$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XbwUWv4UXUpoJAIc4p4kPlje8rA.roa File: XbwUWv4UXUpoJAIc4p4kPlje8rA.roa (raw, json) Hash identifier: fNSGPoiTm6O8RHzHBUF7zos7R35gDNOFcdjrQtTfq0M= Subject key identifier: 5D:BC:14:5A:FE:14:5D:4A:68:24:02:1C:E2:9E:24:3E:58:DE:F2:B0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F31 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XbwUWv4UXUpoJAIc4p4kPlje8rA.roa Signing time: Fri 01 Sep 2023 08:56:43 +0000 ROA not before: Fri 01 Sep 2023 08:56:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 210.242.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 14:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3889 (0xf31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5DBC145AFE145D4A6824021CE29E243E58DEF2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:21:a4:32:cf:5f:41:ab:d5:08:44:2a:d5: 0b:2f:1d:a2:15:28:75:de:e0:34:b4:60:13:ea:5e: d5:52:09:3b:39:13:fd:35:77:13:4a:1a:56:d2:dc: a1:89:d0:14:12:1a:ba:48:70:1a:e7:cf:cb:2c:bb: d8:bc:95:44:e5:44:88:2e:b4:79:70:a3:f6:61:b0: 6f:43:d2:d5:74:92:da:0c:fc:2b:92:d7:3b:42:31: 40:52:6a:9e:17:a8:5c:fa:c1:9e:a1:96:2b:19:e2: 12:39:a5:05:62:63:1d:67:fb:c6:7f:2a:18:ca:c2: 76:95:fa:a3:0b:25:92:f0:45:5c:aa:87:52:6f:30: 03:ee:60:f7:4f:8a:7e:8f:31:34:7f:ba:ad:8f:10: 5c:df:06:57:00:ae:18:36:35:b0:0b:9d:9e:57:40: 26:40:f6:fa:db:ca:5d:6f:ba:f7:1f:f7:57:4b:05: b7:fe:4e:53:37:c5:1f:cf:74:21:b3:98:60:67:f9: 17:e2:4b:8e:f8:26:9a:60:ee:4f:3b:3a:eb:f5:fc: c5:9f:7f:05:31:10:f9:3b:3f:ea:f8:27:86:46:fd: e7:84:ef:ec:9c:5e:08:4a:72:51:1c:c9:f3:ad:0b: e2:c4:f1:43:89:15:44:41:25:18:7a:ee:5b:17:10: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:14:5A:FE:14:5D:4A:68:24:02:1C:E2:9E:24:3E:58:DE:F2:B0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XbwUWv4UXUpoJAIc4p4kPlje8rA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.186.0/24 Signature Algorithm: sha256WithRSAEncryption 39:15:7a:94:f6:2b:c2:af:ee:9e:b7:09:af:d0:33:d6:c6:38: 33:32:1e:c2:b8:0c:48:da:39:b2:6d:b4:54:4e:12:3d:24:8f: c3:f2:ad:c5:c5:a7:1c:c8:16:8a:53:f9:78:90:09:9d:0b:5d: a5:e0:02:f0:1a:9c:61:32:2c:2f:ff:8d:25:73:a1:8d:b5:0c: fc:c9:d1:e5:6e:bc:21:40:5f:f9:83:40:ec:57:a5:17:f0:0f: a3:09:c8:bc:5d:18:67:72:6b:1c:ac:a2:0d:da:97:9b:42:ef: d7:8e:cb:b2:9a:b3:9f:b1:52:06:48:bc:63:96:89:b2:8f:92: 8c:67:9f:72:59:f0:f5:db:ee:e8:d9:3d:3f:76:0c:57:5d:94: aa:67:de:27:69:05:39:d5:5b:39:08:15:81:66:57:cf:a9:5d: c2:59:e6:6e:92:27:b5:08:b5:e8:b4:79:64:dd:f3:15:0e:9d: 72:15:61:f1:f5:ad:21:9e:03:18:8a:72:09:8c:f9:68:52:c2: cf:84:d7:2d:c6:04:48:cb:d7:92:94:f6:df:53:df:29:4d:b9: 94:51:61:eb:4d:06:fd:99:0f:9b:c9:99:53:bb:e4:47:6e:1b: b4:f3:f9:28:17:ec:d0:5e:d4:5e:65:86:47:94:c4:d1:ae:03: 5c:4d:9e:77 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVEQkMxNDVBRkUxNDVE NEE2ODI0MDIxQ0UyOUUyNDNFNThERUYyQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJAiGkMs9fQavVCEQq1QsvHaIVKHXe4DS0YBPqXtVSCTs5E/01 dxNKGlbS3KGJ0BQSGrpIcBrnz8ssu9i8lUTlRIgutHlwo/ZhsG9D0tV0ktoM/CuS 1ztCMUBSap4XqFz6wZ6hlisZ4hI5pQViYx1n+8Z/KhjKwnaV+qMLJZLwRVyqh1Jv MAPuYPdPin6PMTR/uq2PEFzfBlcArhg2NbALnZ5XQCZA9vrbyl1vuvcf91dLBbf+ TlM3xR/PdCGzmGBn+RfiS474Jppg7k87Ouv1/MWffwUxEPk7P+r4J4ZG/eeE7+yc XghKclEcyfOtC+LE8UOJFURBJRh67lsXEIDxAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUXbwUWv4UXUpoJAIc4p4kPlje8rAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YYndVV3Y0VVhVcG9KQUljNHA0 a1BsamU4ckEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vK6 MA0GCSqGSIb3DQEBCwUAA4IBAQA5FXqU9ivCr+6etwmv0DPWxjgzMh7CuAxI2jmy bbRUThI9JI/D8q3FxaccyBaKU/l4kAmdC12l4ALwGpxhMiwv/40lc6GNtQz8ydHl brwhQF/5g0DsV6UX8A+jCci8XRhncmscrKIN2pebQu/XjsuymrOfsVIGSLxjlomy j5KMZ59yWfD12+7o2T0/dgxXXZSqZ94naQU51Vs5CBWBZlfPqV3CWeZukie1CLXo tHlk3fMVDp1yFWHx9a0hngMYinIJjPloUsLPhNctxgRIy9eSlPbfU98pTbmUUWHr TQb9mQ+byZlTu+RHbhu08/koF+zQXtReZYZHlMTRrgNcTZ53 -----END CERTIFICATE-----Generated at Mon May 6 01:02:47 2024 by rpki-client on console-ams.rpki-client.org