$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa File: h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa (raw, json) Hash identifier: 7GK/Vu1FsPpZPzVsMsYBMw0nK0hNSF4VL8aNd9QTvjI= Subject key identifier: 87:ED:B0:F4:E1:22:4B:55:A9:A8:33:83:65:92:7A:6B:D5:5C:EA:88 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0F8E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa Signing time: Fri 01 Sep 2023 08:57:12 +0000 ROA not before: Fri 01 Sep 2023 08:57:12 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 23675 IP address blocks: 203.66.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3982 (0xf8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:12 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=87EDB0F4E1224B55A9A8338365927A6BD55CEA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:d1:4b:53:f2:0a:85:e0:d5:13:95:d9:93: 81:cd:94:44:ef:37:2a:1c:f3:3d:cf:8d:03:e3:11: 41:ec:6b:c3:7e:a3:6a:3d:21:50:85:ca:d1:6f:c1: ce:26:e1:3d:7c:44:20:69:bf:34:b8:6b:70:7b:9d: d0:9c:b2:01:13:13:ae:32:74:dd:b2:e2:67:f5:6b: 69:0d:01:0b:90:e7:2e:f8:55:2f:1e:fe:b3:78:a5: 78:f6:8e:16:0d:a6:bb:ac:b6:82:23:7b:f1:13:49: 00:31:58:1d:4c:5f:ea:58:4b:3f:d9:d8:7a:d6:37: 9f:c4:06:65:ca:46:77:e7:c1:a3:ee:c4:62:18:b7: 38:d7:85:e2:68:bb:be:44:71:a4:b7:ed:7b:4c:ec: 11:52:e6:e9:4f:53:45:c8:85:b4:cb:50:e1:42:9d: aa:87:5b:be:50:f7:8a:96:12:d6:04:86:55:9f:98: c2:f7:da:b8:07:e8:6d:7f:47:31:ca:3e:fd:b6:cd: 49:51:d5:36:db:62:6f:d1:d8:98:61:14:12:1c:1b: 1b:8f:53:b0:d6:42:5c:d1:0f:47:88:0d:f4:1a:e3: 78:cd:c1:10:ac:c2:28:86:d3:5e:06:8e:04:0a:12: 0f:96:ee:b2:e7:c6:23:ae:05:f7:36:81:44:0c:7d: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:ED:B0:F4:E1:22:4B:55:A9:A8:33:83:65:92:7A:6B:D5:5C:EA:88 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.245.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:d0:4f:44:ea:af:07:d6:d9:fd:72:bb:10:9e:aa:f5:de:5b: 29:d5:6f:9e:2f:fc:af:1e:dc:72:2a:36:57:0a:5c:2e:3e:61: 49:57:a2:71:d6:fa:12:d5:90:74:51:3b:69:ce:3f:59:66:34: 30:ad:94:99:03:69:a0:5e:f2:76:5a:f2:0d:5d:a6:ef:75:b9: 21:7a:b1:8a:ce:97:55:e1:c2:52:b6:3d:21:19:e0:ee:c9:9c: 8c:88:ee:b7:a4:94:31:d6:c2:cb:60:23:6d:7f:67:7e:06:21: cc:2f:9f:4f:8d:29:47:1d:c8:55:d3:23:2c:88:0b:cd:26:57: 5b:d5:5f:08:19:b5:37:14:00:eb:b4:e6:e2:4b:33:52:80:36: dd:ff:79:45:f9:8d:ab:fd:9c:34:b5:ee:e3:ec:61:9c:34:da: b8:70:4e:a6:69:9c:5e:31:b4:d4:b3:f1:2c:a5:c0:83:d9:63: fb:41:af:31:b8:36:9c:14:ad:ac:3e:5d:92:e9:83:17:bd:e5: 0c:14:09:02:4f:fd:ef:cd:e0:67:c5:77:a1:e6:92:53:17:e8: f7:ef:1a:4f:15:bb:1a:c6:e5:da:8a:18:a4:91:26:a2:49:84: 75:54:f4:a1:3d:4a:8c:41:a4:7d:af:c8:6d:e2:90:04:44:8a: 91:30:69:cc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg3RURCMEY0RTEyMjRC NTVBOUE4MzM4MzY1OTI3QTZCRDU1Q0VBODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtgNFLU/IKheDVE5XZk4HNlETvNyoc8z3PjQPjEUHsa8N+o2o9 IVCFytFvwc4m4T18RCBpvzS4a3B7ndCcsgETE64ydN2y4mf1a2kNAQuQ5y74VS8e /rN4pXj2jhYNprustoIje/ETSQAxWB1MX+pYSz/Z2HrWN5/EBmXKRnfnwaPuxGIY tzjXheJou75EcaS37XtM7BFS5ulPU0XIhbTLUOFCnaqHW75Q94qWEtYEhlWfmML3 2rgH6G1/RzHKPv22zUlR1TbbYm/R2JhhFBIcGxuPU7DWQlzRD0eIDfQa43jNwRCs wiiG014GjgQKEg+W7rLnxiOuBfc2gUQMfSn7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUh+2w9OEiS1WpqDODZZJ6a9Vc6ogwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9oLTJ3OU9FaVMxV3BxRE9EWlpK NmE5VmM2b2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0L1 MA0GCSqGSIb3DQEBCwUAA4IBAQAs0E9E6q8H1tn9crsQnqr13lsp1W+eL/yvHtxy KjZXClwuPmFJV6Jx1voS1ZB0UTtpzj9ZZjQwrZSZA2mgXvJ2WvINXabvdbkherGK zpdV4cJStj0hGeDuyZyMiO63pJQx1sLLYCNtf2d+BiHML59PjSlHHchV0yMsiAvN Jldb1V8IGbU3FADrtObiSzNSgDbd/3lF+Y2r/Zw0te7j7GGcNNq4cE6maZxeMbTU s/EspcCD2WP7Qa8xuDacFK2sPl2S6YMXveUMFAkCT/3vzeBnxXeh5pJTF+j37xpP FbsaxuXaihikkSaiSYR1VPShPUqMQaR9r8ht4pAERIqRMGnM -----END CERTIFICATE-----Generated at Thu May 23 04:42:03 2024 by rpki-client on console-ams.rpki-client.org