$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-vU7jEsnVwnTgozz2LR1JAexRw.roa File: 5-vU7jEsnVwnTgozz2LR1JAexRw.roa (raw, json) Hash identifier: 7VLL8pZTV87gZ9XwxbIRvb7LcGQPb52wSSsjx5ZRhlk= Subject key identifier: E7:EB:D4:EE:31:2C:9D:5C:27:4E:0A:33:CF:62:D1:D4:90:1E:C5:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2890 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-vU7jEsnVwnTgozz2LR1JAexRw.roa Signing time: Fri 01 Sep 2023 10:05:30 +0000 ROA not before: Fri 01 Sep 2023 10:05:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10384 (0x2890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E7EBD4EE312C9D5C274E0A33CF62D1D4901EC51C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:e3:b0:45:96:ac:6a:a7:b8:2c:2e:c5:c9: 26:ca:08:a6:ae:7e:fc:c8:83:c0:b2:26:f5:89:7a: f6:a0:99:20:d9:09:a2:60:db:dc:a5:84:4b:2a:84: 93:ab:7d:26:26:6f:bd:68:8c:9b:61:57:68:e6:e4: cb:98:ed:d2:b4:31:7b:9a:75:ab:b3:59:ff:48:bd: 6d:20:7e:b5:61:64:35:3a:7f:86:80:4d:c9:49:ad: d6:34:35:93:87:b2:a2:63:57:4e:52:1d:d4:49:f2: 24:99:03:31:93:a9:28:a6:39:b3:55:cf:ed:cb:89: 7a:e9:ac:2d:20:58:de:ff:39:2c:91:08:78:ea:f3: 36:b7:b5:d1:67:a2:f4:38:04:19:56:1b:b5:ea:4e: 5d:b5:3b:98:cb:76:11:db:b3:4c:74:64:db:c5:dc: 8a:28:bd:ee:0e:ba:33:42:89:5a:70:a6:e5:e8:e7: 26:f2:86:bc:ad:2f:a4:ff:c2:2a:d7:4a:dd:b0:46: 1c:b5:e5:e2:c3:19:05:0d:45:41:0d:cf:16:a6:92: 64:c8:33:89:8f:f2:75:f7:90:41:e0:e3:5d:cc:26: 13:8f:80:6d:27:ec:41:1b:f0:c9:02:4b:3c:2f:aa: 3a:8d:0a:85:96:db:a6:c1:a4:44:26:ba:a2:f8:08: 9e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EB:D4:EE:31:2C:9D:5C:27:4E:0A:33:CF:62:D1:D4:90:1E:C5:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-vU7jEsnVwnTgozz2LR1JAexRw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:fb:01:a8:15:22:90:85:9b:e8:75:42:48:c7:5b:dc:ab:ef: da:81:20:18:a2:3d:6e:26:46:dd:9d:48:54:7c:29:77:67:08: 6e:ef:33:39:ae:92:d6:f9:88:4a:c4:23:83:aa:38:ed:88:a5: 9a:db:59:77:6d:17:f3:9e:06:c0:bb:93:e7:cb:8b:5e:91:06: a7:c8:f7:eb:33:fd:22:4b:da:0a:19:b7:25:97:92:7e:a2:66: e5:24:86:22:37:a9:da:0e:06:a0:29:31:72:27:68:54:cb:25: b5:e8:f4:4c:e1:8f:17:bf:d1:64:d8:fe:16:e0:ea:70:84:b3: fb:16:33:fb:a5:8e:29:93:56:8f:76:0d:c5:23:df:5f:02:bb: 0b:36:e6:4d:59:e2:e8:cf:7f:e2:35:a0:d8:2a:35:e3:da:a2: 77:db:da:0a:39:66:33:82:bf:63:54:de:1e:f7:64:f5:d7:9e: 9c:94:43:b3:63:51:62:bc:f4:b2:12:b4:54:62:ee:2c:a6:de: 0c:e0:72:69:2c:5d:09:c9:7b:3d:8e:b3:74:29:84:c3:f4:56: 19:4a:b7:07:2f:ed:33:31:0d:98:20:6f:61:9a:4a:c3:3f:e1: 80:17:ff:91:ba:44:a7:f2:c9:40:af:0a:d6:27:37:09:da:f0: a4:2a:36:ed -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICKJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU3RUJENEVFMzEyQzlE NUMyNzRFMEEzM0NGNjJEMUQ0OTAxRUM1MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDuuOwRZasaqe4LC7FySbKCKaufvzIg8CyJvWJevagmSDZCaJg 29ylhEsqhJOrfSYmb71ojJthV2jm5MuY7dK0MXuadauzWf9IvW0gfrVhZDU6f4aA TclJrdY0NZOHsqJjV05SHdRJ8iSZAzGTqSimObNVz+3LiXrprC0gWN7/OSyRCHjq 8za3tdFnovQ4BBlWG7XqTl21O5jLdhHbs0x0ZNvF3Ioove4OujNCiVpwpuXo5yby hrytL6T/wirXSt2wRhy15eLDGQUNRUENzxamkmTIM4mP8nX3kEHg413MJhOPgG0n 7EEb8MkCSzwvqjqNCoWW26bBpEQmuqL4CJ4bAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU5+vU7jEsnVwnTgozz2LR1JAexRwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzUtdlU3akVzblZ3blRnb3p6 MkxSMUpBZXhSdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBq ATANBgkqhkiG9w0BAQsFAAOCAQEAP/sBqBUikIWb6HVCSMdb3Kvv2oEgGKI9biZG 3Z1IVHwpd2cIbu8zOa6S1vmISsQjg6o47YilmttZd20X854GwLuT58uLXpEGp8j3 6zP9IkvaChm3JZeSfqJm5SSGIjep2g4GoCkxcidoVMsltej0TOGPF7/RZNj+FuDq cISz+xYz+6WOKZNWj3YNxSPfXwK7CzbmTVni6M9/4jWg2Co149qid9vaCjlmM4K/ Y1TeHvdk9deenJRDs2NRYrz0shK0VGLuLKbeDOByaSxdCcl7PY6zdCmEw/RWGUq3 By/tMzENmCBvYZpKwz/hgBf/kbpEp/LJQK8K1ic3CdrwpCo27Q== -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org