$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa File: -xC-8iF9ZHilO0dWNe7wdMin6Fo.roa (raw, json) Hash identifier: xyaMW21re/gxtnMbpihu8Iu5L5tawgNK4Ko0Grjk8iM= Subject key identifier: FB:10:BE:F2:21:7D:64:78:A5:3B:47:56:35:EE:F0:74:C8:A7:E8:5A Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0469 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa Signing time: Thu 15 Sep 2022 02:34:56 +0000 ROA not before: Thu 15 Sep 2022 02:34:56 +0000 ROA not after: Wed 06 Sep 2023 03:00:35 +0000 asID: 20473 IP address blocks: 103.153.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Mar 2023 03:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Sep 15 02:34:56 2022 GMT Not After : Sep 6 03:00:35 2023 GMT Subject: CN=FB10BEF2217D6478A53B475635EEF074C8A7E85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fb:5d:7a:2b:78:70:42:a2:a8:ec:66:e6:73: a1:dc:90:35:cc:52:bb:a6:39:07:51:ec:48:73:78: c3:d5:a4:15:d1:44:ef:2b:09:05:fc:bb:2b:ef:8d: ed:0f:33:2a:54:e8:16:68:ba:9f:20:2e:56:d5:43: f5:5b:95:a7:43:60:e6:bf:07:fb:d1:2a:34:05:8d: 6a:e6:f1:f0:e1:fe:6a:b3:a9:7d:c0:91:e2:25:3f: 78:2b:64:7e:35:cc:2b:f1:17:33:80:11:ba:a2:97: 0b:ee:d9:38:b8:dc:30:49:58:39:9f:ac:86:a6:0e: 25:fa:5a:b8:c1:6c:f1:97:60:f1:da:34:48:b7:ef: 39:f0:13:5b:97:b7:85:a1:9b:63:aa:68:f8:16:03: 28:10:ea:f8:df:0e:48:c1:ad:a4:f6:81:34:77:9c: ae:89:5e:26:fd:9d:dd:c6:6d:7d:88:01:b3:30:8b: 60:5a:d0:fd:26:0a:71:b2:b9:2c:c9:26:e8:fc:05: 04:d8:ba:73:15:81:1a:67:7a:48:17:4e:99:59:39: ed:04:da:45:7c:99:f9:83:68:d1:2b:91:c2:0a:d6: 85:21:b1:e7:ed:37:5f:e5:ea:d6:14:db:32:14:0e: d8:fa:88:69:21:bb:84:e0:4a:dc:32:d4:8a:ce:d8: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:10:BE:F2:21:7D:64:78:A5:3B:47:56:35:EE:F0:74:C8:A7:E8:5A X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:44:f0:9c:1b:a6:87:17:64:98:23:9f:92:0b:a2:4f:cc:a6: f4:41:f4:7d:f5:fc:5d:c5:71:e2:e1:e0:a0:6a:2f:f4:76:1e: e1:d8:50:40:a5:e7:31:82:f7:e6:87:20:8c:0b:ce:ca:78:ca: 1d:a9:34:32:1a:18:a0:53:df:9b:49:3e:f4:7b:03:9d:b8:46: 7b:c0:bf:f9:28:1b:c8:b1:b8:08:62:e6:2b:54:a1:e9:aa:66: 69:74:67:77:20:9f:ab:59:75:96:bd:8c:a6:17:10:dd:21:b2: da:9f:e5:9d:2b:97:1d:59:85:13:92:f1:80:99:cf:e1:8d:a1: 06:8a:a5:b1:ac:0f:c4:09:b1:e6:4e:74:af:50:47:20:6d:4b: b5:c8:f4:92:3e:26:f9:fb:5f:3a:77:0b:8b:8d:00:fe:e6:62: a9:79:2f:af:c1:41:41:54:04:d0:03:91:b9:12:f9:33:84:fd: e4:37:5f:13:52:7e:0e:50:e1:b0:70:9b:c7:f1:40:8c:97:71: dc:be:60:78:d6:2b:ff:84:7b:b3:03:d1:b2:96:a0:3d:96:34: eb:86:c7:20:98:bd:c4:46:d5:62:0e:bd:56:d2:c9:b7:5b:f1: e7:1c:9e:03:0b:62:cb:e1:28:0f:bb:1a:f3:20:73:83:c6:ce: c4:42:8d:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMjA5MTUw MjM0NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZCMTBCRUYyMjE3RDY0 NzhBNTNCNDc1NjM1RUVGMDc0QzhBN0U4NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq+116K3hwQqKo7Gbmc6HckDXMUrumOQdR7EhzeMPVpBXRRO8r CQX8uyvvje0PMypU6BZoup8gLlbVQ/VbladDYOa/B/vRKjQFjWrm8fDh/mqzqX3A keIlP3grZH41zCvxFzOAEbqilwvu2Ti43DBJWDmfrIamDiX6WrjBbPGXYPHaNEi3 7znwE1uXt4Whm2OqaPgWAygQ6vjfDkjBraT2gTR3nK6JXib9nd3GbX2IAbMwi2Ba 0P0mCnGyuSzJJuj8BQTYunMVgRpnekgXTplZOe0E2kV8mfmDaNErkcIK1oUhseft N1/l6tYU2zIUDtj6iGkhu4TgStwy1IrO2L8pAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+xC+8iF9ZHilO0dWNe7wdMin6FowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLy14Qy04aUY5WkhpbE8wZFdO ZTd3ZE1pbjZGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn mbAwDQYJKoZIhvcNAQELBQADggEBAAxE8JwbpocXZJgjn5ILok/MpvRB9H31/F3F ceLh4KBqL/R2HuHYUECl5zGC9+aHIIwLzsp4yh2pNDIaGKBT35tJPvR7A524RnvA v/koG8ixuAhi5itUoemqZml0Z3cgn6tZdZa9jKYXEN0hstqf5Z0rlx1ZhROS8YCZ z+GNoQaKpbGsD8QJseZOdK9QRyBtS7XI9JI+Jvn7Xzp3C4uNAP7mYql5L6/BQUFU BNADkbkS+TOE/eQ3XxNSfg5Q4bBwm8fxQIyXcdy+YHjWK/+Ee7MD0bKWoD2WNOuG xyCYvcRG1WIOvVbSybdb8eccngMLYsvhKA+7GvMgc4PGzsRCjXQ= -----END CERTIFICATE-----Generated at Wed Mar 15 13:06:13 2023 by rpki-client on console-fra.rpki-client.org