$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/186Q30BzXM62djjxqAC4oqCBtJo.roa File: 186Q30BzXM62djjxqAC4oqCBtJo.roa (raw, json) Hash identifier: 4YgYxOtfShHGHcPzvhZoLac/53Gxyk8nUcps7+qX/Aw= Subject key identifier: D7:CE:90:DF:40:73:5C:CE:B6:76:38:F1:A8:00:B8:A2:A0:81:B4:9A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A96 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/186Q30BzXM62djjxqAC4oqCBtJo.roa Signing time: Fri 01 Sep 2023 10:08:05 +0000 ROA not before: Fri 01 Sep 2023 10:08:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10902 (0x2a96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D7CE90DF40735CCEB67638F1A800B8A2A081B49A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:27:78:5a:3e:62:28:a3:35:3a:91:b9:bc: d8:a1:48:21:d9:2d:33:6c:1a:ec:22:e1:5b:8f:7b: 4f:e6:6e:29:b2:05:90:54:12:27:03:81:32:3a:54: 4d:b6:8b:04:fc:42:17:14:38:35:49:e0:83:dc:0e: 02:7d:10:96:9c:55:36:9e:18:20:7b:fd:b5:59:57: 6b:f4:d5:c4:c2:35:d9:4c:3d:0f:f3:7c:d6:36:02: dd:18:90:7d:0d:e8:df:26:b6:79:61:f1:9f:45:45: ee:6d:b2:1e:0c:a2:26:12:79:ca:36:ff:e0:ae:49: eb:c3:33:ef:f3:3f:f5:27:e7:bc:97:f9:81:de:90: 3b:ca:e4:68:9e:a9:f3:13:58:f7:8e:23:12:1e:20: 09:7f:9d:53:cf:fa:b0:5f:7c:c2:71:b6:0b:1c:88: af:43:25:1c:3b:ae:d4:94:0b:5e:73:fa:b9:47:43: e1:78:08:f2:e0:47:80:1a:79:71:03:dd:a4:82:f9: 7d:b9:92:a6:e0:3c:9b:1c:bd:44:ea:9d:cc:d0:a5: 7d:78:73:5f:ed:f2:9b:28:25:fe:fc:98:cf:ce:20: d4:a3:ad:8b:22:de:46:17:47:3f:db:9b:a9:37:dc: eb:cd:1d:8d:95:75:f1:35:31:dc:d5:64:48:d1:cc: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:90:DF:40:73:5C:CE:B6:76:38:F1:A8:00:B8:A2:A0:81:B4:9A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/186Q30BzXM62djjxqAC4oqCBtJo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:5e:8d:1e:e2:fe:9d:c6:ba:19:9a:f3:a0:e1:25:c5:4c:a0: b8:e0:0a:2f:4f:08:c3:af:73:0e:62:27:fc:a5:f6:b8:37:b3: c0:84:4f:67:5a:47:59:dd:ba:45:d3:9d:ac:21:03:58:bb:46: 2a:20:32:6d:5b:6d:74:b8:81:06:9c:ad:73:c5:70:11:49:f4: e8:f0:2b:09:fc:e1:5c:a9:2f:65:da:09:ad:d8:38:43:84:a1: 06:09:da:4d:94:48:15:51:53:d6:2c:d6:ec:17:63:9e:fe:f7: aa:11:dd:7c:27:f7:06:d0:03:8b:62:0f:02:5c:cf:5f:a4:66: b5:f6:f6:a3:4f:2f:f1:59:69:cb:70:1d:24:53:d2:ed:d8:bf: bd:5a:0f:1b:bf:da:04:19:18:3f:bb:22:21:1c:d9:94:1c:da: fe:09:a9:28:e9:f9:46:20:2f:14:3d:65:86:d2:b6:8c:cc:c9: 42:a5:de:95:a9:ff:9d:ec:21:d8:a1:ab:a8:b0:f6:61:88:e5: 66:0c:55:a8:e5:d4:f0:27:0d:5a:90:20:0a:d2:ae:6f:4f:25: b3:91:20:15:75:b8:c8:d8:7c:cd:ca:a7:88:2e:a3:44:2b:55: eb:0d:57:98:6b:4f:8b:ea:e1:f9:dd:8b:cf:df:26:46:75:c7: 04:1a:49:f3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ3Q0U5MERGNDA3MzVD Q0VCNjc2MzhGMUE4MDBCOEEyQTA4MUI0OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/zid4Wj5iKKM1OpG5vNihSCHZLTNsGuwi4VuPe0/mbimyBZBU EicDgTI6VE22iwT8QhcUODVJ4IPcDgJ9EJacVTaeGCB7/bVZV2v01cTCNdlMPQ/z fNY2At0YkH0N6N8mtnlh8Z9FRe5tsh4MoiYSeco2/+CuSevDM+/zP/Un57yX+YHe kDvK5GieqfMTWPeOIxIeIAl/nVPP+rBffMJxtgsciK9DJRw7rtSUC15z+rlHQ+F4 CPLgR4AaeXED3aSC+X25kqbgPJscvUTqnczQpX14c1/t8psoJf78mM/OINSjrYsi 3kYXRz/bm6k33OvNHY2VdfE1MdzVZEjRzBunAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU186Q30BzXM62djjxqAC4oqCBtJowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzE4NlEzMEJ6WE02MmRqanhx QUM0b3FDQnRKby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ARQwDQYJKoZIhvcNAQELBQADggEBADxejR7i/p3Guhma86DhJcVMoLjgCi9PCMOv cw5iJ/yl9rg3s8CET2daR1ndukXTnawhA1i7RiogMm1bbXS4gQacrXPFcBFJ9Ojw Kwn84VypL2XaCa3YOEOEoQYJ2k2USBVRU9Ys1uwXY57+96oR3Xwn9wbQA4tiDwJc z1+kZrX29qNPL/FZactwHSRT0u3Yv71aDxu/2gQZGD+7IiEc2ZQc2v4JqSjp+UYg LxQ9ZYbStozMyUKl3pWp/53sIdihq6iw9mGI5WYMVajl1PAnDVqQIArSrm9PJbOR IBV1uMjYfM3Kp4guo0QrVesNV5hrT4vq4fndi8/fJkZ1xwQaSfM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org