$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-bFOcSoX7V0OH0iL09Qf2C_uqKA.roa File: -bFOcSoX7V0OH0iL09Qf2C_uqKA.roa (raw, json) Hash identifier: KyhwNNjOuBXZBi86x9ymvvoT83qbWQrbCSUzgYV8ZZU= Subject key identifier: F9:B1:4E:71:2A:17:ED:5D:0E:1F:48:8B:D3:D4:1F:D8:2F:EE:A8:A0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2920 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-bFOcSoX7V0OH0iL09Qf2C_uqKA.roa Signing time: Fri 01 Sep 2023 10:06:10 +0000 ROA not before: Fri 01 Sep 2023 10:06:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10528 (0x2920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F9B14E712A17ED5D0E1F488BD3D41FD82FEEA8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:5f:67:50:50:cc:f4:cb:f3:da:2f:10:e5: c0:1a:69:23:84:57:ba:bd:9b:cf:21:e5:f7:f2:a2: 5d:94:bd:ca:53:84:0f:3c:6e:96:5e:0b:8a:cd:ee: 7f:79:bc:6f:72:e7:d6:36:0c:f9:1c:2a:cb:4a:4c: 57:6e:95:8d:e5:20:66:8b:c0:a1:d5:5a:94:74:10: ed:30:5b:2d:f9:cf:87:27:0b:7c:da:78:8f:1e:d1: 8f:74:72:c2:6b:05:a6:77:10:3f:fe:fb:a5:78:81: f8:15:bb:64:a9:dc:ed:32:2f:7e:93:c7:86:93:bd: 46:9c:a3:78:1d:81:f3:09:9d:37:ea:f0:6e:8d:9e: 06:95:cc:03:55:f8:79:29:80:d2:ed:8d:6f:8b:c9: 09:5f:11:34:b9:78:90:39:5d:8e:99:9e:4b:2a:69: 52:ab:f6:9c:a8:7f:a7:0f:42:e0:4d:0c:08:af:51: 2b:6d:83:bf:44:af:3c:c8:c0:73:70:fc:2f:2f:c5: c9:18:9b:72:df:92:42:d8:90:7d:58:fb:d6:56:f7: 68:9e:62:1f:17:31:1e:60:6a:43:9a:a3:d0:f0:c8: cb:31:e5:fa:fe:1f:90:8c:5d:c0:25:04:3a:37:c3: 17:e8:74:2b:2e:a1:87:18:f1:74:ee:ad:9d:15:f3: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B1:4E:71:2A:17:ED:5D:0E:1F:48:8B:D3:D4:1F:D8:2F:EE:A8:A0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-bFOcSoX7V0OH0iL09Qf2C_uqKA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.252.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:63:b3:6e:c3:fc:54:48:13:fb:2e:6f:e4:20:5d:cb:ec:46: 3b:84:f7:12:94:0a:a8:15:d5:64:7a:e1:a1:2d:02:b7:34:75: 3a:01:f6:08:44:ed:d0:42:dd:79:09:dc:b0:9c:95:c1:7b:c5: 88:bf:6a:3b:8d:95:20:96:88:40:0d:30:fa:86:c9:8e:68:32: 07:74:f5:c0:67:22:3b:fd:c0:86:68:66:28:6a:db:fd:79:f4: 69:19:af:a4:3e:ca:6e:38:f4:87:0d:e1:19:d8:47:de:92:c7: 6f:a3:f8:58:1c:52:26:a8:0d:c1:d6:ec:6a:40:e6:74:ae:19: d2:09:15:34:b3:c1:8a:33:a9:99:94:0f:2c:2a:51:6c:3d:ed: 51:ff:53:8c:3d:03:84:3c:5e:94:18:3f:34:4a:30:ba:1a:4a: aa:c1:f0:65:72:05:66:38:4b:c9:35:ff:94:54:56:8c:e9:40: 14:7d:8a:d9:8e:c6:7c:ab:9a:23:7b:ab:fb:e9:ec:ae:cf:63: ee:b3:46:d6:2f:30:de:4a:58:25:47:a1:15:f8:61:65:ed:75: 82:e0:8b:34:53:bd:50:fb:90:34:7e:e2:d0:bc:1f:af:d9:1f: 52:c0:f1:4a:f9:af:1b:50:89:f4:df:b7:61:57:58:5c:b1:86: b2:4f:14:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5QjE0RTcxMkExN0VE NUQwRTFGNDg4QkQzRDQxRkQ4MkZFRUE4QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1kl9nUFDM9Mvz2i8Q5cAaaSOEV7q9m88h5ffyol2UvcpThA88 bpZeC4rN7n95vG9y59Y2DPkcKstKTFdulY3lIGaLwKHVWpR0EO0wWy35z4cnC3za eI8e0Y90csJrBaZ3ED/++6V4gfgVu2Sp3O0yL36Tx4aTvUaco3gdgfMJnTfq8G6N ngaVzANV+HkpgNLtjW+LyQlfETS5eJA5XY6ZnksqaVKr9pyof6cPQuBNDAivUStt g79ErzzIwHNw/C8vxckYm3LfkkLYkH1Y+9ZW92ieYh8XMR5gakOao9DwyMsx5fr+ H5CMXcAlBDo3wxfodCsuoYcY8XTurZ0V816NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+bFOcSoX7V0OH0iL09Qf2C/uqKAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1iRk9jU29YN1YwT0gwaUww OVFmMkNfdXFLQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfwwDQYJKoZIhvcNAQELBQADggEBABtjs27D/FRIE/sub+QgXcvsRjuE9xKUCqgV 1WR64aEtArc0dToB9ghE7dBC3XkJ3LCclcF7xYi/ajuNlSCWiEANMPqGyY5oMgd0 9cBnIjv9wIZoZihq2/159GkZr6Q+ym449IcN4RnYR96Sx2+j+FgcUiaoDcHW7GpA 5nSuGdIJFTSzwYozqZmUDywqUWw97VH/U4w9A4Q8XpQYPzRKMLoaSqrB8GVyBWY4 S8k1/5RUVozpQBR9itmOxnyrmiN7q/vp7K7PY+6zRtYvMN5KWCVHoRX4YWXtdYLg izRTvVD7kDR+4tC8H6/ZH1LA8Ur5rxtQifTft2FXWFyxhrJPFGQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org