$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa File: 2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa (raw, json) Hash identifier: Cn7QlTfMivBkDkv4fN3GhPZE4yYeSknuXZJYBlU8k2o= Subject key identifier: D9:7B:76:30:CE:18:E3:E9:00:67:5F:F4:F3:D1:6F:02:7C:F6:A1:91 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 316B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa Signing time: Mon 26 Aug 2024 05:30:26 +0000 ROA not before: Mon 26 Aug 2024 05:30:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12651 (0x316b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D97B7630CE18E3E900675FF4F3D16F027CF6A191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:2a:47:f1:1d:87:dc:69:0f:ad:7d:3a:19: c2:5c:f7:7b:01:aa:b4:5b:80:2f:6c:e5:51:f9:b0: 66:72:18:ff:7b:b7:54:38:21:14:99:b7:af:fa:3e: b1:c6:5e:ff:4d:3d:c7:a9:38:57:8f:24:2e:25:b2: 6a:61:e3:3c:c6:97:24:67:82:16:25:f6:44:e7:c6: 00:65:61:fb:0f:4f:a9:95:0c:cd:25:82:06:93:e1: 5f:17:fe:7e:77:f8:75:da:e4:9d:62:34:9f:86:92: 48:0a:36:66:97:19:e1:f7:e5:ff:e1:03:75:48:4a: fd:0f:01:d2:b7:c8:6a:2a:59:87:c1:a8:62:1b:80: c8:49:20:97:33:ce:b3:df:b2:e7:d8:7e:11:56:1f: 01:da:ca:0f:ab:1b:d5:48:cf:b4:7a:99:44:28:6a: 76:e6:90:18:87:99:6f:6e:8d:08:7c:bc:41:99:1a: f8:04:1c:76:50:6e:96:da:83:49:e6:19:a0:45:c3: 35:95:47:6c:90:19:fb:5e:0a:40:19:ba:9f:5b:bf: 45:38:26:a0:bc:b5:2d:c7:5e:d3:50:65:3c:ae:31: e8:81:52:57:21:8a:cc:a9:45:e1:77:d9:db:18:7c: f9:cd:04:55:b4:f6:b4:34:06:6a:29:cf:6f:e1:a4: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7B:76:30:CE:18:E3:E9:00:67:5F:F4:F3:D1:6F:02:7C:F6:A1:91 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.238.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:17:b7:e3:82:e5:84:c7:9b:26:44:86:dd:b6:d4:53:8b:e4: f3:8f:dc:d1:2f:b9:e1:09:f1:4c:2d:ca:e8:3d:2a:0c:12:dd: 1c:60:19:16:f4:71:25:94:0f:37:42:48:1e:0f:ab:99:2a:b3: 70:c6:85:94:6e:54:1a:bb:9e:15:c0:91:c2:ed:d1:2e:ad:89: 8f:e6:da:9e:fc:bf:01:fe:be:c2:8c:3a:a6:25:67:20:d2:86: 3f:19:a0:69:0e:c0:b2:34:39:a3:e8:6e:12:10:61:91:5b:0d: c9:76:5a:7f:8d:a9:70:87:23:10:84:a9:e2:05:a9:3a:e7:e3: 86:b9:3e:2c:68:04:ff:99:53:cb:5e:f2:e5:bb:a6:14:a1:6e: ad:36:2c:8b:c0:da:60:60:8b:ea:4a:29:bb:16:0f:4a:f6:61: 19:47:6b:b9:4b:33:d7:5d:f5:04:b4:7d:64:da:f4:e1:7c:a4: 61:f5:59:83:24:51:ae:29:a9:ed:81:41:1a:a4:d5:d3:38:a3: 57:f4:9e:db:ad:47:e4:47:2f:6a:c3:d3:d2:19:51:01:4e:80: d3:a2:f5:28:5f:2b:9e:c8:5b:99:4f:0b:91:6e:4b:ee:b2:2a: 68:4d:ee:1e:3a:ae:dd:5c:34:70:e1:20:68:9b:1e:a7:05:0a: f6:b2:ee:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5N0I3NjMwQ0UxOEUz RTkwMDY3NUZGNEYzRDE2RjAyN0NGNkExOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgMipH8R2H3GkPrX06GcJc93sBqrRbgC9s5VH5sGZyGP97t1Q4 IRSZt6/6PrHGXv9NPcepOFePJC4lsmph4zzGlyRnghYl9kTnxgBlYfsPT6mVDM0l ggaT4V8X/n53+HXa5J1iNJ+GkkgKNmaXGeH35f/hA3VISv0PAdK3yGoqWYfBqGIb gMhJIJczzrPfsufYfhFWHwHayg+rG9VIz7R6mUQoanbmkBiHmW9ujQh8vEGZGvgE HHZQbpbag0nmGaBFwzWVR2yQGfteCkAZup9bv0U4JqC8tS3HXtNQZTyuMeiBUlch isypReF32dsYfPnNBFW09rQ0Bmopz2/hpNZbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2Xt2MM4Y4+kAZ1/089FvAnz2oZEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJYdDJNTTRZNC1rQVoxXzA4 OUZ2QW56Mm9aRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq Ae4wDQYJKoZIhvcNAQELBQADggEBABsXt+OC5YTHmyZEht221FOL5POP3NEvueEJ 8Uwtyug9KgwS3RxgGRb0cSWUDzdCSB4Pq5kqs3DGhZRuVBq7nhXAkcLt0S6tiY/m 2p78vwH+vsKMOqYlZyDShj8ZoGkOwLI0OaPobhIQYZFbDcl2Wn+NqXCHIxCEqeIF qTrn44a5PixoBP+ZU8te8uW7phShbq02LIvA2mBgi+pKKbsWD0r2YRlHa7lLM9dd 9QS0fWTa9OF8pGH1WYMkUa4pqe2BQRqk1dM4o1f0ntutR+RHL2rD09IZUQFOgNOi 9ShfK57IW5lPC5FuS+6yKmhN7h46rt1cNHDhIGibHqcFCvay7iY= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org