a1:7b:92:9a: a4:d0:b4:88:68:d3:f1:55:02:b2:74:3c:08:fb:75: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:09:55:CF:BC:FD:48:75:CC:58:55:41:93:E9:AF:36:0A:FC:09:8A X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.75.0.0/16 Signature Algorithm: sha256WithRSAEncryption b7:07:a8:a4:58:a4:19:d6:2f:61:24:57:6c:e9:fb:58:8e:f4: 9d:63:02:9b:06:46:1f:80:f3:80:90:4f:d6:5f:73:5b:6d:19: 13:6f:fa:5f:50:bf:97:49:5e:18:db:e8:9c:b8:59:0d:d6:0f: b4:6d:0c:d7:67:51:5b:fe:b1:b2:d3:20:20:a6:ff:1b:5e:cf: be:5b:54:81:12:a0:b2:b7:16:9a:ce:f4:99:db:1c:8b:48:e9: 90:08:09:f9:09:14:f6:dc:f9:70:14:6b:e6:98:73:7a:da:22: f8:5b:96:61:f4:c1:0a:63:cf:3a:1b:df:b8:04:56:57:d6:4c: 02:79:07:60:db:9f:30:ce:96:e0:d4:94:ab:8c:92:3c:11:e3: 6d:ab:ff:47:52:15:56:a8:ac:b2:ee:3c:b2:91:b4:13:a9:48: 66:b9:d0:53:c3:36:56:57:a1:7f:85:ce:18:37:32:e1:e4:e3: c8:bd:8b:14:8d:e9:bc:bf:eb:f5:5a:e5:ff:4e:f9:de:ed:80: e8:57:fa:fd:5d:52:4f:d4:4a:b8:6a:a2:05:87:dc:02:ee:bd: 3d:ea:10:9a:c6:2a:2d:49:32:e6:1a:85:ae:c8:0d:23:a0:d6: e3:20:68:5b:a6:ff:78:97:f9:14:64:65:70:bd:e2:33:79:c2: 7d:1f:3c:ac -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEzMDk1NUNGQkNGRDQ4 NzVDQzU4NTU0MTkzRTlBRjM2MEFGQzA5OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9qiSd7O4yTedQX+VbMUsUj6vVgDtIqDniogAG8yhiM592rIOW +21ydeeiD0M6dTxVkgRvo/wOPG7A0B3z+Zu/R8R1s6/1PFlecPEjy7/9KUyr2RXD CwBTwRvlcYV8aAMr61esOQ09rt47EC+efws8K5Rp+21HjUNNcBIOGRlvOMkopu7y 3+AQ6f3rG5Ru97cnaT3GAhBs19DdkuMOa93bckdlrrkOjzdXcSim0a9OuS5VPYpd mpy6xGlWndt+dTLSmdplMh23Q+zFc/3ReIlMqAeQUhpA1pYGP6FTJ6Z7DGI+e9gU +/ZAFpPfoXuSmqTQtIho0/FVArJ0PAj7dTf7AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUEwlVz7z9SHXMWFVBk+mvNgr8CYowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Fd2xWejd6OVNIWE1XRlZCay1t dk5ncjhDWW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0sw DQYJKoZIhvcNAQELBQADggEBALcHqKRYpBnWL2EkV2zp+1iO9J1jApsGRh+A84CQ T9Zfc1ttGRNv+l9Qv5dJXhjb6Jy4WQ3WD7RtDNdnUVv+sbLTICCm/xtez75bVIES oLK3FprO9JnbHItI6ZAICfkJFPbc+XAUa+aYc3raIvhblmH0wQpjzzob37gEVlfW TAJ5B2DbnzDOluDUlKuMkjwR422r/0dSFVaorLLuPLKRtBOpSGa50FPDNlZXoX+F zhg3MuHk48i9ixSN6by/6/Va5f9O+d7tgOhX+v1dUk/USrhqogWH3ALuvT3qEJrG Ki1JMuYaha7IDSOg1uMgaFum/3iX+RRkZXC94jN5wn0fPKw= -----END CERTIFICATE-----Generated at Wed Jun 5 00:23:00 2024 by rpki-client on console-ams.rpki-client.org