$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1urvsqrqtT7pyVuoGyc2dkQ-wso.roa File: 1urvsqrqtT7pyVuoGyc2dkQ-wso.roa (raw, json) Hash identifier: Qh14J5bAtLw3OKt0YWe4XGxBIzxMFqK3Y8MM/bE7B3s= Subject key identifier: D6:EA:EF:B2:AA:EA:B5:3E:E9:C9:5B:A8:1B:27:36:76:44:3E:C2:CA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FEA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1urvsqrqtT7pyVuoGyc2dkQ-wso.roa Signing time: Mon 26 Aug 2024 05:28:58 +0000 ROA not before: Mon 26 Aug 2024 05:28:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12266 (0x2fea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6EAEFB2AAEAB53EE9C95BA81B273676443EC2CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:e0:61:ca:99:39:21:bb:f6:54:2a:38:9c: d8:77:68:31:9a:2f:75:ef:c8:53:ab:40:f8:77:6f: cb:df:0b:26:f7:79:99:55:20:01:a3:1f:37:18:c8: 02:81:65:89:34:52:a0:fb:23:07:30:4f:e7:c6:a1: 3c:5a:44:c8:f5:74:54:2d:b0:d1:bb:02:b8:56:6c: d1:dc:05:cf:05:17:93:dc:db:0d:55:27:f9:d9:f8: dd:77:2e:4a:6d:ba:ab:ce:9a:f8:26:53:45:2b:3c: dd:b1:41:07:c8:37:17:15:a6:79:be:88:0a:69:f6: 97:c7:88:0a:ad:1f:52:15:f2:b6:0b:a7:eb:2f:5c: 7a:bc:ad:42:6d:d5:73:3e:06:2c:66:cd:c0:04:a6: e3:0d:a8:db:dd:da:c9:91:72:c3:04:46:40:3d:22: d5:66:67:06:60:9d:e0:3c:34:29:86:01:bb:a8:01: 4f:ef:fd:93:e8:d6:78:c2:16:9f:03:fc:50:a4:5f: 67:ec:20:76:62:f5:df:16:76:85:55:c7:c6:33:24: a9:a7:43:e1:94:e3:9c:e9:b3:12:e5:8b:b4:8e:0e: bc:bb:f7:eb:37:d5:c5:e2:3d:2d:ee:f7:4c:3d:ba: c4:1c:6e:31:20:20:fc:f7:47:14:b0:41:5b:70:68: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EA:EF:B2:AA:EA:B5:3E:E9:C9:5B:A8:1B:27:36:76:44:3E:C2:CA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1urvsqrqtT7pyVuoGyc2dkQ-wso.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.101.0/24 Signature Algorithm: sha256WithRSAEncryption 77:8a:59:11:09:76:96:8a:79:94:82:44:0b:49:a1:26:eb:4d: 44:85:96:fc:6f:29:da:48:0d:92:2a:a7:ff:88:83:71:ad:9a: 32:ac:95:98:e0:90:96:31:85:ba:b2:a1:60:30:38:4c:2d:a0: 62:50:4b:99:d1:02:be:df:b5:77:89:1c:df:8e:ea:8e:7b:8f: 60:ba:71:12:56:38:1a:4a:37:20:b0:70:6c:a1:2c:12:4d:0d: 29:c3:f2:46:3a:14:27:ae:da:ef:68:00:6f:f8:17:ac:00:49: c9:56:52:55:3c:99:61:25:59:a4:bc:25:ce:bf:57:43:98:64: e4:4d:31:59:d0:6a:d9:e9:1b:fd:bc:12:91:5c:75:6e:9b:a0: 26:53:a3:94:2b:44:05:4f:5c:b5:87:b5:d8:93:72:84:49:f5: f8:8b:78:11:07:25:5e:b7:e4:c6:ba:06:70:5f:ed:62:68:bb: 3a:8e:47:c3:71:71:1b:69:7b:d6:70:c7:5c:16:95:d9:09:51: 28:8a:bd:68:c4:82:32:1a:b0:4b:50:f5:b8:b6:b5:38:cf:cc: ad:e8:e0:4b:56:31:22:18:d2:6a:bd:e3:9d:84:09:ad:21:c5: 48:a4:d3:3e:02:d3:94:df:fb:87:f2:af:ca:cd:40:50:a7:51: 25:65:40:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2RUFFRkIyQUFFQUI1 M0VFOUM5NUJBODFCMjczNjc2NDQzRUMyQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvgOBhypk5Ibv2VCo4nNh3aDGaL3XvyFOrQPh3b8vfCyb3eZlV IAGjHzcYyAKBZYk0UqD7IwcwT+fGoTxaRMj1dFQtsNG7ArhWbNHcBc8FF5Pc2w1V J/nZ+N13LkptuqvOmvgmU0UrPN2xQQfINxcVpnm+iApp9pfHiAqtH1IV8rYLp+sv XHq8rUJt1XM+BixmzcAEpuMNqNvd2smRcsMERkA9ItVmZwZgneA8NCmGAbuoAU/v /ZPo1njCFp8D/FCkX2fsIHZi9d8WdoVVx8YzJKmnQ+GU45zpsxLli7SODry79+s3 1cXiPS3u90w9usQcbjEgIPz3RxSwQVtwaIuPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1urvsqrqtT7pyVuoGyc2dkQ+wsowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzF1cnZzcXJxdFQ3cHlWdW9H eWMyZGtRLXdzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWUwDQYJKoZIhvcNAQELBQADggEBAHeKWREJdpaKeZSCRAtJoSbrTUSFlvxvKdpI DZIqp/+Ig3GtmjKslZjgkJYxhbqyoWAwOEwtoGJQS5nRAr7ftXeJHN+O6o57j2C6 cRJWOBpKNyCwcGyhLBJNDSnD8kY6FCeu2u9oAG/4F6wASclWUlU8mWElWaS8Jc6/ V0OYZORNMVnQatnpG/28EpFcdW6boCZTo5QrRAVPXLWHtdiTcoRJ9fiLeBEHJV63 5Ma6BnBf7WJouzqOR8NxcRtpe9Zwx1wWldkJUSiKvWjEgjIasEtQ9bi2tTjPzK3o 4EtWMSIY0mq9452ECa0hxUik0z4C05Tf+4fyr8rNQFCnUSVlQL4= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:37 2024 by rpki-client on console-fra.rpki-client.org