$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/e1LYsugPOQP539S87RwtrSOZntU.roa File: e1LYsugPOQP539S87RwtrSOZntU.roa (raw, json) Hash identifier: ppE3zpWSu2QFGTn2l2ysZ2eIpnY8WnaAowLDjRuUtxs= Subject key identifier: 7B:52:D8:B2:E8:0F:39:03:F9:DF:D4:BC:ED:1C:2D:AD:23:99:9E:D5 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F48 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e1LYsugPOQP539S87RwtrSOZntU.roa Signing time: Fri 01 Sep 2023 08:56:52 +0000 ROA not before: Fri 01 Sep 2023 08:56:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 202.39.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3912 (0xf48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:56:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7B52D8B2E80F3903F9DFD4BCED1C2DAD23999ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:53:35:29:8e:1d:a2:a2:99:54:bd:5e:08:38: c2:72:7c:95:81:9f:63:bb:60:cb:83:de:95:11:33: b9:28:eb:85:49:c6:e8:4f:c2:01:40:74:24:c4:f4: 73:7d:65:47:d0:0c:f6:d9:86:de:d2:1d:b7:64:3a: bc:86:da:20:4f:ef:4f:71:87:3b:35:84:91:ad:c7: a6:62:6f:54:c6:ee:78:8f:53:74:dd:94:25:9d:22: 55:0a:e8:3d:d3:72:62:23:a7:97:80:95:0d:96:f4: bd:50:33:53:52:3f:4e:74:f3:02:94:77:9b:66:b8: 4e:aa:06:24:4c:e4:1e:d6:d8:cd:e1:6c:fc:f5:20: 7c:fb:f5:32:4a:19:5f:4c:e5:4e:6d:56:7c:19:62: d2:c8:6a:01:c2:95:1a:47:8b:8a:16:fb:c6:37:8e: a0:4f:cd:eb:ec:fc:c8:2e:3a:7d:df:26:b9:03:12: cb:23:ec:8b:06:54:a8:d5:be:60:93:14:ab:b2:64: 79:26:97:0e:a1:1e:10:f1:92:2b:d1:4a:5e:ef:68: fc:5a:c2:b3:24:f3:f4:d6:89:25:6c:32:a2:52:09: 7f:02:87:46:1c:b7:3e:92:b7:64:04:a2:9b:1e:2f: 53:fe:b6:35:db:1b:c5:61:4e:29:cb:2b:6a:56:b3: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:52:D8:B2:E8:0F:39:03:F9:DF:D4:BC:ED:1C:2D:AD:23:99:9E:D5 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e1LYsugPOQP539S87RwtrSOZntU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.0.0/18 Signature Algorithm: sha256WithRSAEncryption 60:b9:6d:b5:51:af:8e:75:cf:d3:13:75:f4:7b:f5:4e:60:b5: c2:87:9c:0e:0d:33:a1:bd:5c:64:c6:18:ec:62:a2:c4:55:0c: 02:1c:9f:bf:d4:34:a3:67:85:62:5d:35:91:39:a2:a2:3c:ca: c0:20:00:d5:61:3a:12:7f:9b:21:75:26:8f:13:4f:14:73:37: fe:7f:ce:38:26:eb:b1:56:81:c4:b8:bf:4e:b2:73:7d:4f:05: 41:76:ee:55:03:a6:e6:bd:62:84:f2:ae:f9:39:d8:62:5e:72: 0c:ca:06:3f:16:6f:f7:d4:13:c9:22:13:b9:e3:ae:3e:4f:ad: 38:03:70:7a:db:f6:1b:23:4c:f3:49:06:cd:08:62:8a:e1:fb: a0:25:e8:4e:d8:bc:bc:c4:d7:11:99:df:e3:a1:f3:16:79:65: 9a:56:14:f9:27:4b:43:41:57:bb:d6:7a:c1:b0:9d:a9:5e:fd: 5b:2a:1a:25:ef:6d:16:8d:53:5e:db:64:db:d0:40:d2:32:bf: a5:0e:af:1e:6e:c7:92:d5:14:b1:a7:b6:21:84:b2:05:ff:b8: 82:05:b5:c2:f0:a7:9f:1d:28:a8:e1:43:03:12:f6:e4:06:a9: 4e:7b:a4:0d:a3:02:14:25:bb:2b:42:d0:c1:ff:d6:ce:ce:c4: 0c:b8:cd:b4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdCNTJEOEIyRTgwRjM5 MDNGOURGRDRCQ0VEMUMyREFEMjM5OTlFRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD+UzUpjh2ioplUvV4IOMJyfJWBn2O7YMuD3pURM7ko64VJxuhP wgFAdCTE9HN9ZUfQDPbZht7SHbdkOryG2iBP709xhzs1hJGtx6Zib1TG7niPU3Td lCWdIlUK6D3TcmIjp5eAlQ2W9L1QM1NSP0508wKUd5tmuE6qBiRM5B7W2M3hbPz1 IHz79TJKGV9M5U5tVnwZYtLIagHClRpHi4oW+8Y3jqBPzevs/MguOn3fJrkDEssj 7IsGVKjVvmCTFKuyZHkmlw6hHhDxkivRSl7vaPxawrMk8/TWiSVsMqJSCX8Ch0Yc tz6St2QEopseL1P+tjXbG8VhTinLK2pWs7rTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUe1LYsugPOQP539S87RwtrSOZntUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9lMUxZc3VnUE9RUDUzOVM4N1J3 dHJTT1pudFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyicA MA0GCSqGSIb3DQEBCwUAA4IBAQBguW21Ua+Odc/TE3X0e/VOYLXCh5wODTOhvVxk xhjsYqLEVQwCHJ+/1DSjZ4ViXTWROaKiPMrAIADVYToSf5shdSaPE08Uczf+f844 JuuxVoHEuL9OsnN9TwVBdu5VA6bmvWKE8q75OdhiXnIMygY/Fm/31BPJIhO5464+ T604A3B62/YbI0zzSQbNCGKK4fugJehO2Ly8xNcRmd/jofMWeWWaVhT5J0tDQVe7 1nrBsJ2pXv1bKhol720WjVNe22Tb0EDSMr+lDq8ebseS1RSxp7YhhLIF/7iCBbXC 8KefHSio4UMDEvbkBqlOe6QNowIUJbsrQtDB/9bOzsQMuM20 -----END CERTIFICATE-----Generated at Thu May 23 03:15:02 2024 by rpki-client on console-fra.rpki-client.org