$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2PX-7odJkejQw-8OKUB01AqhnGo.roa File: 2PX-7odJkejQw-8OKUB01AqhnGo.roa (raw, json) Hash identifier: zy7JigvGzFajqveYbZrnPffRjsuK2xBrhKURws/0wrU= Subject key identifier: D8:F5:FE:EE:87:49:91:E8:D0:C3:EF:0E:29:40:74:D4:0A:A1:9C:6A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B00 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2PX-7odJkejQw-8OKUB01AqhnGo.roa Signing time: Fri 01 Sep 2023 10:08:33 +0000 ROA not before: Fri 01 Sep 2023 10:08:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11008 (0x2b00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D8F5FEEE874991E8D0C3EF0E294074D40AA19C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:91:be:d1:b6:c1:e5:ac:ec:d3:5e:c9:68: df:d7:db:a9:b1:e7:08:3d:b4:33:04:5f:22:f2:aa: 38:29:43:3d:ab:2d:eb:cb:db:86:ca:49:a1:84:69: 3d:e5:ed:6d:fc:0d:9e:51:2b:57:51:34:5c:df:b3: 37:e9:91:e0:e9:ba:45:2e:0f:ff:37:f9:b5:cf:98: 0b:54:bb:9a:be:f2:c2:45:ec:9f:83:21:cd:d5:78: a5:9b:48:c3:0c:0e:ae:66:f7:b7:a8:b4:56:3b:06: 63:29:61:28:99:54:00:96:36:2e:eb:18:e0:97:7b: 90:42:1b:4a:31:e8:99:6c:7a:f6:14:f0:91:ba:61: a1:35:cc:9f:84:dd:33:b0:a2:0a:1f:a2:79:4d:c5: eb:3e:d8:81:5e:1b:1e:a0:ce:db:5a:79:37:ad:16: 73:16:49:8a:58:3d:ca:34:12:09:bf:04:dd:d4:8b: 95:31:45:1e:0b:2a:56:6d:42:17:f1:d0:ba:e1:58: 04:84:6d:65:e2:ff:f2:84:58:4c:e0:93:95:f5:0d: 25:20:d8:5f:2b:ea:db:d1:22:93:bb:32:1f:85:d2: ee:1f:db:6d:dc:36:b9:19:0b:2e:94:49:a9:ce:07: 90:00:e4:e8:8f:91:5d:16:ea:66:c4:b1:b9:ea:09: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F5:FE:EE:87:49:91:E8:D0:C3:EF:0E:29:40:74:D4:0A:A1:9C:6A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2PX-7odJkejQw-8OKUB01AqhnGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.45.0/24 Signature Algorithm: sha256WithRSAEncryption 88:35:b8:55:02:62:6a:e7:ac:af:ba:d3:f7:d5:ad:ad:3c:1c: 2a:3f:df:49:59:e0:37:1b:c9:57:f1:1a:36:c6:48:3d:ff:75: d0:98:4a:89:ac:a0:56:bb:3a:e3:b3:01:fe:44:68:6c:b8:cc: 42:b4:3a:5f:87:31:4f:c7:c1:f4:40:25:cb:de:e5:65:fc:cc: 72:13:08:74:9b:e6:33:6f:2f:27:75:00:08:54:a7:6f:a3:e0: b0:fd:70:58:aa:95:94:bd:04:1a:76:b0:d8:57:fd:39:5f:2c: fb:b1:5e:08:f9:8c:52:b2:f5:e2:ff:a5:0a:f8:bd:60:0a:34: 46:dd:72:ce:8f:69:72:d4:a4:f1:30:f9:9f:13:9a:d4:d3:c1: 86:01:21:c2:7b:d2:b1:77:1f:d1:fd:ff:d6:b2:c1:9e:5f:66: 7e:60:8c:24:8e:33:57:36:a0:c4:77:8a:53:a2:72:bd:ed:39: 2e:b5:07:32:e3:47:81:51:29:e0:f1:3a:cc:cc:fc:04:a6:36: 86:ca:90:4f:a0:13:18:58:a2:e5:67:06:10:09:bb:65:4e:50: 59:21:bb:fd:7c:42:5b:fc:b2:f3:9e:a0:45:2a:98:5b:cf:5d: dc:52:b2:26:36:67:09:49:94:71:0b:f6:a7:bf:c4:a1:84:46: 6e:6c:08:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ4RjVGRUVFODc0OTkx RThEMEMzRUYwRTI5NDA3NEQ0MEFBMTlDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDex5G+0bbB5azs017JaN/X26mx5wg9tDMEXyLyqjgpQz2rLevL 24bKSaGEaT3l7W38DZ5RK1dRNFzfszfpkeDpukUuD/83+bXPmAtUu5q+8sJF7J+D Ic3VeKWbSMMMDq5m97eotFY7BmMpYSiZVACWNi7rGOCXe5BCG0ox6JlsevYU8JG6 YaE1zJ+E3TOwogofonlNxes+2IFeGx6gzttaeTetFnMWSYpYPco0Egm/BN3Ui5Ux RR4LKlZtQhfx0LrhWASEbWXi//KEWEzgk5X1DSUg2F8r6tvRIpO7Mh+F0u4f223c NrkZCy6USanOB5AA5OiPkV0W6mbEsbnqCV/ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2PX+7odJkejQw+8OKUB01AqhnGowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJQWC03b2RKa2VqUXctOE9L VUIwMUFxaG5Hby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AS0wDQYJKoZIhvcNAQELBQADggEBAIg1uFUCYmrnrK+60/fVra08HCo/30lZ4Dcb yVfxGjbGSD3/ddCYSomsoFa7OuOzAf5EaGy4zEK0Ol+HMU/HwfRAJcve5WX8zHIT CHSb5jNvLyd1AAhUp2+j4LD9cFiqlZS9BBp2sNhX/TlfLPuxXgj5jFKy9eL/pQr4 vWAKNEbdcs6PaXLUpPEw+Z8TmtTTwYYBIcJ70rF3H9H9/9aywZ5fZn5gjCSOM1c2 oMR3ilOicr3tOS61BzLjR4FRKeDxOszM/ASmNobKkE+gExhYouVnBhAJu2VOUFkh u/18Qlv8svOeoEUqmFvPXdxSsiY2ZwlJlHEL9qe/xKGERm5sCPw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org