$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_rlbfTRvffaI8sBY-Chf4QZs8ec.roa File: _rlbfTRvffaI8sBY-Chf4QZs8ec.roa (raw, json) Hash identifier: dInRd4Xjmvv71WI88Ua8CVDBhGADOrstT06W/plemyM= Subject key identifier: FE:B9:5B:7D:34:6F:7D:F6:88:F2:C0:58:F8:28:5F:E1:06:6C:F1:E7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F5F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_rlbfTRvffaI8sBY-Chf4QZs8ec.roa Signing time: Fri 01 Sep 2023 08:57:00 +0000 ROA not before: Fri 01 Sep 2023 08:57:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 210.242.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 11:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3935 (0xf5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FEB95B7D346F7DF688F2C058F8285FE1066CF1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:7c:41:c2:22:d7:63:84:a3:bd:25:04:d2: d4:35:2f:b5:81:52:25:f3:4b:73:90:79:36:1a:b8: 13:4c:60:63:4a:c4:d2:29:e8:a1:4a:0e:c9:9d:70: 72:a9:56:a5:45:37:bb:8b:66:35:a2:6d:9b:6e:4d: 8b:a4:2f:37:2f:f5:85:eb:ad:59:74:0e:5c:94:74: f3:42:93:e1:24:99:2a:e9:58:15:f6:66:7d:8f:a9: 4d:5e:8d:94:8c:e4:dc:f4:d1:a9:de:c7:92:00:dc: 59:11:13:22:0d:d5:fc:35:b0:96:5b:4f:bd:67:57: 47:e3:f8:f1:2d:de:17:42:b9:de:e8:b7:76:b2:21: c9:c1:f9:a7:d3:5c:43:d9:48:08:27:c7:88:73:d4: 83:d1:77:86:d1:55:59:c3:60:48:ed:f9:6f:1d:36: 67:02:3b:9a:98:c9:18:5f:0c:03:f8:62:a0:17:80: 42:a8:ff:cc:d8:78:b9:a8:41:81:ae:2b:aa:4a:bc: 96:9d:43:9a:f5:a1:9b:8b:c2:d7:3f:dd:9e:a5:dd: ea:02:83:31:42:28:9b:60:dd:e5:01:17:68:f1:70: 92:f0:03:be:04:b3:c4:ee:bb:0e:09:8d:25:a1:29: ff:02:8f:a2:ed:70:c6:76:aa:49:a3:90:c9:67:7b: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:5B:7D:34:6F:7D:F6:88:F2:C0:58:F8:28:5F:E1:06:6C:F1:E7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_rlbfTRvffaI8sBY-Chf4QZs8ec.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.83.0/24 Signature Algorithm: sha256WithRSAEncryption c6:83:bf:14:0c:1f:63:e8:22:5a:65:22:55:00:f3:62:55:55: dd:84:a9:32:f7:f0:61:9d:7c:7e:cb:65:66:0e:6d:29:bd:40: fd:23:8d:43:c7:50:98:ae:a7:b7:94:56:39:df:69:91:c5:a2: ba:86:92:3a:76:89:df:6b:bd:a3:60:ab:56:f0:70:ae:55:ce: 3e:42:0b:50:b9:77:d5:4d:b2:21:f2:c2:d0:fd:fb:77:4f:9e: 35:6f:93:d1:8e:f0:00:18:4c:ac:80:2c:ec:52:17:48:f6:a4: e9:2c:36:6b:bb:34:0e:92:9d:b1:ab:f1:55:f5:53:92:ca:01: 8a:71:e1:ab:0d:2c:58:b0:5c:44:15:db:3e:b6:b8:69:8a:d5: 56:a1:48:db:f0:4a:3a:9b:88:7b:65:b3:64:5e:70:2b:d6:d0: 47:f6:c3:21:74:c1:56:ed:3e:a0:42:6a:09:3b:4d:3b:37:90: 83:b1:53:ff:59:58:d3:91:32:73:88:8e:21:5e:fa:66:39:e5: 4c:3a:2a:3e:af:5a:f0:4e:82:4a:6d:31:47:dc:ad:d4:9d:75: 0e:d7:4c:12:92:6d:2f:cd:f9:bd:06:7b:76:8a:f1:0f:f4:30: 16:0b:d5:c1:bc:39:30:85:5f:d8:aa:0e:e4:4a:60:23:f6:da: 7e:25:64:c1 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFQjk1QjdEMzQ2RjdE RjY4OEYyQzA1OEY4Mjg1RkUxMDY2Q0YxRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8c3xBwiLXY4SjvSUE0tQ1L7WBUiXzS3OQeTYauBNMYGNKxNIp 6KFKDsmdcHKpVqVFN7uLZjWibZtuTYukLzcv9YXrrVl0DlyUdPNCk+EkmSrpWBX2 Zn2PqU1ejZSM5Nz00anex5IA3FkREyIN1fw1sJZbT71nV0fj+PEt3hdCud7ot3ay IcnB+afTXEPZSAgnx4hz1IPRd4bRVVnDYEjt+W8dNmcCO5qYyRhfDAP4YqAXgEKo /8zYeLmoQYGuK6pKvJadQ5r1oZuLwtc/3Z6l3eoCgzFCKJtg3eUBF2jxcJLwA74E s8Tuuw4JjSWhKf8Cj6LtcMZ2qkmjkMlnew6HAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/rlbfTRvffaI8sBY+Chf4QZs8ecwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9fcmxiZlRSdmZmYUk4c0JZLUNo ZjRRWnM4ZWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJT MA0GCSqGSIb3DQEBCwUAA4IBAQDGg78UDB9j6CJaZSJVAPNiVVXdhKky9/BhnXx+ y2VmDm0pvUD9I41Dx1CYrqe3lFY532mRxaK6hpI6donfa72jYKtW8HCuVc4+QgtQ uXfVTbIh8sLQ/ft3T541b5PRjvAAGEysgCzsUhdI9qTpLDZruzQOkp2xq/FV9VOS ygGKceGrDSxYsFxEFds+trhpitVWoUjb8Eo6m4h7ZbNkXnAr1tBH9sMhdMFW7T6g QmoJO007N5CDsVP/WVjTkTJziI4hXvpmOeVMOio+r1rwToJKbTFH3K3UnXUO10wS km0vzfm9Bnt2ivEP9DAWC9XBvDkwhV/Yqg7kSmAj9tp+JWTB -----END CERTIFICATE-----Generated at Sun May 5 02:31:30 2024 by rpki-client on console-ams.rpki-client.org