$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa File: ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa (raw, json) Hash identifier: WJqdLjdIX0G2OAU5WH8HCCgz5I5uaFphqqVGVv5nd+w= Subject key identifier: 64:4D:6B:65:D4:85:25:56:FC:5A:1C:41:F7:FA:CC:27:8C:FB:72:73 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F8F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa Signing time: Fri 01 Sep 2023 08:57:13 +0000 ROA not before: Fri 01 Sep 2023 08:57:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 21859 IP address blocks: 210.61.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3983 (0xf8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=644D6B65D4852556FC5A1C41F7FACC278CFB7273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:a3:7d:95:53:ff:8f:95:0d:ae:c8:c7:bf: e4:99:8d:2b:03:35:2b:1f:ad:eb:c5:c3:a2:60:a6: 0b:e9:22:f1:97:2b:f7:6e:58:a0:3f:c7:32:7e:d6: af:9a:fc:4f:ad:e7:86:a0:1a:f5:fe:d4:fd:b0:d2: f1:aa:0a:7a:89:f3:a0:b3:8d:35:8d:41:2e:92:cf: 69:81:e7:31:a5:64:c1:3f:0b:08:fd:26:01:d5:24: ab:f8:6a:4a:1c:11:2f:86:9c:36:38:4f:fb:15:58: 0f:78:84:db:80:6a:5a:d7:1d:8b:78:68:71:8e:1a: a1:bb:f9:7c:e2:f1:56:82:07:e8:4d:75:88:d1:11: e4:00:05:e7:1c:36:00:e0:93:2e:84:11:ee:8e:48: c0:b1:de:4f:fb:64:f0:02:15:32:ce:65:56:04:99: 46:fc:de:0a:4d:f0:b5:7f:1c:e0:ce:9e:7c:24:57: 7a:77:a9:56:e3:f0:2d:7c:19:60:ba:0b:3a:30:ee: 0c:50:58:87:54:13:c3:76:6d:d2:65:6f:a1:15:3f: a2:d8:8b:0b:5d:55:ac:09:b0:86:fc:9f:65:62:93: 29:3e:10:3c:ec:0e:42:e2:9a:5e:01:12:84:de:15: 30:04:f4:50:99:75:ba:29:93:a7:8a:93:4b:b2:da: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4D:6B:65:D4:85:25:56:FC:5A:1C:41:F7:FA:CC:27:8C:FB:72:73 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.61.104.0/24 Signature Algorithm: sha256WithRSAEncryption 96:01:59:04:ad:b1:b6:80:0b:0d:b1:24:87:ef:24:e4:70:d9: 26:28:a8:8b:b0:51:b5:81:56:bf:54:99:ae:ec:d5:2c:5a:a5: 51:19:16:c2:0c:02:3f:5b:71:55:07:8f:99:ba:9b:e6:95:97: 56:a7:c1:5e:3b:95:ce:5a:35:ea:c1:b7:6a:1f:ab:ac:69:d7: a5:41:17:51:90:14:2f:18:d3:26:6c:70:d4:91:b8:9a:46:53: 8d:02:bf:9c:fb:94:2d:c2:47:6e:e9:07:02:72:2d:1f:61:45: ab:29:24:c2:f5:c0:9d:37:eb:18:0b:82:cc:70:27:4f:bb:ca: 60:50:8a:66:cc:e1:ce:52:c4:f6:41:dc:58:d1:b6:11:7c:96: 59:c4:ff:76:28:ff:d5:87:4c:10:e3:8b:2e:fc:fd:39:5d:9b: 15:d2:b9:3b:6c:ab:40:cd:37:66:d7:22:81:a9:60:0d:c7:4d: 0b:6e:ec:99:4b:a0:1d:00:15:80:39:9a:03:01:c8:b0:85:18: 19:d0:81:45:5f:79:c3:4c:9c:c1:70:86:f1:63:32:09:63:e3: 76:bc:35:1d:fd:bb:f9:1e:6f:02:08:4a:a9:96:72:0a:f7:a7: 8f:23:92:af:87:50:d3:9b:25:c7:d3:e6:1b:3a:b4:23:5b:6d: 28:0f:9e:1d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY0NEQ2QjY1RDQ4NTI1 NTZGQzVBMUM0MUY3RkFDQzI3OENGQjcyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQComKN9lVP/j5UNrsjHv+SZjSsDNSsfrevFw6JgpgvpIvGXK/du WKA/xzJ+1q+a/E+t54agGvX+1P2w0vGqCnqJ86CzjTWNQS6Sz2mB5zGlZME/Cwj9 JgHVJKv4akocES+GnDY4T/sVWA94hNuAalrXHYt4aHGOGqG7+Xzi8VaCB+hNdYjR EeQABeccNgDgky6EEe6OSMCx3k/7ZPACFTLOZVYEmUb83gpN8LV/HODOnnwkV3p3 qVbj8C18GWC6Czow7gxQWIdUE8N2bdJlb6EVP6LYiwtdVawJsIb8n2Vikyk+EDzs DkLiml4BEoTeFTAE9FCZdbopk6eKk0uy2nfHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUZE1rZdSFJVb8WhxB9/rMJ4z7cnMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9aRTFyWmRTRkpWYjhXaHhCOV9y TUo0ejdjbk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j1o MA0GCSqGSIb3DQEBCwUAA4IBAQCWAVkErbG2gAsNsSSH7yTkcNkmKKiLsFG1gVa/ VJmu7NUsWqVRGRbCDAI/W3FVB4+ZupvmlZdWp8FeO5XOWjXqwbdqH6usadelQRdR kBQvGNMmbHDUkbiaRlONAr+c+5Qtwkdu6QcCci0fYUWrKSTC9cCdN+sYC4LMcCdP u8pgUIpmzOHOUsT2QdxY0bYRfJZZxP92KP/Vh0wQ44su/P05XZsV0rk7bKtAzTdm 1yKBqWANx00LbuyZS6AdABWAOZoDAciwhRgZ0IFFX3nDTJzBcIbxYzIJY+N2vDUd /bv5Hm8CCEqplnIK96ePI5Kvh1DTmyXH0+YbOrQjW20oD54d -----END CERTIFICATE-----Generated at Thu May 2 04:47:34 2024 by rpki-client on console-fra.rpki-client.org