$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FyaNNccPucP9mDB1SVc5KyWa5H8.roa File: FyaNNccPucP9mDB1SVc5KyWa5H8.roa (raw, json) Hash identifier: AM+Mr+N739/edQa56/h+p1s1hS6brWU2dFfNnFIhHzA= Subject key identifier: 17:26:8D:35:C7:0F:B9:C3:FD:98:30:75:49:57:39:2B:25:9A:E4:7F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F46 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyaNNccPucP9mDB1SVc5KyWa5H8.roa Signing time: Fri 01 Sep 2023 08:56:51 +0000 ROA not before: Fri 01 Sep 2023 08:56:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 210.242.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3910 (0xf46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=17268D35C70FB9C3FD9830754957392B259AE47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:0d:bd:17:e3:a1:f8:56:02:47:f7:1c:aa: 6b:d8:81:ea:83:88:f3:e1:fe:f2:f1:ce:db:8e:2c: 78:cf:d3:32:9f:c1:8d:56:b5:a9:e5:ff:66:77:6c: 12:4a:fa:fc:c5:f8:98:d4:a1:96:8e:be:c3:57:8a: 90:db:af:3f:d3:0e:27:5e:13:bf:91:09:6c:89:cd: ed:3a:f1:60:4b:bd:75:3a:73:96:a2:57:87:4d:fc: e7:7c:cc:44:5e:e8:12:e7:9c:65:1b:06:c0:30:b6: c7:1d:a9:40:05:f7:8b:42:a1:27:03:87:b0:63:05: df:04:10:b6:6a:ca:44:b4:9d:d9:8e:ef:1a:5f:10: c5:b8:2c:46:a1:4d:79:a9:93:db:3b:4d:6c:16:92: 20:42:ee:75:17:97:11:4e:d1:1c:bc:51:f9:65:d0: 61:53:26:e7:ac:e0:71:57:7f:05:4c:dc:3b:44:6e: ba:05:30:9d:37:88:4f:24:e1:48:fa:7f:8d:f3:36: d3:0a:79:db:7e:03:3e:96:bf:77:cd:de:93:78:86: 67:67:76:47:45:fc:4b:f3:01:11:f2:e6:e7:83:86: 9b:eb:17:e8:fb:14:8c:1f:c7:90:d3:31:d8:b0:24: ee:29:b3:b7:1b:6f:06:67:ed:ce:35:8b:ae:d4:c4: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:26:8D:35:C7:0F:B9:C3:FD:98:30:75:49:57:39:2B:25:9A:E4:7F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyaNNccPucP9mDB1SVc5KyWa5H8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.123.0/24 Signature Algorithm: sha256WithRSAEncryption d1:ef:5f:2a:95:9a:93:1b:29:31:49:58:d1:11:a4:f8:9e:98: d6:5e:f7:30:e1:80:df:5a:d5:61:a5:ed:81:27:50:37:ba:63: 44:e2:8e:63:c9:7e:81:d8:05:1c:86:93:91:fa:86:6f:89:22: 6c:2d:2c:e4:0c:b5:d5:b5:42:68:67:cb:94:bf:54:ae:8d:5f: e1:e0:2a:6d:c8:ef:37:82:4f:d0:65:33:5e:bb:3f:0b:26:04: d6:4b:b8:dc:82:0e:b1:3f:21:29:2f:f8:12:8b:08:a3:31:16: 78:b6:7f:7f:a3:14:75:4d:84:57:c2:8e:b7:74:88:39:63:02: 9f:6d:2b:1d:4e:33:33:af:0b:7f:0a:84:02:4a:13:f6:2b:42: 9d:4e:ec:2b:e8:b7:7b:c3:1f:2d:8d:bc:b2:c9:62:05:3c:e4: 54:8f:69:1f:96:a4:4c:b9:6a:9b:8a:33:fe:fb:7e:61:e0:53: 28:0a:0d:65:7e:2f:38:23:4e:f4:2e:7b:f0:e6:a6:4d:af:7a: 23:71:fe:fe:fc:1c:9a:aa:12:30:e3:94:0a:f5:6a:de:5b:f3: d9:4d:fe:d9:cb:99:4c:05:ae:e5:c6:71:ee:ff:3c:aa:a9:2d: 64:9f:c3:42:2f:d5:a0:94:36:c6:9d:d3:c0:11:be:3f:a1:bf: 76:a3:cb:53 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE3MjY4RDM1QzcwRkI5 QzNGRDk4MzA3NTQ5NTczOTJCMjU5QUU0N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjXQ29F+Oh+FYCR/ccqmvYgeqDiPPh/vLxztuOLHjP0zKfwY1W tanl/2Z3bBJK+vzF+JjUoZaOvsNXipDbrz/TDideE7+RCWyJze068WBLvXU6c5ai V4dN/Od8zERe6BLnnGUbBsAwtscdqUAF94tCoScDh7BjBd8EELZqykS0ndmO7xpf EMW4LEahTXmpk9s7TWwWkiBC7nUXlxFO0Ry8Ufll0GFTJues4HFXfwVM3DtEbroF MJ03iE8k4Uj6f43zNtMKedt+Az6Wv3fN3pN4hmdndkdF/EvzARHy5ueDhpvrF+j7 FIwfx5DTMdiwJO4ps7cbbwZn7c41i67UxDSnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUFyaNNccPucP9mDB1SVc5KyWa5H8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9GeWFOTmNjUHVjUDltREIxU1Zj NUt5V2E1SDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJ7 MA0GCSqGSIb3DQEBCwUAA4IBAQDR718qlZqTGykxSVjREaT4npjWXvcw4YDfWtVh pe2BJ1A3umNE4o5jyX6B2AUchpOR+oZviSJsLSzkDLXVtUJoZ8uUv1SujV/h4Cpt yO83gk/QZTNeuz8LJgTWS7jcgg6xPyEpL/gSiwijMRZ4tn9/oxR1TYRXwo63dIg5 YwKfbSsdTjMzrwt/CoQCShP2K0KdTuwr6Ld7wx8tjbyyyWIFPORUj2kflqRMuWqb ijP++35h4FMoCg1lfi84I070Lnvw5qZNr3ojcf7+/ByaqhIw45QK9WreW/PZTf7Z y5lMBa7lxnHu/zyqqS1kn8NCL9WglDbGndPAEb4/ob92o8tT -----END CERTIFICATE-----Generated at Mon May 6 05:46:22 2024 by rpki-client on console-fra.rpki-client.org