$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3FigNNIjqknVGBaPubxHoL8o2HY.roa File: 3FigNNIjqknVGBaPubxHoL8o2HY.roa (raw, json) Hash identifier: trKJekaguGvH6PcWeUPQfJx/f2lF/rQ4hyTofExfIVI= Subject key identifier: DC:58:A0:34:D2:23:AA:49:D5:18:16:8F:B9:BC:47:A0:BF:28:D8:76 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29FA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3FigNNIjqknVGBaPubxHoL8o2HY.roa Signing time: Fri 01 Sep 2023 10:07:21 +0000 ROA not before: Fri 01 Sep 2023 10:07:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10746 (0x29fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DC58A034D223AA49D518168FB9BC47A0BF28D876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:d5:a8:93:08:2a:85:d1:dd:13:7f:d9:73: ed:98:08:de:f3:50:83:c5:39:94:7c:e2:39:db:2d: 56:63:48:72:c2:66:23:d7:24:b4:d1:7a:2b:0d:5f: 68:24:87:c3:64:2f:09:d1:bd:6e:fb:91:ac:43:40: 0e:fe:ac:70:9a:86:3d:8d:b4:cb:4e:de:0e:b8:5b: 55:f4:01:4e:05:99:e2:45:c3:c6:38:34:87:de:d4: 15:55:27:b9:c9:08:7d:c6:5e:30:0e:77:0d:ce:b9: 9c:09:22:de:ae:d1:45:2b:65:ce:09:29:9c:60:2c: 38:ec:de:01:64:b0:e3:ae:9a:03:4e:79:e5:39:9b: be:69:75:22:fd:9f:a3:5c:d2:a8:a2:24:37:e8:18: b5:86:da:61:d4:46:0b:77:ff:9c:b8:0a:55:19:5b: 2c:27:a5:16:ab:d6:3a:e3:17:6b:05:00:db:c4:08: 1f:cf:af:1f:af:31:b3:d0:d0:1c:3a:fb:50:f7:70: 39:92:1e:66:b6:4b:46:d0:a7:de:31:41:48:2a:dc: 6c:e3:8a:d7:03:7f:ee:c8:c7:ed:a5:6e:b3:46:f0: c8:1e:ab:26:ee:70:14:ef:98:2b:aa:e1:96:58:62: 0d:b8:8f:9b:ad:67:03:80:74:ee:56:aa:87:91:e5: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:58:A0:34:D2:23:AA:49:D5:18:16:8F:B9:BC:47:A0:BF:28:D8:76 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3FigNNIjqknVGBaPubxHoL8o2HY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.104.0/22 Signature Algorithm: sha256WithRSAEncryption 20:87:ce:1b:29:91:4a:93:98:99:3c:49:bf:49:ad:67:98:bc: 48:1b:d0:b9:b5:45:94:40:b2:1b:07:b3:7e:fe:f2:52:46:8e: a7:e4:3f:ff:64:2d:dc:6f:3e:ea:b6:3a:c0:62:a9:2a:f7:07: 9c:0d:d6:e4:3f:cb:ac:d1:d8:33:9a:4a:fb:3d:a3:15:d9:41: 16:5a:35:96:0d:9b:22:6a:46:1d:0c:c0:20:a8:e4:86:fa:d8: bd:fb:1d:df:0b:ae:d0:a4:ac:61:9d:5c:a8:f8:a5:f1:e4:ce: 0e:30:48:c4:b0:a3:fe:68:59:61:fb:6d:aa:e5:a1:fd:7e:cf: c4:df:b3:7c:0c:c3:2b:93:60:af:77:a6:44:4b:c4:1c:40:f0: 73:ce:61:54:f0:28:9d:e6:68:d6:fe:de:36:4d:e7:8a:31:09: c9:89:8a:8b:2a:e7:ed:37:e2:54:07:02:91:4a:b7:c5:ef:b5: 39:47:99:e7:86:9d:3c:34:aa:39:00:66:be:d6:d5:18:33:5e: c8:5c:a3:c0:d2:aa:c9:b0:da:55:26:65:32:e9:1a:85:6e:f3: df:86:24:d6:35:93:02:c3:6d:04:29:47:61:4c:21:55:ca:48: 9d:47:21:3c:75:b8:8f:0a:c6:c2:8e:55:7b:57:43:45:14:c7: 6e:3a:b8:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERDNThBMDM0RDIyM0FB NDlENTE4MTY4RkI5QkM0N0EwQkYyOEQ4NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP3dWokwgqhdHdE3/Zc+2YCN7zUIPFOZR84jnbLVZjSHLCZiPX JLTReisNX2gkh8NkLwnRvW77kaxDQA7+rHCahj2NtMtO3g64W1X0AU4FmeJFw8Y4 NIfe1BVVJ7nJCH3GXjAOdw3OuZwJIt6u0UUrZc4JKZxgLDjs3gFksOOumgNOeeU5 m75pdSL9n6Nc0qiiJDfoGLWG2mHURgt3/5y4ClUZWywnpRar1jrjF2sFANvECB/P rx+vMbPQ0Bw6+1D3cDmSHma2S0bQp94xQUgq3GzjitcDf+7Ix+2lbrNG8Mgeqybu cBTvmCuq4ZZYYg24j5utZwOAdO5WqoeR5SGPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3FigNNIjqknVGBaPubxHoL8o2HYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNGaWdOTklqcWtuVkdCYVB1 YnhIb0w4bzJIWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6WgwDQYJKoZIhvcNAQELBQADggEBACCHzhspkUqTmJk8Sb9JrWeYvEgb0Lm1RZRA shsHs37+8lJGjqfkP/9kLdxvPuq2OsBiqSr3B5wN1uQ/y6zR2DOaSvs9oxXZQRZa NZYNmyJqRh0MwCCo5Ib62L37Hd8LrtCkrGGdXKj4pfHkzg4wSMSwo/5oWWH7barl of1+z8Tfs3wMwyuTYK93pkRLxBxA8HPOYVTwKJ3maNb+3jZN54oxCcmJiosq5+03 4lQHApFKt8XvtTlHmeeGnTw0qjkAZr7W1RgzXshco8DSqsmw2lUmZTLpGoVu89+G JNY1kwLDbQQpR2FMIVXKSJ1HITx1uI8KxsKOVXtXQ0UUx246uEg= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org