$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/dkEmzk5VZIMqCSynA45Z9LeP_gg.roa File: dkEmzk5VZIMqCSynA45Z9LeP_gg.roa (raw, json) Hash identifier: 5e4amUG+wUQmd9kGitacSnmisXMtgmGBgmI+QHjmhBE= Subject key identifier: 76:41:26:CE:4E:55:64:83:2A:09:2C:A7:03:8E:59:F4:B7:8F:FE:08 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FD0 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dkEmzk5VZIMqCSynA45Z9LeP_gg.roa Signing time: Fri 01 Sep 2023 08:57:31 +0000 ROA not before: Fri 01 Sep 2023 08:57:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 220.128.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4048 (0xfd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=764126CE4E5564832A092CA7038E59F4B78FFE08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:6f:9c:a1:c7:8c:29:83:0b:48:bf:11:36: 68:67:24:28:74:e3:78:a5:f9:7f:b9:ed:ed:05:77: 70:0b:7a:eb:06:92:45:fe:dd:16:4a:f4:4f:4c:ac: 12:dd:aa:dd:75:7d:57:c8:15:21:9e:64:27:36:90: bc:4b:52:f9:60:83:ba:12:77:da:c6:7e:54:ab:e6: f4:f0:76:55:75:4a:0a:c0:2c:45:a9:35:73:cb:f4: 01:79:ac:f3:22:ee:0a:2a:8b:10:02:cf:94:32:14: 97:46:2a:70:b1:a4:e9:86:25:da:75:fc:05:4c:0c: 34:38:78:69:7f:cb:a1:25:df:78:70:5c:60:54:f2: a6:ef:6f:f3:1a:da:20:ee:b3:f8:df:28:83:35:e9: 59:84:be:af:ef:3a:f6:60:b2:15:9e:1e:42:9e:b1: 78:a4:70:6c:17:18:7b:26:7c:0f:e4:a2:50:ab:e5: 31:9d:bf:68:b1:56:00:1a:3f:d3:48:6a:e9:a2:7f: 51:6c:64:8e:bf:c6:d0:73:63:f0:81:6f:63:ef:de: da:56:6a:8d:a2:91:ed:70:ef:6e:89:66:38:b4:45: 43:c4:b0:9b:c7:13:ba:2c:ed:c8:7b:b6:1d:b3:bd: 0a:e7:39:a4:1e:a8:8e:1f:8e:0d:b4:8a:ec:a9:9e: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:41:26:CE:4E:55:64:83:2A:09:2C:A7:03:8E:59:F4:B7:8F:FE:08 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dkEmzk5VZIMqCSynA45Z9LeP_gg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3a:fd:b4:a4:bc:7c:89:2e:9c:db:26:8c:b3:46:25:3a:5e:15: 2e:65:c8:42:1c:15:f2:a7:64:62:dd:e5:de:0d:a3:59:fe:56: 66:4e:45:35:d3:d0:5e:3d:ce:11:e3:72:ad:03:0e:3d:98:8b: 0f:9a:3d:b5:87:2d:12:83:06:48:30:8f:e8:d6:c7:aa:b6:ac: 56:ac:c7:1c:94:d1:f2:81:2e:d6:b1:37:5d:ed:cd:74:bd:e9: ed:4b:24:33:89:a2:fe:f8:1a:1e:0c:e5:f9:e9:88:7d:79:05: 7f:d7:53:31:ce:9e:1b:65:1e:9e:d5:c3:6f:24:6b:0d:72:4a: f4:d8:8c:50:06:7c:13:ef:8f:c2:ad:6a:60:62:1f:65:06:23: 0e:aa:b5:68:a9:3f:7e:6c:e0:cd:ec:e9:94:44:20:4b:cd:c0: c8:51:19:7d:f5:f5:db:13:62:16:02:69:9b:13:57:e5:c7:03: 09:cc:5e:b7:ee:d9:33:87:53:96:91:b9:8a:96:11:76:fc:2d: de:77:c3:ab:05:98:0d:7b:1f:94:9d:12:0f:5f:e3:dc:c5:12: 12:68:42:c1:85:73:79:fe:78:c3:a7:60:4b:a9:63:60:0e:b6: 45:fc:fc:6f:c9:41:9c:bc:13:2a:aa:ae:cc:e5:21:00:c8:84: 35:2a:5b:07 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2NDEyNkNFNEU1NTY0 ODMyQTA5MkNBNzAzOEU1OUY0Qjc4RkZFMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfSm+coceMKYMLSL8RNmhnJCh043il+X+57e0Fd3ALeusGkkX+ 3RZK9E9MrBLdqt11fVfIFSGeZCc2kLxLUvlgg7oSd9rGflSr5vTwdlV1SgrALEWp NXPL9AF5rPMi7goqixACz5QyFJdGKnCxpOmGJdp1/AVMDDQ4eGl/y6El33hwXGBU 8qbvb/Ma2iDus/jfKIM16VmEvq/vOvZgshWeHkKesXikcGwXGHsmfA/kolCr5TGd v2ixVgAaP9NIaumif1FsZI6/xtBzY/CBb2Pv3tpWao2ike1w726JZji0RUPEsJvH E7os7ch7th2zvQrnOaQeqI4fjg20iuypnjZ3AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUdkEmzk5VZIMqCSynA45Z9LeP/ggwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ka0Vtems1VlpJTXFDU3luQTQ1 WjlMZVBfZ2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG3IBA MA0GCSqGSIb3DQEBCwUAA4IBAQA6/bSkvHyJLpzbJoyzRiU6XhUuZchCHBXyp2Ri 3eXeDaNZ/lZmTkU109BePc4R43KtAw49mIsPmj21hy0SgwZIMI/o1seqtqxWrMcc lNHygS7WsTdd7c10ventSyQziaL++BoeDOX56Yh9eQV/11Mxzp4bZR6e1cNvJGsN ckr02IxQBnwT74/CrWpgYh9lBiMOqrVoqT9+bODN7OmURCBLzcDIURl99fXbE2IW AmmbE1flxwMJzF637tkzh1OWkbmKlhF2/C3ed8OrBZgNex+UnRIPX+PcxRISaELB hXN5/njDp2BLqWNgDrZF/PxvyUGcvBMqqq7M5SEAyIQ1KlsH -----END CERTIFICATE-----Generated at Thu May 23 03:15:02 2024 by rpki-client on console-fra.rpki-client.org