$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ltTRAj38kfmO3RBIRPzsMe6vkWg.roa File: ltTRAj38kfmO3RBIRPzsMe6vkWg.roa (raw, json) Hash identifier: 2LJoMJRYxhZyx0zsqs9aR5DxHGv+I8g5ZVpTXGnIWwg= Subject key identifier: 96:D4:D1:02:3D:FC:91:F9:8E:DD:10:48:44:FC:EC:31:EE:AF:91:68 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FCA Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ltTRAj38kfmO3RBIRPzsMe6vkWg.roa Signing time: Fri 01 Sep 2023 08:57:30 +0000 ROA not before: Fri 01 Sep 2023 08:57:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 114.32.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4042 (0xfca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=96D4D1023DFC91F98EDD104844FCEC31EEAF9168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:af:22:a2:fc:de:7d:ea:a1:49:b7:ad:fe: c4:73:29:c0:fd:ff:a9:4e:c0:24:c8:d5:f5:1f:73: 7b:41:6b:70:11:e9:d8:94:de:99:20:84:22:78:9f: 70:fc:68:14:ef:f9:e2:4a:0b:fb:ac:95:6c:94:5d: a4:dc:d6:6a:0a:d6:c9:ca:68:39:df:6a:42:f5:b0: 46:f8:e1:13:f9:b3:70:a1:f3:7f:8f:78:07:e9:58: 35:f5:ff:90:3c:4e:e5:b9:e4:32:73:fe:ad:e8:c8: 5c:b6:e9:ea:a8:6f:fc:0f:80:5f:16:b8:58:7a:29: a2:43:dd:6b:2e:cd:cf:8f:e6:4a:40:76:fe:24:f8: a2:02:d8:1a:89:f6:8e:5a:08:d7:79:a8:ec:c2:eb: 88:b7:b4:6b:fb:fb:bd:a0:67:5c:46:b8:62:09:26: 72:c2:5b:f9:f1:e8:d9:bd:3f:0a:da:40:54:aa:9e: 7e:f5:c0:a4:3b:bf:d9:8b:97:e1:8e:19:cb:6d:ee: 35:a2:98:6b:53:d9:80:b2:b2:b4:d3:1a:1b:73:9b: 28:24:9b:cc:bc:f6:84:9a:2c:98:7e:aa:1e:97:6f: e0:87:d2:30:70:ad:66:7e:30:9f:38:5b:fc:6b:2c: 0c:1b:b6:c5:46:f3:ff:55:75:2b:b7:cb:fd:1c:d0: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:D1:02:3D:FC:91:F9:8E:DD:10:48:44:FC:EC:31:EE:AF:91:68 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ltTRAj38kfmO3RBIRPzsMe6vkWg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.32.0.0/12 Signature Algorithm: sha256WithRSAEncryption 54:e5:85:32:7c:c2:d8:76:df:3a:d8:cf:16:76:d4:ec:fc:e6: 1c:49:ea:8c:23:27:09:6e:c8:a3:35:64:87:6f:fd:9d:61:b5: 0b:24:ba:40:fe:3b:a0:3a:33:bd:2f:83:33:71:a4:86:a0:33: ff:f4:a3:e7:be:fc:be:13:c9:84:1d:4c:e3:8f:58:e5:43:12: 3c:7a:25:3f:82:6e:b8:d1:f8:b9:72:60:5a:9c:07:59:62:12: 05:4d:dc:bb:27:fe:f7:7a:f4:a5:fe:2d:83:cb:e5:14:8c:5e: 5b:0e:4d:1b:7a:5b:70:42:dc:4c:53:8e:2c:66:1a:46:43:f9: c7:34:d5:7e:7b:67:b2:56:4c:23:32:ce:dd:b2:e8:ec:4b:79: 16:35:84:27:61:0c:37:ef:c7:21:28:2b:6c:ef:0f:78:9c:b7: 65:0b:64:cb:19:6d:18:16:29:d9:93:b6:ea:70:4e:5e:7c:0c: 69:2c:18:6b:f0:2a:9a:6c:d1:1b:41:b0:c9:11:ac:38:9e:2d: f1:9e:da:9e:0e:97:a0:ed:76:83:28:a4:57:86:4e:18:70:13: c6:19:39:6b:c0:fb:6d:3e:f6:64:66:ce:91:95:a3:34:da:a3: 4a:d4:d8:1d:55:7f:c6:69:51:37:79:f5:ec:9b:b4:65:41:fd: 1a:61:6a:69 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk2RDREMTAyM0RGQzkx Rjk4RUREMTA0ODQ0RkNFQzMxRUVBRjkxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1J68iovzefeqhSbet/sRzKcD9/6lOwCTI1fUfc3tBa3AR6diU 3pkghCJ4n3D8aBTv+eJKC/uslWyUXaTc1moK1snKaDnfakL1sEb44RP5s3Ch83+P eAfpWDX1/5A8TuW55DJz/q3oyFy26eqob/wPgF8WuFh6KaJD3Wsuzc+P5kpAdv4k +KIC2BqJ9o5aCNd5qOzC64i3tGv7+72gZ1xGuGIJJnLCW/nx6Nm9PwraQFSqnn71 wKQ7v9mLl+GOGctt7jWimGtT2YCysrTTGhtzmygkm8y89oSaLJh+qh6Xb+CH0jBw rWZ+MJ84W/xrLAwbtsVG8/9VdSu3y/0c0K/nAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUltTRAj38kfmO3RBIRPzsMe6vkWgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9sdFRSQWozOGtmbU8zUkJJUlB6 c01lNnZrV2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEciAw DQYJKoZIhvcNAQELBQADggEBAFTlhTJ8wth23zrYzxZ21Oz85hxJ6owjJwluyKM1 ZIdv/Z1htQskukD+O6A6M70vgzNxpIagM//0o+e+/L4TyYQdTOOPWOVDEjx6JT+C brjR+LlyYFqcB1liEgVN3Lsn/vd69KX+LYPL5RSMXlsOTRt6W3BC3ExTjixmGkZD +cc01X57Z7JWTCMyzt2y6OxLeRY1hCdhDDfvxyEoK2zvD3ict2ULZMsZbRgWKdmT tupwTl58DGksGGvwKpps0RtBsMkRrDieLfGe2p4Ol6DtdoMopFeGThhwE8YZOWvA +20+9mRmzpGVozTao0rU2B1Vf8ZpUTd59eybtGVB/Rphamk= -----END CERTIFICATE-----Generated at Tue Jun 4 20:03:02 2024 by rpki-client on console-ams.rpki-client.org