$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa File: H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa (raw, json) Hash identifier: /9zhVj98DgA4ZLtOQPNHDDgWZIQB3YaJZsN46K7kn+0= Subject key identifier: 1F:D8:79:EC:44:D9:ED:4D:13:39:46:9A:34:74:D4:6C:86:8F:3A:D2 Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0B99 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa Signing time: Fri 01 Sep 2023 10:01:05 +0000 ROA not before: Fri 01 Sep 2023 10:01:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 211.73.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2969 (0xb99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Sep 1 10:01:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1FD879EC44D9ED4D1339469A3474D46C868F3AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:34:17:bc:44:e5:97:fc:1e:6e:fe:cf:43:42: 03:30:77:f6:4f:67:51:ab:25:ba:f3:55:90:74:ec: 42:b4:90:5e:6a:b9:cc:2d:d0:be:1d:51:2f:96:6c: bd:aa:c2:86:66:af:55:8d:b1:0e:2f:01:92:26:73: 3e:c4:a0:b2:36:23:23:12:c0:3f:5f:29:36:ee:fa: 2f:c7:92:db:d1:0d:16:e6:2b:03:8c:0d:a1:3e:53: 8f:f1:c5:6d:e6:75:5c:5c:8b:1c:2c:dc:3b:5f:b1: 88:36:59:e7:d3:a3:dc:22:f4:28:ce:d8:50:46:ab: f7:fd:96:7e:dc:a0:16:07:d1:41:86:b5:32:10:fe: 55:fe:ff:04:d6:c2:8b:b3:99:36:bd:e8:5e:f2:75: af:9f:54:9c:40:85:08:9d:1b:af:3d:a5:6a:a7:75: 2d:f8:40:9b:43:a6:22:22:89:75:d5:03:c7:a0:45: c5:b2:24:a7:69:3e:08:47:e9:ab:08:09:24:dd:91: 4f:89:92:eb:6a:51:45:29:6d:ee:4e:c8:c3:32:15: 2e:6f:5a:b6:80:95:f8:45:69:ea:79:c8:26:51:1f: eb:d0:50:22:31:e3:1e:e8:68:93:a3:20:25:64:f4: 31:ad:a8:96:fb:89:6e:b8:ba:b0:02:19:c9:9c:1c: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D8:79:EC:44:D9:ED:4D:13:39:46:9A:34:74:D4:6C:86:8F:3A:D2 X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.73.160.0/19 Signature Algorithm: sha256WithRSAEncryption 6f:8a:c9:7e:4d:b2:27:4d:74:32:f7:a5:23:75:19:60:c0:dc: b0:fa:f8:07:70:3e:1d:09:fb:eb:ae:d5:8a:33:78:53:34:29: 68:2a:5c:fd:6f:19:d4:2e:ad:2b:0a:79:80:6c:a8:cf:32:1f: e4:0b:75:63:54:d4:a5:90:99:98:0a:62:b0:68:59:9e:43:5f: d8:62:2a:33:d5:42:14:3c:8d:a5:86:8c:fb:ca:04:38:b7:06: df:f4:04:2b:db:b1:d2:ee:df:b5:c6:59:6f:00:37:f2:81:3a: 2b:66:8a:b0:7f:aa:08:e7:5e:c5:40:aa:c0:12:ce:94:59:2b: a9:2a:93:f1:f2:b6:3c:f5:b7:18:17:35:74:d1:d3:d1:2a:02: 9b:6e:2a:e0:9f:6d:86:11:31:0d:d8:c8:f5:a5:cd:cc:6e:11: 05:0f:0f:97:59:6a:8d:8e:63:93:1e:23:86:df:5f:68:6c:10: bd:9b:66:18:06:02:85:9e:1c:9f:3e:27:d0:8c:b8:30:71:4d: 59:4a:03:98:40:e6:87:6a:35:47:21:a2:c0:ed:65:cf:eb:9d: 2a:25:90:aa:37:bc:ba:a7:b1:41:da:65:47:7a:fe:6a:0c:70: c1:11:ac:d0:42:91:14:f1:56:da:3e:c8:45:c0:80:c7:dc:45: c1:88:f8:49 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMzA5MDEx MDAxMDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFGRDg3OUVDNDREOUVE NEQxMzM5NDY5QTM0NzRENDZDODY4RjNBRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqNBe8ROWX/B5u/s9DQgMwd/ZPZ1GrJbrzVZB07EK0kF5qucwt 0L4dUS+WbL2qwoZmr1WNsQ4vAZImcz7EoLI2IyMSwD9fKTbu+i/HktvRDRbmKwOM DaE+U4/xxW3mdVxcixws3DtfsYg2WefTo9wi9CjO2FBGq/f9ln7coBYH0UGGtTIQ /lX+/wTWwouzmTa96F7yda+fVJxAhQidG689pWqndS34QJtDpiIiiXXVA8egRcWy JKdpPghH6asICSTdkU+JkutqUUUpbe5OyMMyFS5vWraAlfhFaep5yCZRH+vQUCIx 4x7oaJOjICVk9DGtqJb7iW64urACGcmcHM99AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUH9h57ETZ7U0TOUaaNHTUbIaPOtIwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvSDloNTdFVFo3VTBUT1VhYU5IVFVi SWFQT3RJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNJoDAN BgkqhkiG9w0BAQsFAAOCAQEAb4rJfk2yJ010MvelI3UZYMDcsPr4B3A+HQn7667V ijN4UzQpaCpc/W8Z1C6tKwp5gGyozzIf5At1Y1TUpZCZmApisGhZnkNf2GIqM9VC FDyNpYaM+8oEOLcG3/QEK9ux0u7ftcZZbwA38oE6K2aKsH+qCOdexUCqwBLOlFkr qSqT8fK2PPW3GBc1dNHT0SoCm24q4J9thhExDdjI9aXNzG4RBQ8Pl1lqjY5jkx4j ht9faGwQvZtmGAYChZ4cnz4n0Iy4MHFNWUoDmEDmh2o1RyGiwO1lz+udKiWQqje8 uqexQdplR3r+agxwwRGs0EKRFPFW2j7IRcCAx9xFwYj4SQ== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:43 2024 by rpki-client on console-fra.rpki-client.org