$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ePxiag1YeHrLMSL2adJyRbuVe1U.roa File: ePxiag1YeHrLMSL2adJyRbuVe1U.roa (raw, json) Hash identifier: pv+xYIwJlswye56QGL9If6gwKjqQWtigsV9wMPtXhkg= Subject key identifier: 78:FC:62:6A:0D:58:78:7A:CB:31:22:F6:69:D2:72:45:BB:95:7B:55 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FAA Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ePxiag1YeHrLMSL2adJyRbuVe1U.roa Signing time: Fri 01 Sep 2023 08:57:21 +0000 ROA not before: Fri 01 Sep 2023 08:57:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7481 IP address blocks: 210.62.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4010 (0xfaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=78FC626A0D58787ACB3122F669D27245BB957B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:4c:47:4a:3a:43:d7:b8:94:82:ce:d8:1b: 70:6f:d6:de:ed:1c:e7:fd:12:8f:75:48:d4:3c:e2: 62:84:f4:6f:50:49:26:19:52:a2:31:a6:d4:33:db: 8f:f1:e7:de:db:32:bd:e7:7b:bb:26:b4:4f:ae:90: 5b:83:fc:c1:dd:9a:ba:97:55:15:b0:34:ef:a0:6f: 0b:cf:c0:dc:94:88:8e:fc:0c:f7:f6:7a:ea:08:a9: dc:53:14:42:00:eb:b2:fe:5d:fc:af:d9:b8:a0:76: c3:31:a7:a5:9c:fb:1b:08:45:a6:dd:68:ed:cb:62: b6:a3:73:8b:bd:c5:aa:5b:51:52:d4:80:86:ae:8d: 66:55:af:1c:53:dc:72:52:5e:ad:8f:69:ca:4a:82: a6:46:32:d0:cd:41:53:65:36:8c:0b:0c:07:95:e2: 44:04:9b:28:18:dd:97:f5:d5:ab:b2:4a:3e:89:1b: e6:a8:58:28:25:48:58:0d:48:20:c6:0b:bd:c7:f9: 9b:8a:16:b5:79:5e:12:43:d9:7f:98:33:17:52:71: 93:2b:dc:a1:41:a2:73:66:b0:ff:66:77:8d:b1:2f: b4:fc:e0:cf:40:2a:6e:bd:71:a3:7b:20:1e:06:fc: 30:54:c4:f3:52:62:54:18:2e:0a:46:ff:15:e5:9b: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FC:62:6A:0D:58:78:7A:CB:31:22:F6:69:D2:72:45:BB:95:7B:55 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ePxiag1YeHrLMSL2adJyRbuVe1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.255.0/24 Signature Algorithm: sha256WithRSAEncryption 96:36:d7:e5:8d:2a:d4:2a:5f:f3:c8:39:10:e4:61:7a:d5:fc: 7e:d8:ac:e5:8d:bc:a4:f9:d5:d3:07:d5:c8:40:e0:7d:f4:61: 37:5d:78:2a:a9:d3:4d:86:b1:c3:a2:84:b7:7c:4d:73:e4:c0: 9e:c3:72:b3:b2:30:a4:2b:b7:56:72:5d:5c:38:f6:48:eb:4b: fd:bb:9f:ec:86:cf:3a:da:2d:24:22:c5:e3:c6:00:e0:04:25: c0:b5:fa:5c:b0:de:51:c0:a5:b5:e3:b0:ee:1b:09:41:e3:3a: b2:dc:c4:b9:fc:cf:6a:32:85:e7:aa:76:9f:84:00:f9:0a:c0: f3:98:07:f2:44:8b:ed:d8:40:24:66:d8:ab:c4:e2:b6:7c:9f: 7a:56:da:61:8e:b2:c5:64:31:2f:ed:87:10:9b:93:47:e4:23: ba:8b:d2:fc:df:f7:75:a1:ed:4d:df:cc:4e:c2:0e:b4:66:bc: 1f:e5:46:5a:8d:03:ef:87:96:fe:1e:6d:7b:32:3b:75:bc:8c: 80:b1:7a:94:c2:c2:97:af:81:11:4d:70:57:5e:f1:5d:a9:d3: ca:b5:33:c8:13:9e:c3:e7:7d:7e:20:2f:ca:9f:fd:e7:79:5c: 67:fd:3e:0a:16:22:e7:f7:76:c3:d2:fc:23:79:05:3d:00:ea: 41:6e:6c:d0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc4RkM2MjZBMEQ1ODc4 N0FDQjMxMjJGNjY5RDI3MjQ1QkI5NTdCNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuA0xHSjpD17iUgs7YG3Bv1t7tHOf9Eo91SNQ84mKE9G9QSSYZ UqIxptQz24/x597bMr3ne7smtE+ukFuD/MHdmrqXVRWwNO+gbwvPwNyUiI78DPf2 euoIqdxTFEIA67L+Xfyv2bigdsMxp6Wc+xsIRabdaO3LYrajc4u9xapbUVLUgIau jWZVrxxT3HJSXq2PacpKgqZGMtDNQVNlNowLDAeV4kQEmygY3Zf11auySj6JG+ao WCglSFgNSCDGC73H+ZuKFrV5XhJD2X+YMxdScZMr3KFBonNmsP9md42xL7T84M9A Km69caN7IB4G/DBUxPNSYlQYLgpG/xXlm2+xAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUePxiag1YeHrLMSL2adJyRbuVe1UwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9lUHhpYWcxWWVIckxNU0wyYWRK eVJidVZlMVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j7/ MA0GCSqGSIb3DQEBCwUAA4IBAQCWNtfljSrUKl/zyDkQ5GF61fx+2Kzljbyk+dXT B9XIQOB99GE3XXgqqdNNhrHDooS3fE1z5MCew3KzsjCkK7dWcl1cOPZI60v9u5/s hs862i0kIsXjxgDgBCXAtfpcsN5RwKW147DuGwlB4zqy3MS5/M9qMoXnqnafhAD5 CsDzmAfyRIvt2EAkZtirxOK2fJ96VtphjrLFZDEv7YcQm5NH5CO6i9L83/d1oe1N 38xOwg60Zrwf5UZajQPvh5b+Hm17Mjt1vIyAsXqUwsKXr4ERTXBXXvFdqdPKtTPI E57D531+IC/Kn/3neVxn/T4KFiLn93bD0vwjeQU9AOpBbmzQ -----END CERTIFICATE-----Generated at Mon Jun 3 19:07:54 2024 by rpki-client on console-fra.rpki-client.org