$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qjz-0MlIKs2lPyOs70WoG4oXj8.roa File: 2qjz-0MlIKs2lPyOs70WoG4oXj8.roa (raw, json) Hash identifier: 5mWEQYA6Fb6E6uzlAtRNidyK5t0j1vLaulK9jMJQ1ZQ= Subject key identifier: DA:A8:F3:FB:43:25:20:AB:36:94:FC:8E:B3:BD:16:A0:6E:28:5E:3F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29F2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qjz-0MlIKs2lPyOs70WoG4oXj8.roa Signing time: Fri 01 Sep 2023 10:07:17 +0000 ROA not before: Fri 01 Sep 2023 10:07:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10738 (0x29f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DAA8F3FB432520AB3694FC8EB3BD16A06E285E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:b9:a6:9f:fc:ac:82:8d:5b:4d:05:2a:ce: 29:87:8a:87:e0:18:14:5a:6f:50:ef:6a:a4:4a:be: 29:2e:87:9f:f4:18:38:db:01:ae:e4:fb:06:c2:bd: c7:96:94:e6:42:2a:83:f4:87:8b:2b:3b:cd:46:b8: 11:5b:f3:55:3c:be:e1:bb:57:4a:f1:39:00:11:b9: 6e:6d:d8:de:c2:a4:8b:fa:93:10:a9:bd:0c:99:0e: 6c:49:9c:57:bd:b7:d3:f9:0e:e3:82:eb:95:80:ee: 71:e9:04:fa:fd:ce:4a:3c:59:bc:13:d4:50:42:39: c6:d4:8a:e8:45:83:1e:b4:44:88:d8:a9:8c:98:4a: 24:c6:75:34:3f:3b:09:c3:5f:2e:b0:80:57:12:09: bf:5b:2d:b6:8e:e1:7d:78:a8:c1:a2:82:8e:41:9d: 9f:67:44:c9:f4:e9:38:d4:ba:27:7e:6a:76:74:31: 10:7f:c2:aa:d7:57:e2:98:33:87:9e:d5:a2:01:44: 01:16:c5:cf:c2:67:6f:3d:bd:f0:a9:46:69:71:56: 04:ad:5a:1e:db:6c:f5:d4:79:2c:e7:31:fe:ce:12: 62:2f:1c:0f:93:40:c5:d1:b8:02:be:18:22:48:69: e2:98:85:d6:9d:dd:7f:da:c5:4a:f0:61:f8:5e:ed: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A8:F3:FB:43:25:20:AB:36:94:FC:8E:B3:BD:16:A0:6E:28:5E:3F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qjz-0MlIKs2lPyOs70WoG4oXj8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.150.0/24 Signature Algorithm: sha256WithRSAEncryption ad:ef:e4:e5:c3:41:19:40:50:f0:18:5b:17:ad:7c:d9:cc:6a: 8a:11:86:b2:36:d5:01:50:70:b7:f0:bc:fa:7d:cf:6a:b1:18: 4d:7f:26:9c:d3:15:44:74:da:3b:bf:75:64:10:a1:b2:82:4f: 6d:4b:25:e4:c5:5b:a3:bc:53:56:24:ce:36:50:8f:01:a6:9c: e0:15:8c:0e:5c:ef:7d:f2:80:d5:16:cc:56:67:6c:39:a6:8f: 8b:af:9c:93:57:40:c7:e9:5d:6b:aa:b0:8c:f5:66:ec:ed:be: ee:8a:7a:ce:a5:0c:59:3b:f5:8d:a3:6f:3a:91:f2:4d:ec:91: 82:8a:f4:3d:77:d4:c1:12:6c:e5:1c:a5:39:75:bb:91:f3:5a: 02:37:a2:08:26:5d:68:76:82:9c:8b:d7:1f:7d:c8:0a:60:ea: 21:b8:95:a8:c9:72:ac:bf:c2:2f:55:65:c4:ca:3a:57:02:57: 54:08:99:5a:93:78:c7:d5:08:db:de:83:9c:0d:36:d8:23:9f: 53:31:22:10:71:f0:f9:2d:23:d6:46:c8:a4:bc:6f:b9:a4:50: a4:6b:c4:17:c3:b7:ec:5a:1f:28:6d:4c:57:c1:04:87:cd:8b: bf:b1:83:59:1c:90:ad:e7:a3:8f:1c:91:a6:09:88:fa:81:2e: 65:2f:6a:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERBQThGM0ZCNDMyNTIw QUIzNjk0RkM4RUIzQkQxNkEwNkUyODVFM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXhrmmn/ysgo1bTQUqzimHiofgGBRab1DvaqRKvikuh5/0GDjb Aa7k+wbCvceWlOZCKoP0h4srO81GuBFb81U8vuG7V0rxOQARuW5t2N7CpIv6kxCp vQyZDmxJnFe9t9P5DuOC65WA7nHpBPr9zko8WbwT1FBCOcbUiuhFgx60RIjYqYyY SiTGdTQ/OwnDXy6wgFcSCb9bLbaO4X14qMGigo5BnZ9nRMn06TjUuid+anZ0MRB/ wqrXV+KYM4ee1aIBRAEWxc/CZ289vfCpRmlxVgStWh7bbPXUeSznMf7OEmIvHA+T QMXRuAK+GCJIaeKYhdad3X/axUrwYfhe7WJ3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2qjz+0MlIKs2lPyOs70WoG4oXj8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJxanotME1sSUtzMmxQeU9z NzBXb0c0b1hqOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AZYwDQYJKoZIhvcNAQELBQADggEBAK3v5OXDQRlAUPAYWxetfNnMaooRhrI21QFQ cLfwvPp9z2qxGE1/JpzTFUR02ju/dWQQobKCT21LJeTFW6O8U1YkzjZQjwGmnOAV jA5c733ygNUWzFZnbDmmj4uvnJNXQMfpXWuqsIz1Zuztvu6Kes6lDFk79Y2jbzqR 8k3skYKK9D131MESbOUcpTl1u5HzWgI3oggmXWh2gpyL1x99yApg6iG4lajJcqy/ wi9VZcTKOlcCV1QImVqTeMfVCNveg5wNNtgjn1MxIhBx8PktI9ZGyKS8b7mkUKRr xBfDt+xaHyhtTFfBBIfNi7+xg1kckK3no48ckaYJiPqBLmUvau0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org