$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa File: nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa (raw, json) Hash identifier: cNYpXFQg+VCcS06MQkkgyiG3LXpC8nusQZvp9Z8nKXY= Subject key identifier: 9C:02:42:0F:ED:9C:27:A8:56:50:B8:00:9B:3C:97:96:4A:A2:5B:FB Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FA0 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa Signing time: Fri 01 Sep 2023 08:57:18 +0000 ROA not before: Fri 01 Sep 2023 08:57:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 203.66.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 11:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4000 (0xfa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9C02420FED9C27A85650B8009B3C97964AA25BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:4d:4f:bd:1d:1a:47:a1:49:2f:9e:d9:1f: b5:bf:42:b3:24:6b:73:78:0c:51:43:cf:a4:98:0f: e0:11:19:77:1a:37:90:42:24:bf:6d:e7:9b:30:c9: 92:9e:d2:fa:20:94:c8:80:44:5d:eb:a6:21:92:57: 91:01:8d:1f:44:b8:6c:cf:9e:6b:7b:4b:22:97:95: a3:92:d5:7c:26:fd:d3:55:f6:0e:ab:56:82:4b:43: 37:39:77:56:28:e3:3a:0e:a9:fe:83:15:0e:24:a4: 9e:47:73:f3:ff:50:a7:d6:da:e3:d7:94:3f:f9:28: 70:d3:4a:b8:10:b3:e0:e9:a8:c0:98:04:25:e9:45: 49:59:c6:53:52:93:bf:6a:bb:2a:57:08:d0:c0:56: 29:4c:9f:b3:53:38:f6:10:84:da:b7:f4:ad:c6:65: 50:93:2e:9b:e5:66:f3:7c:46:4a:fb:cf:a6:f6:df: ec:b8:a3:d6:87:87:29:f3:2f:c5:d6:b0:59:3d:e2: 83:bd:bb:c8:75:9f:a4:4c:b4:4f:9b:4b:61:55:c8: ae:b4:c6:4f:65:2b:db:fd:e2:67:bb:ef:df:7d:05: 71:5d:7e:aa:55:56:e8:a2:e7:db:45:57:a7:77:3c: d0:48:c4:e3:ca:c3:55:47:00:8b:48:98:16:17:08: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:42:0F:ED:9C:27:A8:56:50:B8:00:9B:3C:97:96:4A:A2:5B:FB X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.126.0/24 Signature Algorithm: sha256WithRSAEncryption 98:73:c9:e6:fa:fb:1e:cd:4f:ef:e1:c6:d2:25:d4:52:5b:78: df:b7:b8:f2:57:d7:b6:6d:90:e9:08:21:e9:8f:47:94:e9:85: ca:2e:90:25:1d:b4:56:13:8f:e5:79:d2:ca:f3:74:a5:e0:45: a7:9a:2b:b9:07:28:ee:8e:ca:09:e9:51:63:d6:de:d2:5b:53: 5d:0d:a4:d4:36:b7:4b:16:27:80:c8:b3:7f:c8:85:9b:a8:77: 8b:09:0a:be:97:72:20:2d:1d:b1:de:bb:96:86:08:19:7c:2a: f7:27:ec:6b:e9:d4:8b:04:d0:b2:df:71:83:f3:1e:e5:b6:14: e0:62:18:ae:d1:4c:95:9f:7a:c1:40:32:fe:5e:c8:8d:41:f9: c7:77:23:70:26:f0:a1:55:23:36:56:2a:fe:70:9f:1c:b4:5c: fa:e5:0f:f0:5f:a6:e1:a5:1f:be:27:d0:be:56:55:0b:ae:7c: 78:32:09:6e:bc:ae:27:3e:83:54:a1:bb:9a:a5:cb:a0:50:9e: 0f:d9:bc:b1:b6:15:6f:8a:5c:10:8a:a2:e6:cb:7e:e7:7e:5c: ce:ec:1d:59:ec:54:59:2d:ac:02:68:52:4d:9f:45:e2:84:74: 32:f2:ab:e5:de:c0:a2:ff:d6:8e:05:b3:f1:dd:b4:9b:6b:be: 32:cd:13:6f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlDMDI0MjBGRUQ5QzI3 QTg1NjUwQjgwMDlCM0M5Nzk2NEFBMjVCRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi9E1PvR0aR6FJL57ZH7W/QrMka3N4DFFDz6SYD+ARGXcaN5BC JL9t55swyZKe0voglMiARF3rpiGSV5EBjR9EuGzPnmt7SyKXlaOS1Xwm/dNV9g6r VoJLQzc5d1Yo4zoOqf6DFQ4kpJ5Hc/P/UKfW2uPXlD/5KHDTSrgQs+DpqMCYBCXp RUlZxlNSk79quypXCNDAVilMn7NTOPYQhNq39K3GZVCTLpvlZvN8Rkr7z6b23+y4 o9aHhynzL8XWsFk94oO9u8h1n6RMtE+bS2FVyK60xk9lK9v94me77999BXFdfqpV Vuii59tFV6d3PNBIxOPKw1VHAItImBYXCGrJAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUnAJCD+2cJ6hWULgAmzyXlkqiW/swHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uQUpDRC0yY0o2aFdVTGdBbXp5 WGxrcWlXX3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0J+ MA0GCSqGSIb3DQEBCwUAA4IBAQCYc8nm+vsezU/v4cbSJdRSW3jft7jyV9e2bZDp CCHpj0eU6YXKLpAlHbRWE4/ledLK83Sl4EWnmiu5ByjujsoJ6VFj1t7SW1NdDaTU NrdLFieAyLN/yIWbqHeLCQq+l3IgLR2x3ruWhggZfCr3J+xr6dSLBNCy33GD8x7l thTgYhiu0UyVn3rBQDL+XsiNQfnHdyNwJvChVSM2Vir+cJ8ctFz65Q/wX6bhpR++ J9C+VlULrnx4MgluvK4nPoNUobuapcugUJ4P2byxthVvilwQiqLmy37nflzO7B1Z 7FRZLawCaFJNn0XihHQy8qvl3sCi/9aOBbPx3bSba74yzRNv -----END CERTIFICATE-----Generated at Sun May 5 22:47:53 2024 by rpki-client on console-ams.rpki-client.org