$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa File: 4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa (raw, json) Hash identifier: TanvwGKHIPfgZwWe5rIw5M8EuRHYFxczf2sIYGqmG+I= Subject key identifier: E0:FF:2D:93:60:5A:E5:3B:3F:14:CC:17:16:AB:8F:2A:89:05:10:C5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29EE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa Signing time: Fri 01 Sep 2023 10:07:16 +0000 ROA not before: Fri 01 Sep 2023 10:07:16 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.0.0/15 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10734 (0x29ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:16 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E0FF2D93605AE53B3F14CC1716AB8F2A890510C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:f9:20:93:19:09:31:2d:0d:c8:6a:3f:84: a7:ae:01:00:f6:23:90:51:8f:45:52:3a:0d:ed:7e: 86:c0:ab:8b:5b:db:cb:5f:44:8b:2f:18:05:c5:f9: 2c:d8:d3:dc:0a:a1:39:b0:7c:f6:56:b6:0b:ef:47: a5:3d:3a:89:bf:eb:cd:24:89:a2:1a:53:d7:bd:00: 51:48:d3:b4:20:bb:2d:b1:74:9e:76:eb:3c:07:b4: 8d:2d:bc:b3:0d:c5:f0:0b:0c:ee:5e:2a:25:d2:24: 08:74:58:48:63:96:d1:bb:37:c8:95:c0:43:99:45: 06:4c:bd:4c:06:6a:5b:3b:d7:cf:75:19:3c:4d:31: da:e5:60:23:57:05:7f:0f:56:ce:61:b0:6a:7d:ba: d2:a8:d9:29:be:2c:9c:63:13:8c:d6:e3:97:71:b2: d0:bf:c5:07:2d:9e:03:9d:c1:fb:f1:92:68:cb:25: 5d:7c:fb:54:6f:20:5f:69:77:55:60:0a:35:f8:0d: 92:b3:2a:04:95:35:b1:cd:9c:65:75:de:f7:18:28: 84:31:78:c2:ae:d9:ac:78:7a:03:88:08:f5:c4:35: d5:0a:42:13:6b:d6:99:fb:d2:46:1c:c5:38:35:b9: 30:e6:e0:80:cc:15:1d:de:9f:35:c3:8b:09:09:3e: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FF:2D:93:60:5A:E5:3B:3F:14:CC:17:16:AB:8F:2A:89:05:10:C5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.0.0/15 Signature Algorithm: sha256WithRSAEncryption 04:74:8f:da:4f:57:b6:75:f3:76:0f:a1:1f:1d:77:0a:a4:ac: d0:22:30:73:00:6e:2b:67:2a:cb:ca:3f:4e:7b:f2:12:11:86: 6f:0e:4e:b8:2b:42:7f:7f:58:09:6a:6a:ab:eb:27:ee:10:e3: 45:42:8e:b6:9a:ba:a5:82:1b:b0:f0:cf:83:ed:3a:2e:cb:39: 6e:8e:6b:84:3d:48:3c:ee:e5:0c:32:1a:07:4e:21:fb:7f:4a: 9b:e7:78:ba:7a:07:60:db:b4:1a:fc:89:94:57:ce:af:15:44: 17:37:e3:e6:94:74:48:8b:84:c6:a0:6b:2f:cb:d9:c1:0d:70: f9:97:b8:39:57:0b:72:95:9b:b6:76:2b:6b:31:a4:7c:0a:01: 46:60:37:cd:56:ef:32:ab:c9:e4:8a:0f:56:a6:72:10:8e:d0: e2:fb:a5:a7:43:3e:f9:78:9f:d7:7c:d1:f0:7e:97:bb:04:07: 9c:d3:b9:f0:eb:01:dc:95:61:1d:12:18:c3:42:3e:be:6e:af: ad:20:35:6d:0c:f6:9c:be:1d:89:b1:73:99:d3:52:24:55:e0: 21:7d:0d:79:40:6c:f7:ad:e0:ec:9f:be:a1:24:9e:75:92:f9: cc:ec:06:23:b0:e4:10:ae:e6:95:c7:83:8e:44:c3:d9:94:55: aa:9f:46:28 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICKe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUwRkYyRDkzNjA1QUU1 M0IzRjE0Q0MxNzE2QUI4RjJBODkwNTEwQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB+fkgkxkJMS0NyGo/hKeuAQD2I5BRj0VSOg3tfobAq4tb28tf RIsvGAXF+SzY09wKoTmwfPZWtgvvR6U9Oom/680kiaIaU9e9AFFI07Qguy2xdJ52 6zwHtI0tvLMNxfALDO5eKiXSJAh0WEhjltG7N8iVwEOZRQZMvUwGals71891GTxN MdrlYCNXBX8PVs5hsGp9utKo2Sm+LJxjE4zW45dxstC/xQctngOdwfvxkmjLJV18 +1RvIF9pd1VgCjX4DZKzKgSVNbHNnGV13vcYKIQxeMKu2ax4egOICPXENdUKQhNr 1pn70kYcxTg1uTDm4IDMFR3enzXDiwkJPvHRAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU4P8tk2Ba5Ts/FMwXFquPKokFEMUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRQOHRrMkJhNVRzX0ZNd1hG cXVQS29rRkVNVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwF2 6DANBgkqhkiG9w0BAQsFAAOCAQEABHSP2k9XtnXzdg+hHx13CqSs0CIwcwBuK2cq y8o/TnvyEhGGbw5OuCtCf39YCWpqq+sn7hDjRUKOtpq6pYIbsPDPg+06Lss5bo5r hD1IPO7lDDIaB04h+39Km+d4unoHYNu0GvyJlFfOrxVEFzfj5pR0SIuExqBrL8vZ wQ1w+Ze4OVcLcpWbtnYrazGkfAoBRmA3zVbvMqvJ5IoPVqZyEI7Q4vulp0M++Xif 13zR8H6XuwQHnNO58OsB3JVhHRIYw0I+vm6vrSA1bQz2nL4dibFzmdNSJFXgIX0N eUBs963g7J++oSSedZL5zOwGI7DkEK7mlceDjkTD2ZRVqp9GKA== -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org