$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/B_H6pba-MUkuouuz2KuOWffPrDw.roa File: B_H6pba-MUkuouuz2KuOWffPrDw.roa (raw, json) Hash identifier: TnO4YNFIxwgs/ZKlCKWnHGfQO5xiR/YAsQagV30dM+k= Subject key identifier: 07:F1:FA:A5:B6:BE:31:49:2E:A2:EB:B3:D8:AB:8E:59:F7:CF:AC:3C Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Certificate serial: 0B12 Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/B_H6pba-MUkuouuz2KuOWffPrDw.roa Signing time: Fri 01 Sep 2023 09:00:05 +0000 ROA not before: Fri 01 Sep 2023 09:00:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18046 IP address blocks: 220.158.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Validity Not Before: Sep 1 09:00:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=07F1FAA5B6BE31492EA2EBB3D8AB8E59F7CFAC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:06:58:1a:d3:f7:26:48:46:24:c1:93:ec: 99:f0:e1:3e:02:0e:54:c4:a8:75:50:04:a8:05:8d: 5b:e9:3f:87:cc:10:0a:22:1f:1a:67:6a:e9:e2:3a: 20:19:06:31:07:ab:a8:b1:0f:15:4a:b5:8c:45:68: 6f:31:93:5a:48:e8:6d:d3:cd:77:93:11:fe:5c:93: 5f:f0:f4:15:3c:f2:89:d6:cf:7b:5a:cc:3a:b9:ed: b6:d7:1d:ca:27:21:9c:be:c6:07:14:5f:07:87:5f: e7:b9:56:48:06:9d:ae:21:1b:57:e2:d5:92:b0:c2: a7:6b:84:b1:e6:dd:9a:bb:56:ac:22:d8:3c:d1:88: ba:43:33:78:7f:0b:7c:1a:34:33:05:09:86:22:71: 95:28:cf:a9:7c:e3:bd:3e:2d:09:97:c1:d6:9a:54: 7b:12:33:ce:5d:80:14:dc:dc:65:22:b6:c0:ed:f4: bf:47:06:ba:3d:10:27:a0:b9:d5:ac:3d:66:cd:36: 0e:16:91:3e:54:e4:50:b4:2b:7c:96:d0:ef:0e:11: 82:d5:38:99:08:ef:92:8b:a6:d3:3e:73:4f:05:28: b2:f3:b4:5b:f8:a9:8e:ee:da:68:87:bb:26:41:d8: c8:a8:2d:07:b3:44:48:a6:9d:25:1a:36:b9:ad:32: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F1:FA:A5:B6:BE:31:49:2E:A2:EB:B3:D8:AB:8E:59:F7:CF:AC:3C X509v3 Authority Key Identifier: keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/B_H6pba-MUkuouuz2KuOWffPrDw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.158.228.0/22 Signature Algorithm: sha256WithRSAEncryption 17:78:af:48:91:70:5d:72:6f:a4:9a:ce:63:e1:7b:5a:a4:e8: 23:7c:cd:2f:ab:e3:fd:93:25:0e:12:6e:4b:f7:0a:cd:7e:e8: f3:59:f1:45:5a:d1:81:18:b8:57:f2:44:78:f5:21:d7:6c:c5: b0:5d:85:77:6e:30:61:d3:50:b7:1b:95:7a:38:55:61:86:cd: 6c:28:c8:57:9a:4a:5b:f6:24:32:59:ed:70:b4:d6:55:bb:b1: 8a:ea:a0:4b:5d:98:8a:a8:e8:af:ee:41:61:f7:75:48:9b:32: 67:56:3e:dd:c6:0b:11:45:80:83:a8:b8:93:d4:bf:1f:ab:ea: 2b:a0:3f:91:54:9a:11:4d:07:f7:2b:0a:65:87:e2:df:d8:2a: c4:f6:c7:73:e5:60:ef:43:8c:77:f8:d8:79:c7:88:cc:9b:cf: 55:f0:0d:30:59:18:1f:e3:80:b9:29:c8:cd:f6:6c:c3:ca:12: f8:b7:7b:04:2a:ac:57:27:77:c0:45:ce:97:d7:50:4c:0a:b4: 95:8a:6e:7d:b9:2a:ce:a8:70:05:86:57:8e:22:d3:5e:4f:ab: 64:42:ba:b1:4c:88:7b:a7:45:bd:26:6e:69:52:06:09:14:57: 7a:18:0e:37:8d:ba:c4:64:1d:83:b7:ab:86:55:db:ff:50:1d: 79:1a:00:73 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0 QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yMzA5MDEw OTAwMDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA3RjFGQUE1QjZCRTMx NDkyRUEyRUJCM0Q4QUI4RTU5RjdDRkFDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEIQZYGtP3JkhGJMGT7Jnw4T4CDlTEqHVQBKgFjVvpP4fMEAoi HxpnauniOiAZBjEHq6ixDxVKtYxFaG8xk1pI6G3TzXeTEf5ck1/w9BU88onWz3ta zDq57bbXHconIZy+xgcUXweHX+e5VkgGna4hG1fi1ZKwwqdrhLHm3Zq7Vqwi2DzR iLpDM3h/C3waNDMFCYYicZUoz6l8470+LQmXwdaaVHsSM85dgBTc3GUitsDt9L9H Bro9ECegudWsPWbNNg4WkT5U5FC0K3yW0O8OEYLVOJkI75KLptM+c08FKLLztFv4 qY7u2miHuyZB2MioLQezREimnSUaNrmtMh9TAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUB/H6pba+MUkuouuz2KuOWffPrDwwHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvQl9INnBiYS1NVWt1b3V1 ejJLdU9XZmZQckR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Atye5DANBgkqhkiG9w0BAQsFAAOCAQEAF3ivSJFwXXJvpJrOY+F7WqToI3zNL6vj /ZMlDhJuS/cKzX7o81nxRVrRgRi4V/JEePUh12zFsF2Fd24wYdNQtxuVejhVYYbN bCjIV5pKW/YkMlntcLTWVbuxiuqgS12Yiqjor+5BYfd1SJsyZ1Y+3cYLEUWAg6i4 k9S/H6vqK6A/kVSaEU0H9ysKZYfi39gqxPbHc+Vg70OMd/jYeceIzJvPVfANMFkY H+OAuSnIzfZsw8oS+Ld7BCqsVyd3wEXOl9dQTAq0lYpufbkqzqhwBYZXjiLTXk+r ZEK6sUyIe6dFvSZuaVIGCRRXehgON426xGQdg7erhlXb/1AdeRoAcw== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:16 2024 by rpki-client on console-ams.rpki-client.org