$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4zTg3Edn4g74rfjpiv4Gtbh1oBM.roa File: 4zTg3Edn4g74rfjpiv4Gtbh1oBM.roa (raw, json) Hash identifier: q7nK3NPeuFZCOY4Qjr35iy4UikABfrz1tovCGiqRwz8= Subject key identifier: E3:34:E0:DC:47:67:E2:0E:F8:AD:F8:E9:8A:FE:06:B5:B8:75:A0:13 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 317F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4zTg3Edn4g74rfjpiv4Gtbh1oBM.roa Signing time: Mon 26 Aug 2024 05:30:31 +0000 ROA not before: Mon 26 Aug 2024 05:30:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12671 (0x317f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E334E0DC4767E20EF8ADF8E98AFE06B5B875A013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:2f:24:6a:7f:31:da:d3:4f:e2:73:11:52: 00:54:d6:57:a6:5e:83:61:7d:a6:e7:67:ec:de:69: 30:de:61:1c:09:3c:e3:c7:8c:c5:91:93:0c:55:8e: 8a:a4:7a:84:8d:b6:61:cb:be:4e:de:ad:e1:0f:67: d7:9a:32:a7:3a:f9:46:23:bd:02:ab:4b:69:e2:ab: b4:7c:11:28:2a:06:39:dc:89:33:98:76:42:5a:11: 95:5f:5e:34:0a:57:3d:26:53:f8:2e:fb:0b:4c:63: c0:81:a0:ea:ce:a6:8c:95:e5:d7:98:b8:3a:e2:52: 24:51:aa:ed:6d:aa:d4:15:64:b1:d5:30:49:75:7f: 73:91:d6:02:48:28:98:76:96:1a:20:79:ef:8f:74: 6e:f6:47:15:8f:cd:cc:fe:7f:4b:29:c0:6a:8a:71: d6:05:c8:d4:b8:e6:e7:dc:59:ff:f6:19:44:77:0b: 0b:48:c0:0d:08:b4:95:7f:57:c8:d5:98:fd:db:1e: af:ee:37:5a:98:e7:21:ff:36:85:ea:8f:e2:1d:e7: ae:e6:76:35:9d:76:91:c1:6e:1d:9e:60:b3:d3:01: ee:e8:96:0c:11:01:09:df:ea:1a:72:91:70:6f:42: 76:25:28:3b:42:f7:5e:14:07:3a:9d:b8:46:00:f8: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:34:E0:DC:47:67:E2:0E:F8:AD:F8:E9:8A:FE:06:B5:B8:75:A0:13 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4zTg3Edn4g74rfjpiv4Gtbh1oBM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.156.0/22 Signature Algorithm: sha256WithRSAEncryption 54:81:01:90:f3:b1:04:39:e9:ff:41:ee:5b:80:52:21:b5:cd: ca:27:88:26:8f:5d:de:6f:3d:92:18:48:2a:6a:6d:98:4f:43: 3e:6a:3f:15:ce:94:65:dc:da:0d:1b:4a:34:ba:f6:e8:81:74: e6:9c:0f:cf:86:0a:22:51:bf:47:98:20:40:17:7c:65:9d:85: 56:7b:82:78:ad:9d:30:e0:96:84:00:6f:61:78:fd:14:6a:2e: bd:f4:52:03:b6:6d:cb:ed:b1:c3:40:f0:91:2b:b6:05:e6:b5: b2:44:80:89:cf:d3:01:1e:4a:e5:b1:4f:ab:90:df:d7:e4:c8: 5b:ce:cf:b1:09:58:64:60:5e:46:e3:51:78:28:39:a4:87:b5: f9:f9:e3:e1:4d:f9:f7:3b:45:32:54:70:02:56:60:93:dd:61: 97:c9:ef:bd:7e:85:dc:1c:6e:6a:f7:d5:11:1e:ac:48:4e:99: 01:06:c8:e5:86:df:c3:d7:e0:86:4e:22:c3:4a:55:e1:86:fe: 7a:b2:3e:6d:f5:5f:98:e2:fe:79:45:30:ee:86:9c:76:46:fa: de:db:64:a9:d6:60:79:4c:89:5b:b5:5d:bb:ca:ba:08:53:c2: 29:b4:b0:f3:e0:ff:78:fa:4c:1c:ab:87:50:02:22:5a:2e:34: 13:94:fb:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzMzRFMERDNDc2N0Uy MEVGOEFERjhFOThBRkUwNkI1Qjg3NUEwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2wi8kan8x2tNP4nMRUgBU1lemXoNhfabnZ+zeaTDeYRwJPOPH jMWRkwxVjoqkeoSNtmHLvk7ereEPZ9eaMqc6+UYjvQKrS2niq7R8ESgqBjnciTOY dkJaEZVfXjQKVz0mU/gu+wtMY8CBoOrOpoyV5deYuDriUiRRqu1tqtQVZLHVMEl1 f3OR1gJIKJh2lhogee+PdG72RxWPzcz+f0spwGqKcdYFyNS45ufcWf/2GUR3CwtI wA0ItJV/V8jVmP3bHq/uN1qY5yH/NoXqj+Id567mdjWddpHBbh2eYLPTAe7olgwR AQnf6hpykXBvQnYlKDtC914UBzqduEYA+GC1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4zTg3Edn4g74rfjpiv4Gtbh1oBMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzR6VGczRWRuNGc3NHJmanBp djRHdGJoMW9CTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AZwwDQYJKoZIhvcNAQELBQADggEBAFSBAZDzsQQ56f9B7luAUiG1zconiCaPXd5v PZIYSCpqbZhPQz5qPxXOlGXc2g0bSjS69uiBdOacD8+GCiJRv0eYIEAXfGWdhVZ7 gnitnTDgloQAb2F4/RRqLr30UgO2bcvtscNA8JErtgXmtbJEgInP0wEeSuWxT6uQ 39fkyFvOz7EJWGRgXkbjUXgoOaSHtfn54+FN+fc7RTJUcAJWYJPdYZfJ771+hdwc bmr31REerEhOmQEGyOWG38PX4IZOIsNKVeGG/nqyPm31X5ji/nlFMO6GnHZG+t7b ZKnWYHlMiVu1XbvKughTwim0sPPg/3j6TByrh1ACIlouNBOU+7g= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org