$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/YD4lOaeMpAoKLAufUS2bijFULEs.roa File: YD4lOaeMpAoKLAufUS2bijFULEs.roa (raw, json) Hash identifier: RIBgxNmiPy3jJ5B54g1hiNTuQnTK81n2VdYskNK8AYo= Subject key identifier: 60:3E:25:39:A7:8C:A4:0A:0A:2C:0B:9F:51:2D:9B:8A:31:54:2C:4B Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F2E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YD4lOaeMpAoKLAufUS2bijFULEs.roa Signing time: Fri 01 Sep 2023 08:56:42 +0000 ROA not before: Fri 01 Sep 2023 08:56:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 210.242.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3886 (0xf2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=603E2539A78CA40A0A2C0B9F512D9B8A31542C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:a3:7e:26:f4:32:ba:a2:b2:53:d7:0a:5b: e5:46:54:70:e0:13:cf:e2:26:d5:e6:aa:92:1e:42: 03:0c:45:3f:51:cf:c6:a5:17:18:93:02:72:60:6b: 6d:81:25:3d:01:3a:2f:dc:51:ad:15:6a:d5:4e:93: a4:75:3c:0e:63:68:36:aa:78:fd:36:dd:a5:25:7f: de:e6:de:4b:15:ea:01:20:59:30:8f:b4:66:96:b9: 46:70:67:77:86:00:0c:20:d4:d2:99:04:93:df:be: a1:f0:4f:05:5d:f5:63:7b:ef:25:cf:ec:c2:48:0c: 84:26:c2:6e:a4:57:93:90:50:39:e7:83:00:3e:6f: eb:ee:bd:5a:d9:8c:77:0f:c5:8b:ce:53:6d:77:1a: 6f:55:33:04:02:ae:bd:1d:87:da:19:eb:b8:ce:84: 55:f5:79:0e:a1:42:b4:f8:0d:84:d2:e1:cb:8c:5c: 85:aa:d5:80:e2:e0:6f:3e:a5:b7:05:91:48:88:cf: df:e6:a5:42:99:19:74:2a:74:ae:d1:df:67:50:ff: 82:cd:9f:f9:cc:ab:1e:7c:d4:cb:a4:d0:20:ec:fa: 14:20:30:a9:ed:b8:f7:9e:4c:af:92:a3:7e:c8:93: c1:28:c6:6c:b3:a2:98:1c:b7:7f:99:31:70:f0:32: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3E:25:39:A7:8C:A4:0A:0A:2C:0B:9F:51:2D:9B:8A:31:54:2C:4B X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YD4lOaeMpAoKLAufUS2bijFULEs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.118.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:a3:e7:00:06:7d:6e:0c:64:b9:f9:b7:ba:8e:b0:80:fb:6d: 6f:2e:c6:c2:44:d2:96:14:0d:20:e5:d7:3c:1a:8f:c5:c7:b0: 49:0d:78:a3:cf:2a:12:df:6f:81:3b:b2:5a:e2:c9:9e:1c:fb: 3f:02:5d:30:fb:45:87:33:cb:b7:b2:a0:df:08:a0:69:11:bb: 07:ab:52:b7:64:70:a6:7f:b9:30:62:d0:06:58:63:ed:45:01: d7:7c:19:33:a6:04:97:f7:b1:74:7e:72:93:02:85:8a:2b:ea: 39:d3:3b:30:be:1f:84:6e:65:33:80:24:55:ca:1f:72:4d:ec: 17:51:61:76:62:f8:37:b6:50:35:02:7a:3c:0c:e1:f0:db:44: c0:d0:50:c5:b0:ce:e6:6a:c1:21:28:7d:7d:d5:30:40:43:f7: 4a:85:28:25:5c:ec:36:90:6f:a3:de:38:6e:7d:fa:dc:b5:c0: 52:5b:29:b9:c1:08:0e:c6:d3:d8:3d:94:d4:86:39:a9:44:92: 8a:70:ea:77:db:31:b1:27:a8:10:cc:d0:e0:dc:70:19:e7:8e: f6:ca:fd:5a:0a:68:a6:8a:89:0a:5c:2f:4a:68:d1:4c:53:91: 77:e8:23:ab:b2:d1:a1:8e:48:98:12:97:5b:6b:f2:86:e2:96: 8a:26:c4:89 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYwM0UyNTM5QTc4Q0E0 MEEwQTJDMEI5RjUxMkQ5QjhBMzE1NDJDNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8GKN+JvQyuqKyU9cKW+VGVHDgE8/iJtXmqpIeQgMMRT9Rz8al FxiTAnJga22BJT0BOi/cUa0VatVOk6R1PA5jaDaqeP023aUlf97m3ksV6gEgWTCP tGaWuUZwZ3eGAAwg1NKZBJPfvqHwTwVd9WN77yXP7MJIDIQmwm6kV5OQUDnngwA+ b+vuvVrZjHcPxYvOU213Gm9VMwQCrr0dh9oZ67jOhFX1eQ6hQrT4DYTS4cuMXIWq 1YDi4G8+pbcFkUiIz9/mpUKZGXQqdK7R32dQ/4LNn/nMqx581Muk0CDs+hQgMKnt uPeeTK+So37Ik8Eoxmyzopgct3+ZMXDwMur1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUYD4lOaeMpAoKLAufUS2bijFULEswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ZRDRsT2FlTXBBb0tMQXVmVVMy YmlqRlVMRXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJ2 MA0GCSqGSIb3DQEBCwUAA4IBAQB+o+cABn1uDGS5+be6jrCA+21vLsbCRNKWFA0g 5dc8Go/Fx7BJDXijzyoS32+BO7Ja4smeHPs/Al0w+0WHM8u3sqDfCKBpEbsHq1K3 ZHCmf7kwYtAGWGPtRQHXfBkzpgSX97F0fnKTAoWKK+o50zswvh+EbmUzgCRVyh9y TewXUWF2Yvg3tlA1Ano8DOHw20TA0FDFsM7masEhKH191TBAQ/dKhSglXOw2kG+j 3jhuffrctcBSWym5wQgOxtPYPZTUhjmpRJKKcOp32zGxJ6gQzNDg3HAZ5472yv1a CmimiokKXC9KaNFMU5F36COrstGhjkiYEpdba/KG4paKJsSJ -----END CERTIFICATE-----Generated at Mon May 6 05:46:22 2024 by rpki-client on console-fra.rpki-client.org