$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa File: Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa (raw, json) Hash identifier: V01QAH5zHKfV0EusIA+QkN9nVh4fQB/uWDZTOCzbBkk= Subject key identifier: 2A:EE:F9:0E:39:97:23:A2:14:88:F4:47:3C:E1:BE:BF:F9:7A:F9:B5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F9F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa Signing time: Fri 01 Sep 2023 08:57:18 +0000 ROA not before: Fri 01 Sep 2023 08:57:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 211.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3999 (0xf9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2AEEF90E399723A21488F4473CE1BEBFF97AF9B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:34:5a:d3:8b:eb:07:70:47:ed:e8:82:29: b9:22:dc:6b:da:c4:20:10:a5:f6:d4:6a:53:3c:c4: 77:41:49:11:42:fa:52:5f:6e:3f:36:c4:57:9b:86: b1:cd:d1:f2:85:84:78:25:68:f6:4b:c3:d2:13:3d: ec:33:47:67:ee:a2:05:bf:e3:7c:67:f7:d8:49:c8: f3:9c:27:2d:b0:30:f8:f0:cb:8c:52:bf:0c:cf:0f: 48:fa:77:a9:13:a8:96:eb:29:04:97:db:e9:4e:d0: 6e:4e:a6:c7:79:d9:16:60:49:f8:98:8a:8a:03:fc: d5:9a:40:26:9c:48:8e:a9:8d:ad:92:75:b1:4e:de: 97:80:1a:b2:c5:4b:da:c2:17:22:48:77:29:ce:ed: 4c:af:91:88:d9:76:6f:ad:8e:f6:4d:7f:c5:45:b1: e2:1f:93:a2:77:5d:b5:81:d0:1f:0f:a9:47:7f:fe: 2f:79:83:4d:ec:4c:b2:76:69:91:ec:54:72:b6:fb: 48:e1:56:a3:33:2e:27:27:8d:df:f5:43:11:0f:05: b1:26:8c:78:4c:29:74:d5:f7:b1:96:81:4e:b3:39: 5b:68:fd:64:ff:b2:f2:ac:03:c2:b1:a3:67:44:b8: d5:ec:aa:2c:91:8a:a0:25:9e:31:ac:a0:d2:05:62: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:F9:0E:39:97:23:A2:14:88:F4:47:3C:E1:BE:BF:F9:7A:F9:B5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:e0:20:81:22:16:30:a7:7f:20:d4:1c:07:71:a7:26:fe:de: 1f:a9:49:ae:02:a5:30:6e:f8:c2:95:a2:fd:83:d4:fa:74:b9: d4:79:6c:e4:5a:9e:61:7e:0a:2b:b4:c6:31:4b:04:0c:22:19: 21:cf:8e:26:35:ad:70:41:b8:d2:ea:b5:0d:68:2d:91:b9:cf: 34:b6:01:44:05:d5:df:ac:6f:cd:6f:b1:fd:75:2f:eb:0d:a5: 29:48:b5:e7:98:8e:75:e7:8b:2f:98:da:86:fb:c6:51:4c:48: f8:6d:2c:4f:93:42:8a:30:69:9a:a2:de:b3:d1:c6:b4:fa:d1: 19:8b:e9:16:85:18:bd:67:bb:cb:2b:e1:a9:ac:62:56:5c:1c: 35:58:a7:a3:4e:70:3e:3b:25:43:d3:e1:81:4b:09:02:f9:78: 87:8e:b0:db:8b:8e:aa:54:d2:95:97:58:75:6f:5e:3a:fd:8f: 1a:ca:46:1c:1b:65:12:7a:b6:d7:0e:43:81:7b:2b:58:d7:b9: 4a:ce:24:04:75:4f:f8:33:01:30:1c:c5:a0:22:d3:1a:9e:c2: 75:26:27:55:03:03:c6:63:af:fa:6c:b4:ad:0e:e0:2c:26:c4: ea:3c:5a:3e:47:86:1b:6b:98:f5:e5:5f:8d:4c:93:fb:c9:72: ef:52:22:b4 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJBRUVGOTBFMzk5NzIz QTIxNDg4RjQ0NzNDRTFCRUJGRjk3QUY5QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZyDRa04vrB3BH7eiCKbki3GvaxCAQpfbUalM8xHdBSRFC+lJf bj82xFebhrHN0fKFhHglaPZLw9ITPewzR2fuogW/43xn99hJyPOcJy2wMPjwy4xS vwzPD0j6d6kTqJbrKQSX2+lO0G5Opsd52RZgSfiYiooD/NWaQCacSI6pja2SdbFO 3peAGrLFS9rCFyJIdynO7UyvkYjZdm+tjvZNf8VFseIfk6J3XbWB0B8PqUd//i95 g03sTLJ2aZHsVHK2+0jhVqMzLicnjd/1QxEPBbEmjHhMKXTV97GWgU6zOVto/WT/ svKsA8Kxo2dEuNXsqiyRiqAlnjGsoNIFYhZtAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUKu75DjmXI6IUiPRHPOG+v/l6+bUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9LdTc1RGptWEk2SVVpUFJIUE9H LXZfbDYtYlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA00gw DQYJKoZIhvcNAQELBQADggEBAEPgIIEiFjCnfyDUHAdxpyb+3h+pSa4CpTBu+MKV ov2D1Pp0udR5bORanmF+Ciu0xjFLBAwiGSHPjiY1rXBBuNLqtQ1oLZG5zzS2AUQF 1d+sb81vsf11L+sNpSlIteeYjnXniy+Y2ob7xlFMSPhtLE+TQoowaZqi3rPRxrT6 0RmL6RaFGL1nu8sr4amsYlZcHDVYp6NOcD47JUPT4YFLCQL5eIeOsNuLjqpU0pWX WHVvXjr9jxrKRhwbZRJ6ttcOQ4F7K1jXuUrOJAR1T/gzATAcxaAi0xqewnUmJ1UD A8Zjr/pstK0O4CwmxOo8Wj5HhhtrmPXlX41Mk/vJcu9SIrQ= -----END CERTIFICATE-----Generated at Tue Jun 4 17:32:13 2024 by rpki-client on console-fra.rpki-client.org