$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wAJbkwEcgCT-WWnax4dOJIWdaLY.roa File: wAJbkwEcgCT-WWnax4dOJIWdaLY.roa (raw, json) Hash identifier: IuSiNVhHRhS1iI84PzYirQiZC6ovyjCIIN27IkK+rrI= Subject key identifier: C0:02:5B:93:01:1C:80:24:FE:59:69:DA:C7:87:4E:24:85:9D:68:B6 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 0FB1 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wAJbkwEcgCT-WWnax4dOJIWdaLY.roa Signing time: Fri 01 Sep 2023 08:57:23 +0000 ROA not before: Fri 01 Sep 2023 08:57:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3462 IP address blocks: 36.224.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4017 (0xfb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Sep 1 08:57:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C0025B93011C8024FE5969DAC7874E24859D68B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:49:d9:fd:6b:86:d3:ac:dd:ff:72:f6:3b: 8b:8c:20:5d:76:c3:ee:cd:7a:d1:4b:3b:f3:a4:3a: 7f:1c:5c:ef:32:e1:33:f5:5d:09:bc:f0:de:88:56: 4c:25:1e:00:02:b0:02:88:0a:48:85:86:46:27:29: 9e:51:e0:f2:fe:e0:72:72:c0:b5:59:04:b3:b7:62: 7e:bb:b1:9c:76:7e:ce:00:79:b7:c8:3d:32:f9:02: 82:f2:4f:3e:e3:95:29:4d:d5:86:6a:c7:b5:a0:16: 3f:af:37:22:69:77:e5:ca:ae:65:9e:9a:71:c9:67: a8:af:4d:0d:a4:ea:fc:82:0d:b5:df:93:ea:32:52: 45:41:77:68:64:55:29:ca:7c:97:f9:29:3f:85:d5: 5f:63:17:c9:f9:92:b9:5d:14:b7:7e:a1:9f:a5:30: 96:71:ad:8a:fe:59:84:a0:f2:27:01:7b:47:87:92: 72:63:03:93:78:67:ec:61:fa:e4:58:fa:ce:be:7d: b1:1d:e5:06:a1:a7:49:06:ea:6c:83:6a:56:9e:ea: 78:17:36:70:d9:2c:f3:88:ed:f3:93:c4:d9:01:39: ed:1b:b6:f3:0b:c9:cb:85:3f:d8:79:6e:15:95:92: 93:04:bd:b5:e8:75:0e:2d:c3:01:ba:08:76:ab:2b: c7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:02:5B:93:01:1C:80:24:FE:59:69:DA:C7:87:4E:24:85:9D:68:B6 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wAJbkwEcgCT-WWnax4dOJIWdaLY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.224.0.0/12 Signature Algorithm: sha256WithRSAEncryption 62:a4:48:e4:01:11:12:68:c5:c0:53:92:e3:f2:a8:4e:2e:21: 1c:a7:a8:a5:28:d4:f2:49:82:be:e2:40:5f:92:79:a6:22:df: de:17:ff:44:46:d8:85:d3:41:8e:74:e5:e9:88:b8:a1:0a:81: f6:80:65:b0:1e:30:fc:e0:6a:31:09:7a:87:a5:fd:8c:47:1f: c1:98:ee:c8:7d:de:b8:ad:1a:d6:ef:dc:79:e8:5c:24:2a:51: 10:9d:31:a6:52:bc:16:87:d6:27:a9:5e:3c:0b:8b:51:72:ad: f3:37:24:23:38:5a:72:a0:31:5e:54:16:30:3e:46:1d:57:62: 76:29:d7:81:3f:03:d3:eb:bd:e2:07:aa:89:89:b9:79:1b:5e: cb:81:44:1a:43:ce:ef:37:a5:8e:45:3f:3c:fe:48:b0:0b:f2: 69:da:83:f1:f5:b6:b6:11:6d:7c:b5:e8:e9:46:dd:69:72:f3: a8:37:fd:e6:e1:2b:b4:d0:3a:2b:4b:32:08:f9:0b:b9:f9:f1: a3:fa:ab:f2:e3:fb:55:f7:2a:08:e8:bd:00:69:c7:88:d3:90: 18:f7:9b:e3:86:f7:77:a9:31:5c:ba:ae:af:55:5f:98:0b:f9: 50:e3:28:16:b0:e1:ec:df:cd:8d:71:06:67:2f:30:46:7e:3f: 0e:0e:d8:65 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw ODU3MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMwMDI1QjkzMDExQzgw MjRGRTU5NjlEQUM3ODc0RTI0ODU5RDY4QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw/EnZ/WuG06zd/3L2O4uMIF12w+7NetFLO/OkOn8cXO8y4TP1 XQm88N6IVkwlHgACsAKICkiFhkYnKZ5R4PL+4HJywLVZBLO3Yn67sZx2fs4AebfI PTL5AoLyTz7jlSlN1YZqx7WgFj+vNyJpd+XKrmWemnHJZ6ivTQ2k6vyCDbXfk+oy UkVBd2hkVSnKfJf5KT+F1V9jF8n5krldFLd+oZ+lMJZxrYr+WYSg8icBe0eHknJj A5N4Z+xh+uRY+s6+fbEd5Qahp0kG6myDalae6ngXNnDZLPOI7fOTxNkBOe0btvML ycuFP9h5bhWVkpMEvbXodQ4twwG6CHarK8ehAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUwAJbkwEcgCT+WWnax4dOJIWdaLYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93QUpia3dFY2dDVC1XV25heDRk T0pJV2RhTFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEJOAw DQYJKoZIhvcNAQELBQADggEBAGKkSOQBERJoxcBTkuPyqE4uIRynqKUo1PJJgr7i QF+SeaYi394X/0RG2IXTQY505emIuKEKgfaAZbAeMPzgajEJeoel/YxHH8GY7sh9 3ritGtbv3HnoXCQqURCdMaZSvBaH1iepXjwLi1FyrfM3JCM4WnKgMV5UFjA+Rh1X YnYp14E/A9PrveIHqomJuXkbXsuBRBpDzu83pY5FPzz+SLAL8mnag/H1trYRbXy1 6OlG3Wly86g3/ebhK7TQOitLMgj5C7n58aP6q/Lj+1X3KgjovQBpx4jTkBj3m+OG 93epMVy6rq9VX5gL+VDjKBaw4ezfzY1xBmcvMEZ+Pw4O2GU= -----END CERTIFICATE-----Generated at Thu May 23 04:42:03 2024 by rpki-client on console-ams.rpki-client.org