$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FP5MbaD_p4DFMq98KSMf2my7hxk.roa File: FP5MbaD_p4DFMq98KSMf2my7hxk.roa (raw, json) Hash identifier: T3fgzlm4/FJ+1r9RjbzsDbqa6X3jf650UTeWlnSbbfk= Subject key identifier: 14:FE:4C:6D:A0:FF:A7:80:C5:32:AF:7C:29:23:1F:DA:6C:BB:87:19 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FAB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FP5MbaD_p4DFMq98KSMf2my7hxk.roa Signing time: Fri 01 Sep 2023 08:57:22 +0000 ROA not before: Fri 01 Sep 2023 08:57:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17421 IP address blocks: 111.80.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4011 (0xfab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=14FE4C6DA0FFA780C532AF7C29231FDA6CBB8719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:f6:6e:5e:6e:43:79:1d:de:d6:9e:c8:c9: ea:1c:65:c6:9f:ca:29:b9:40:98:60:dd:de:3d:8e: 9a:ec:f8:f5:86:90:a6:4b:ab:a4:4b:8e:af:90:82: 06:23:5a:ea:11:98:f2:20:bf:e0:30:3c:be:7a:a2: 73:8b:a3:4c:96:6b:5a:ad:0c:c5:e8:ba:1c:4b:05: 41:63:6d:06:21:2c:82:50:4e:cb:7e:7f:94:72:c7: e5:9f:f0:10:11:e5:ef:7b:af:20:e9:3e:00:c3:02: 6b:98:7b:3f:fd:cc:f7:6b:37:5c:19:f6:39:b9:17: ab:c8:fc:af:73:43:df:a5:89:1e:9d:50:97:a9:1a: 14:02:f0:8a:68:dd:31:73:e0:3c:ad:2e:98:52:47: 59:f7:70:c5:bd:ed:7a:71:ba:ac:c4:d7:4c:98:87: 06:6d:07:90:48:ab:f3:b2:55:c3:5b:b7:56:c6:f0: a7:f1:40:f0:4e:90:f5:1d:9a:15:8d:c0:9c:3e:07: 5a:3b:c0:60:53:a8:23:59:33:12:65:44:37:b1:ca: 2f:de:2c:e3:b8:4c:ef:4a:0c:77:18:08:4d:42:4e: 65:ed:25:e5:fd:be:ed:58:b2:72:19:e8:e7:e2:0b: 7e:af:c9:a7:22:1c:98:f9:cd:ce:9b:be:5d:61:b9: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FE:4C:6D:A0:FF:A7:80:C5:32:AF:7C:29:23:1F:DA:6C:BB:87:19 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FP5MbaD_p4DFMq98KSMf2my7hxk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 111.80.0.0/14 Signature Algorithm: sha256WithRSAEncryption 40:26:ab:19:07:3d:94:9d:c7:c3:3d:54:47:42:a7:8e:35:6d: d5:da:15:ee:10:db:35:cc:f0:62:f6:d1:69:48:d4:9c:70:72: 52:48:8e:e6:fb:15:03:2e:27:4f:bf:7e:57:a4:77:89:59:08: 3a:4a:96:36:28:42:1c:47:01:16:ea:97:ec:49:ec:57:a2:3f: 87:05:39:51:49:29:86:b9:4d:fd:6a:4a:e7:48:16:53:c9:4b: 67:03:fd:64:97:c3:f9:d9:18:ce:fb:fd:1f:7f:bf:6f:0a:25: 28:74:01:08:41:02:f1:74:9d:81:d4:54:eb:5b:57:43:4e:89: f4:61:ed:fe:c5:89:8c:96:b5:34:f3:1f:3c:ce:f5:e2:d7:0c: 7f:39:c9:96:8a:dd:97:97:a6:f7:13:a5:c2:12:1f:e3:21:d7: fc:8c:00:5f:84:01:fd:9f:68:b8:b7:5e:c6:69:0b:12:07:43: 69:78:16:4e:5a:79:0d:08:5f:00:fc:b0:9a:04:99:49:16:0a: 7d:75:77:e8:16:31:8d:93:bd:5d:f9:a9:0c:55:02:c0:73:b3: da:9e:6a:e4:6b:24:da:2f:4e:b4:76:94:5f:0c:47:a6:78:79: 5c:81:53:c5:79:6e:21:03:e5:1a:20:dd:99:d0:14:8b:26:ec: cc:2b:1a:b5 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE0RkU0QzZEQTBGRkE3 ODBDNTMyQUY3QzI5MjMxRkRBNkNCQjg3MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLXPZuXm5DeR3e1p7IyeocZcafyim5QJhg3d49jprs+PWGkKZL q6RLjq+QggYjWuoRmPIgv+AwPL56onOLo0yWa1qtDMXouhxLBUFjbQYhLIJQTst+ f5Ryx+Wf8BAR5e97ryDpPgDDAmuYez/9zPdrN1wZ9jm5F6vI/K9zQ9+liR6dUJep GhQC8Ipo3TFz4DytLphSR1n3cMW97XpxuqzE10yYhwZtB5BIq/OyVcNbt1bG8Kfx QPBOkPUdmhWNwJw+B1o7wGBTqCNZMxJlRDexyi/eLOO4TO9KDHcYCE1CTmXtJeX9 vu1YsnIZ6OfiC36vyaciHJj5zc6bvl1huRl3AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUFP5MbaD/p4DFMq98KSMf2my7hxkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9GUDVNYmFEX3A0REZNcTk4S1NN ZjJteTdoeGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCb1Aw DQYJKoZIhvcNAQELBQADggEBAEAmqxkHPZSdx8M9VEdCp441bdXaFe4Q2zXM8GL2 0WlI1JxwclJIjub7FQMuJ0+/flekd4lZCDpKljYoQhxHARbql+xJ7FeiP4cFOVFJ KYa5Tf1qSudIFlPJS2cD/WSXw/nZGM77/R9/v28KJSh0AQhBAvF0nYHUVOtbV0NO ifRh7f7FiYyWtTTzHzzO9eLXDH85yZaK3ZeXpvcTpcISH+Mh1/yMAF+EAf2faLi3 XsZpCxIHQ2l4Fk5aeQ0IXwD8sJoEmUkWCn11d+gWMY2TvV35qQxVAsBzs9qeauRr JNovTrR2lF8MR6Z4eVyBU8V5biED5Rog3ZnQFIsm7MwrGrU= -----END CERTIFICATE-----Generated at Thu May 23 04:42:02 2024 by rpki-client on console-ams.rpki-client.org