$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa File: FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa (raw, json) Hash identifier: fZwlaWPk9M80r366IefYLJWuwpP3mA7ddSNP+SR57gA= Subject key identifier: 17:21:5B:05:AE:28:6A:A4:EC:13:A4:1B:D4:4A:68:DB:CB:E7:29:DD Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FB2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa Signing time: Fri 01 Sep 2023 08:57:23 +0000 ROA not before: Fri 01 Sep 2023 08:57:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 142005 IP address blocks: 210.242.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4018 (0xfb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=17215B05AE286AA4EC13A41BD44A68DBCBE729DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:4b:d3:90:26:97:47:0c:b9:c6:e3:96:08: 35:06:55:0a:00:0e:7c:60:71:79:80:43:9c:cd:7f: a6:cc:29:94:60:5f:d7:1e:db:3d:d3:fd:d8:9e:d5: c5:78:1a:3d:f1:e8:9a:91:42:1d:95:be:5a:7b:24: 18:81:79:b4:aa:e5:8e:4c:7d:ec:32:bf:4d:af:5b: 29:63:e1:c9:8c:9d:55:7c:55:60:10:68:3e:c0:eb: d9:36:6e:ea:c2:0e:f8:38:a1:2e:9d:58:50:39:85: 6e:7e:5d:ea:d8:00:e9:4c:dc:bc:49:eb:e9:9f:c7: 71:6c:1b:f0:7a:4b:9b:5c:72:fe:8d:94:48:4c:2d: 3f:ec:56:d0:f0:fc:f5:18:22:89:16:06:51:a7:3e: 79:d2:5c:84:44:1b:a7:f4:8c:ed:20:8b:f6:ec:be: f6:19:91:21:f6:87:55:fa:ac:3d:e0:51:73:34:39: 12:2c:90:43:bc:25:ed:40:93:4f:c4:20:d6:1c:7d: 4a:d2:68:0a:ec:52:aa:48:e6:f1:0f:04:47:af:80: 6f:8d:9c:eb:85:7f:09:c5:4e:9d:8b:11:e1:7f:b2: 54:3a:66:9b:7e:46:81:e5:d1:53:33:4f:83:f8:21: 38:06:d7:e1:12:29:ee:0d:3f:2e:6f:83:76:90:27: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:5B:05:AE:28:6A:A4:EC:13:A4:1B:D4:4A:68:DB:CB:E7:29:DD X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.83.0/24 Signature Algorithm: sha256WithRSAEncryption 46:37:d8:1b:f0:53:fd:79:1b:85:de:c2:69:69:b8:f6:24:9e: f7:69:32:f6:4d:e2:26:d8:76:ae:df:37:e5:a2:a9:a7:78:d4: 46:56:df:9f:42:23:56:13:2d:e9:4a:43:5d:6b:50:f5:eb:1b: 27:61:91:d5:f4:56:0a:ec:08:5b:c3:d5:06:07:2d:a9:76:23: ca:9c:b8:6e:1c:19:55:b8:fc:57:3b:1f:8e:b6:4e:e0:1c:0d: 2e:13:21:b9:2c:e8:63:16:29:6a:f0:ca:e5:e7:44:27:10:6b: 52:5a:ed:03:d8:be:36:49:82:b4:01:5f:a4:74:49:e6:03:26: ef:cb:b9:86:25:ff:c5:dc:54:bc:f8:15:ed:73:40:ad:e5:b6: 50:79:39:86:65:2d:a3:d5:0e:e0:a8:ea:15:fd:98:a8:4f:8b: 45:8a:26:12:e1:66:e8:47:9f:3f:cf:9a:21:8c:2d:ba:d6:4d: 30:3c:4b:20:20:15:54:4a:4b:56:3e:53:e9:ce:4f:08:50:3f: 0e:f1:0c:f3:ff:e7:1b:20:04:14:d3:f4:cc:ef:cd:e5:62:a2: 30:4e:a1:cd:ef:18:91:11:3c:62:01:7e:a8:11:3c:8f:a7:d5: 69:50:03:73:38:c1:87:06:23:f5:5a:72:b2:0e:f6:ec:15:c2: 48:a4:39:44 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE3MjE1QjA1QUUyODZB QTRFQzEzQTQxQkQ0NEE2OERCQ0JFNzI5REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEL0vTkCaXRwy5xuOWCDUGVQoADnxgcXmAQ5zNf6bMKZRgX9ce 2z3T/die1cV4Gj3x6JqRQh2Vvlp7JBiBebSq5Y5Mfewyv02vWylj4cmMnVV8VWAQ aD7A69k2burCDvg4oS6dWFA5hW5+XerYAOlM3LxJ6+mfx3FsG/B6S5tccv6NlEhM LT/sVtDw/PUYIokWBlGnPnnSXIREG6f0jO0gi/bsvvYZkSH2h1X6rD3gUXM0ORIs kEO8Je1Ak0/EINYcfUrSaArsUqpI5vEPBEevgG+NnOuFfwnFTp2LEeF/slQ6Zpt+ RoHl0VMzT4P4ITgG1+ESKe4NPy5vg3aQJ3kHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUFyFbBa4oaqTsE6Qb1Epo28vnKd0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9GeUZiQmE0b2FxVHNFNlFiMUVw bzI4dm5LZDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJT MA0GCSqGSIb3DQEBCwUAA4IBAQBGN9gb8FP9eRuF3sJpabj2JJ73aTL2TeIm2Hau 3zfloqmneNRGVt+fQiNWEy3pSkNda1D16xsnYZHV9FYK7Ahbw9UGBy2pdiPKnLhu HBlVuPxXOx+Otk7gHA0uEyG5LOhjFilq8Mrl50QnEGtSWu0D2L42SYK0AV+kdEnm Aybvy7mGJf/F3FS8+BXtc0Ct5bZQeTmGZS2j1Q7gqOoV/ZioT4tFiiYS4WboR58/ z5ohjC261k0wPEsgIBVUSktWPlPpzk8IUD8O8Qzz/+cbIAQU0/TM783lYqIwTqHN 7xiRETxiAX6oETyPp9VpUANzOMGHBiP1WnKyDvbsFcJIpDlE -----END CERTIFICATE-----Generated at Thu May 23 04:42:02 2024 by rpki-client on console-ams.rpki-client.org