$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/hcBwAijcyEvBRQyVESOvUdVJOwc.roa File: hcBwAijcyEvBRQyVESOvUdVJOwc.roa (raw, json) Hash identifier: +S02vdsbmRxFambNQGsSGkKgWMtUpTk81hKuowe5TMs= Subject key identifier: 85:C0:70:02:28:DC:C8:4B:C1:45:0C:95:11:23:AF:51:D5:49:3B:07 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FCB Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hcBwAijcyEvBRQyVESOvUdVJOwc.roa Signing time: Fri 01 Sep 2023 08:57:30 +0000 ROA not before: Fri 01 Sep 2023 08:57:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 23675 IP address blocks: 220.128.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4043 (0xfcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=85C0700228DCC84BC1450C951123AF51D5493B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:ef:a3:59:7c:df:28:12:1d:24:ac:93:31: 2f:ae:d4:77:1d:e2:a7:ba:08:79:3a:e0:fc:e0:0d: 4d:1c:3b:b9:8e:b5:2d:c8:7b:4e:f3:7c:34:0a:c8: f2:ba:f1:b3:6e:a1:c7:fb:fa:84:93:2d:6a:97:52: 8f:bb:de:19:fc:bd:7e:e7:88:65:02:f9:58:87:a7: b3:6e:f8:7f:d1:9a:72:9a:40:bf:db:f9:ee:8b:6e: 69:a3:07:ef:07:43:f4:30:31:ad:39:28:ae:85:3c: 3e:b6:0d:e3:6f:75:92:6e:e1:a4:30:53:45:bc:dd: e2:2f:97:dc:f3:ea:a6:79:d7:07:fe:34:dd:22:3b: ab:55:cb:98:45:26:7b:84:4e:96:df:30:23:fc:dc: 97:85:65:84:13:32:e7:d8:47:9f:e5:94:22:77:89: 6a:3b:98:94:59:cf:4e:7f:31:e2:1f:19:cc:58:0b: 64:e7:f4:a4:b7:c9:e9:73:7d:c0:28:d1:dc:d2:49: c3:e5:74:8f:5d:56:92:07:e7:e4:0e:db:7b:1d:2a: 2f:4e:3f:f9:59:f4:da:27:e0:74:7c:02:b0:af:bd: af:03:6e:9f:1d:bc:40:8f:d6:9d:85:0f:b2:64:a6: 37:05:60:3b:2e:56:3d:b6:41:da:82:95:57:2c:07: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C0:70:02:28:DC:C8:4B:C1:45:0C:95:11:23:AF:51:D5:49:3B:07 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hcBwAijcyEvBRQyVESOvUdVJOwc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.55.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:0e:7d:1f:d9:6c:71:ed:22:51:8c:4d:1e:97:3a:64:1a:1d: de:c5:5d:36:9a:2d:5a:d2:cf:30:5d:e0:2d:23:99:1b:b5:58: 23:9b:37:36:57:92:d1:16:b3:3f:ae:c7:59:57:76:88:a5:8c: 7d:56:be:7b:21:57:66:2e:46:7b:76:57:2d:ba:03:1c:aa:6a: 7a:9a:e4:57:d8:a7:38:8e:fd:ba:97:cd:c5:c5:a5:ba:a1:df: c7:86:84:34:71:38:3c:a9:9d:0a:48:bf:d0:15:80:ac:29:52: 89:39:80:64:76:43:89:57:b2:74:1a:db:14:1f:56:86:b4:1d: 98:a5:ca:d4:ee:14:1d:be:62:00:e9:1b:e1:e9:e6:9c:07:64: 65:4e:6a:63:87:b4:36:0d:59:d4:02:29:05:92:47:e8:88:f0: 05:b2:13:c8:cd:98:fd:16:65:f9:8a:d0:78:bc:61:57:f3:19: b9:77:8b:f5:ff:e6:9c:f7:e8:3c:70:5f:ad:23:af:a8:7c:98: 58:9b:3d:08:90:c5:cc:6f:ff:f7:80:ef:19:53:96:83:d9:97: e4:c2:57:d0:94:4e:9d:2b:0f:86:92:d4:d7:9c:b6:c6:7a:09: 7e:70:e7:c9:6f:c6:af:bc:57:b2:a7:e3:45:13:0e:5b:25:e8: 93:fb:80:2e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg1QzA3MDAyMjhEQ0M4 NEJDMTQ1MEM5NTExMjNBRjUxRDU0OTNCMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaE++jWXzfKBIdJKyTMS+u1Hcd4qe6CHk64PzgDU0cO7mOtS3I e07zfDQKyPK68bNuocf7+oSTLWqXUo+73hn8vX7niGUC+ViHp7Nu+H/RmnKaQL/b +e6LbmmjB+8HQ/QwMa05KK6FPD62DeNvdZJu4aQwU0W83eIvl9zz6qZ51wf+NN0i O6tVy5hFJnuETpbfMCP83JeFZYQTMufYR5/llCJ3iWo7mJRZz05/MeIfGcxYC2Tn 9KS3yelzfcAo0dzSScPldI9dVpIH5+QO23sdKi9OP/lZ9Non4HR8ArCvva8Dbp8d vECP1p2FD7JkpjcFYDsuVj22QdqClVcsB0VdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUhcBwAijcyEvBRQyVESOvUdVJOwcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9oY0J3QWlqY3lFdkJSUXlWRVNP dlVkVkpPd2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IA3 MA0GCSqGSIb3DQEBCwUAA4IBAQB9Dn0f2Wxx7SJRjE0elzpkGh3exV02mi1a0s8w XeAtI5kbtVgjmzc2V5LRFrM/rsdZV3aIpYx9Vr57IVdmLkZ7dlctugMcqmp6muRX 2Kc4jv26l83FxaW6od/HhoQ0cTg8qZ0KSL/QFYCsKVKJOYBkdkOJV7J0GtsUH1aG tB2YpcrU7hQdvmIA6Rvh6eacB2RlTmpjh7Q2DVnUAikFkkfoiPAFshPIzZj9FmX5 itB4vGFX8xm5d4v1/+ac9+g8cF+tI6+ofJhYmz0IkMXMb//3gO8ZU5aD2ZfkwlfQ lE6dKw+GktTXnLbGegl+cOfJb8avvFeyp+NFEw5bJeiT+4Au -----END CERTIFICATE-----Generated at Mon Jun 3 23:10:42 2024 by rpki-client on console-ams.rpki-client.org