$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bvjA7cHco1zL94U35Arr1csZa6Q.roa File: bvjA7cHco1zL94U35Arr1csZa6Q.roa (raw, json) Hash identifier: MEj61SdwLJ4zx31tGyC/jjkJoRqOBOmGljkST3haSQo= Subject key identifier: 6E:F8:C0:ED:C1:DC:A3:5C:CB:F7:85:37:E4:0A:EB:D5:CB:19:6B:A4 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F77 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bvjA7cHco1zL94U35Arr1csZa6Q.roa Signing time: Fri 01 Sep 2023 08:57:07 +0000 ROA not before: Fri 01 Sep 2023 08:57:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9505 IP address blocks: 220.128.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3959 (0xf77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6EF8C0EDC1DCA35CCBF78537E40AEBD5CB196BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:18:49:ca:40:2c:27:fa:45:ae:e8:4f:7d: ec:08:85:ea:3f:68:32:5c:2a:e3:5c:bc:b0:1e:95: 6e:e3:f9:19:cf:20:90:3c:ff:32:39:76:b3:72:2b: 4e:8e:d3:cb:88:cd:4c:40:50:47:41:d5:7e:34:40: c3:57:fb:4e:4a:78:b7:f7:cf:f4:e7:d9:4c:84:a6: 6d:ba:15:f9:7e:60:4e:95:83:cf:65:62:05:75:3e: 51:39:88:42:0f:dd:83:97:6b:d2:b7:30:2e:c5:8e: e3:06:88:c7:7c:40:a8:86:ae:1e:e2:e3:01:b0:ee: dd:98:7c:e4:5e:87:0e:ea:23:95:5b:96:5c:e5:18: ca:f7:33:33:b7:ec:82:57:ca:37:81:51:47:dc:b2: d2:92:bf:f6:11:0d:b6:ea:1e:26:f1:24:72:da:bc: e8:71:ec:7f:1f:7a:39:4c:83:81:b6:c3:9e:5e:17: 7a:48:4d:1c:4b:d2:5c:ca:54:9f:13:4a:7f:86:e7: 78:fa:0c:22:3d:fe:f5:32:a0:c1:14:57:1e:a8:1c: e1:3b:50:4b:49:f2:c1:fc:e8:37:96:94:2a:f7:46: 8e:65:1d:23:fb:21:7c:1d:bc:97:e5:bc:95:74:3d: 09:a0:f1:37:c9:aa:f9:f3:b7:0c:e0:ac:e8:53:5d: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F8:C0:ED:C1:DC:A3:5C:CB:F7:85:37:E4:0A:EB:D5:CB:19:6B:A4 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bvjA7cHco1zL94U35Arr1csZa6Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.48.0/21 Signature Algorithm: sha256WithRSAEncryption 77:2b:a2:ce:ab:77:71:9c:84:52:3a:f9:11:fc:f4:1c:61:ee: b7:9d:66:a7:7c:69:d6:44:4e:07:be:84:37:c5:0e:30:32:a6: 1f:05:54:3c:a1:35:65:2c:8c:f1:f3:8a:65:59:04:d8:05:98: 00:e9:68:66:63:93:ad:8b:42:dd:4e:c9:4e:a5:3b:c9:46:27: 02:3e:88:ca:4d:11:71:00:8e:b3:ad:17:76:35:f0:08:18:61: 35:cc:53:4b:38:ff:2e:5a:65:30:f5:46:e4:b0:a1:13:14:35: 56:a3:f0:1b:a2:5a:35:8a:36:da:82:6b:4d:18:5b:1d:03:b1: 32:b6:ec:e0:90:0b:5f:e3:52:01:8f:f9:25:2b:4e:3c:cb:01: ae:f6:d8:05:9d:f6:90:db:e6:b7:96:b1:71:e4:64:98:3f:8e: 1c:20:de:23:3e:c3:74:54:a5:f4:61:8b:1d:01:81:4d:18:f1: f8:95:c1:2c:ad:fb:9b:da:f5:c3:c4:60:c4:aa:5d:41:bc:9b: 07:77:e4:37:f8:d0:67:bc:9f:bd:34:0a:2f:ec:69:20:02:61: 4e:83:89:a0:85:9c:7d:f1:32:f1:66:d4:f8:76:dc:f1:da:4c: de:68:e1:ea:d4:28:66:3d:49:32:e7:21:07:68:c2:88:7a:cf: 28:c8:a8:02 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZFRjhDMEVEQzFEQ0Ez NUNDQkY3ODUzN0U0MEFFQkQ1Q0IxOTZCQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0zRhJykAsJ/pFruhPfewIheo/aDJcKuNcvLAelW7j+RnPIJA8 /zI5drNyK06O08uIzUxAUEdB1X40QMNX+05KeLf3z/Tn2UyEpm26Ffl+YE6Vg89l YgV1PlE5iEIP3YOXa9K3MC7FjuMGiMd8QKiGrh7i4wGw7t2YfORehw7qI5Vbllzl GMr3MzO37IJXyjeBUUfcstKSv/YRDbbqHibxJHLavOhx7H8fejlMg4G2w55eF3pI TRxL0lzKVJ8TSn+G53j6DCI9/vUyoMEUVx6oHOE7UEtJ8sH86DeWlCr3Ro5lHSP7 IXwdvJflvJV0PQmg8TfJqvnztwzgrOhTXUQfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUbvjA7cHco1zL94U35Arr1csZa6QwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9idmpBN2NIY28xekw5NFUzNUFy cjFjc1phNlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD3IAw MA0GCSqGSIb3DQEBCwUAA4IBAQB3K6LOq3dxnIRSOvkR/PQcYe63nWanfGnWRE4H voQ3xQ4wMqYfBVQ8oTVlLIzx84plWQTYBZgA6WhmY5Oti0LdTslOpTvJRicCPojK TRFxAI6zrRd2NfAIGGE1zFNLOP8uWmUw9UbksKETFDVWo/Abolo1ijbagmtNGFsd A7EytuzgkAtf41IBj/klK048ywGu9tgFnfaQ2+a3lrFx5GSYP44cIN4jPsN0VKX0 YYsdAYFNGPH4lcEsrfub2vXDxGDEql1BvJsHd+Q3+NBnvJ+9NAov7GkgAmFOg4mg hZx98TLxZtT4dtzx2kzeaOHq1ChmPUky5yEHaMKIes8oyKgC -----END CERTIFICATE-----Generated at Wed Jun 5 00:23:00 2024 by rpki-client on console-ams.rpki-client.org