$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KvAB-JuEQqLNIDbmWC2azI73gK0.roa File: KvAB-JuEQqLNIDbmWC2azI73gK0.roa (raw, json) Hash identifier: MTc/MF9xHl3kScaPMSpzCHGEVY+Hr6TclVRTWgO5dSQ= Subject key identifier: 2A:F0:01:F8:9B:84:42:A2:CD:20:36:E6:58:2D:9A:CC:8E:F7:80:AD Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F40 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KvAB-JuEQqLNIDbmWC2azI73gK0.roa Signing time: Fri 01 Sep 2023 08:56:48 +0000 ROA not before: Fri 01 Sep 2023 08:56:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 36040 IP address blocks: 2001:b032:c0ff:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 02:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3904 (0xf40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2AF001F89B8442A2CD2036E6582D9ACC8EF780AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:09:16:2b:6a:ee:dc:ec:ed:32:6d:d5:7c: 96:be:ac:83:16:6c:9e:8a:61:97:bf:57:b2:06:88: 57:e8:c7:25:2b:3a:27:31:08:5e:06:fd:ad:55:29: 78:85:6e:0c:72:d1:0a:74:c4:9f:4b:71:f7:90:ed: 5d:e4:c6:97:e7:00:41:45:e9:9d:df:9f:34:f8:a4: 59:08:32:1b:4f:ed:8a:f1:28:47:f0:2a:cc:b1:e3: 53:2c:1e:bb:4d:63:b2:0c:30:2b:28:0d:f0:ee:94: 75:e6:a2:3f:29:8d:8e:47:2b:68:70:52:83:13:8c: f3:5d:5a:d6:71:ae:ae:4b:b9:d6:f4:70:5e:48:5d: 8d:d1:96:ac:d8:69:d1:38:fb:6b:44:b4:3a:a8:ab: 38:3d:e6:a4:2b:a2:80:c7:36:61:9a:51:80:11:bd: 71:0d:fe:26:86:e2:55:f3:be:bb:dc:c2:47:75:dc: 57:76:6d:44:df:f5:80:9c:91:95:d2:af:c5:e8:f7: 21:5d:f0:6e:9b:fb:c7:81:8f:c0:dc:76:58:b5:a4: cc:35:48:cb:a5:9f:4b:82:66:47:22:30:e8:2d:d1: 1d:a8:d4:60:48:5a:99:89:52:f9:a9:36:cd:94:5e: c4:69:ec:02:ce:a4:12:15:ef:af:9d:b2:19:8f:67: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F0:01:F8:9B:84:42:A2:CD:20:36:E6:58:2D:9A:CC:8E:F7:80:AD X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KvAB-JuEQqLNIDbmWC2azI73gK0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b032:c0ff:1::/64 Signature Algorithm: sha256WithRSAEncryption 0a:c2:70:8c:75:6a:4b:4f:e3:c6:1f:d2:7e:ed:1a:39:1e:78: 4b:7b:58:bc:e8:e7:24:96:58:c6:ed:03:04:95:86:ba:f4:66: c0:94:11:86:dc:0c:77:c6:e5:b5:45:60:af:89:ca:b6:e4:04: 73:8e:62:de:87:4b:24:4f:f6:95:6c:f9:0c:23:4c:4c:7c:46: 34:9d:7b:3b:d6:6f:98:9e:d5:e3:51:50:81:03:97:4d:db:6a: 5e:42:5f:fe:11:ad:45:e1:39:fd:b0:22:e0:aa:46:f3:64:79: f5:67:ff:db:d8:0a:18:06:6b:f7:85:8a:46:fc:2f:db:a6:69: 1f:17:44:28:95:76:d8:68:c0:e6:55:d3:65:47:b2:8a:c5:04: 0d:28:80:f5:04:98:87:4d:0f:c3:32:4d:3b:39:0e:c5:c8:4b: 99:6f:ab:24:71:29:6a:a2:58:7d:84:6d:96:08:8a:cd:bb:52: 75:c3:1d:24:37:e0:9f:52:ed:21:63:79:dd:79:6a:86:e4:3e: e1:4e:3b:24:35:34:3e:1e:2f:c6:d5:9a:c2:57:7f:d3:c5:f9: 5a:cc:ac:0a:3f:34:30:a4:0f:7c:5d:6c:5a:bc:26:a1:1e:68: f2:f9:f4:67:c2:0e:7a:da:10:d5:3d:05:4e:ef:d2:61:92:95: 25:24:ab:9a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICD0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJBRjAwMUY4OUI4NDQy QTJDRDIwMzZFNjU4MkQ5QUNDOEVGNzgwQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCU4gkWK2ru3OztMm3VfJa+rIMWbJ6KYZe/V7IGiFfoxyUrOicx CF4G/a1VKXiFbgxy0Qp0xJ9LcfeQ7V3kxpfnAEFF6Z3fnzT4pFkIMhtP7YrxKEfw Ksyx41MsHrtNY7IMMCsoDfDulHXmoj8pjY5HK2hwUoMTjPNdWtZxrq5Ludb0cF5I XY3RlqzYadE4+2tEtDqoqzg95qQrooDHNmGaUYARvXEN/iaG4lXzvrvcwkd13Fd2 bUTf9YCckZXSr8Xo9yFd8G6b+8eBj8Dcdli1pMw1SMuln0uCZkciMOgt0R2o1GBI WpmJUvmpNs2UXsRp7ALOpBIV76+dshmPZ5IVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUKvAB+JuEQqLNIDbmWC2azI73gK0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9LdkFCLUp1RVFxTE5JRGJtV0My YXpJNzNnSzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw MsD/AAEwDQYJKoZIhvcNAQELBQADggEBAArCcIx1aktP48Yf0n7tGjkeeEt7WLzo 5ySWWMbtAwSVhrr0ZsCUEYbcDHfG5bVFYK+JyrbkBHOOYt6HSyRP9pVs+QwjTEx8 RjSdezvWb5ie1eNRUIEDl03bal5CX/4RrUXhOf2wIuCqRvNkefVn/9vYChgGa/eF ikb8L9umaR8XRCiVdthowOZV02VHsorFBA0ogPUEmIdND8MyTTs5DsXIS5lvqyRx KWqiWH2EbZYIis27UnXDHSQ34J9S7SFjed15aobkPuFOOyQ1ND4eL8bVmsJXf9PF +VrMrAo/NDCkD3xdbFq8JqEeaPL59GfCDnraENU9BU7v0mGSlSUkq5o= -----END CERTIFICATE-----Generated at Sat May 18 07:29:29 2024 by rpki-client on console-fra.rpki-client.org