$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/54gPM0kcozPSOf772oPxII4HCgU.roa File: 54gPM0kcozPSOf772oPxII4HCgU.roa (raw, json) Hash identifier: SARB8PiVkb8raEfNhzR/MNVHw4O7tinNR5YLwX10xg4= Subject key identifier: E7:88:0F:33:49:1C:A3:33:D2:39:FE:FB:DA:83:F1:20:8E:07:0A:05 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2952 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/54gPM0kcozPSOf772oPxII4HCgU.roa Signing time: Fri 01 Sep 2023 10:06:23 +0000 ROA not before: Fri 01 Sep 2023 10:06:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00:ff03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10578 (0x2952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E7880F33491CA333D239FEFBDA83F1208E070A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:cb:9c:32:63:67:f7:6a:7b:af:c1:4e:91: a9:87:4b:2a:d1:af:c7:1c:d0:5a:f4:b5:62:cf:98: 43:df:26:64:91:10:5b:c1:db:02:7e:5b:07:78:08: fe:10:ed:01:48:66:13:d9:ef:9d:ad:01:17:ad:45: 81:4f:98:be:5c:c5:52:03:07:42:58:8c:c8:96:c2: 23:a9:c6:44:27:c7:f8:84:b7:be:d4:8d:2f:bb:2d: 0e:26:51:ce:72:ee:c7:da:92:cf:f4:e0:50:3a:59: 7a:53:ca:9c:0f:d6:0f:72:ae:34:9d:b0:47:6c:ab: c0:d6:1c:12:21:e7:d3:ca:4d:b7:d1:74:2c:b7:fe: d7:b1:39:f9:da:12:c4:05:ce:15:3b:2d:d8:0f:c0: 57:72:67:fe:d7:b1:74:3a:c0:6f:2e:95:e0:d3:df: e9:03:88:74:b1:be:6d:a8:2d:d5:02:0b:81:d5:5d: 1a:f2:2a:19:65:2f:12:c3:d3:aa:e7:15:52:a8:c7: 7f:13:10:3c:17:cb:1e:b6:3e:17:5c:15:f0:04:02: 36:01:f9:81:e1:52:84:1a:0d:db:b3:e0:5d:15:9e: 40:a1:0c:24:7d:79:90:fd:c2:01:23:e2:06:69:69: 04:7d:69:1a:bb:9e:5d:76:a8:c5:cb:5d:2c:7b:95: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:88:0F:33:49:1C:A3:33:D2:39:FE:FB:DA:83:F1:20:8E:07:0A:05 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/54gPM0kcozPSOf772oPxII4HCgU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff03::/48 Signature Algorithm: sha256WithRSAEncryption 02:e1:08:36:3c:3f:38:5d:49:90:37:64:a9:d3:c2:8b:68:e0: 1a:a8:a9:da:bf:79:5c:ce:3b:a6:62:35:00:35:f8:f1:62:f7: 40:14:96:2d:78:5b:de:4e:22:26:44:49:9e:86:bd:4a:4a:c1: a9:2a:c9:d3:a1:8e:68:5f:18:37:83:9b:9a:15:cb:e7:4d:ea: 66:6a:7d:89:d2:35:20:15:7f:98:48:cc:7d:2e:f8:a7:5c:5d: 57:5d:0d:6d:9f:fa:b1:c1:ab:73:ba:6a:f6:52:31:33:56:71: eb:fc:11:59:c0:89:88:73:5e:ca:29:9f:55:db:34:7b:3a:25: 06:e8:45:fc:92:d9:14:af:97:1d:38:df:05:79:e0:2e:c0:51: 80:9c:9d:c9:7b:e2:dd:74:a1:61:8d:ef:12:7c:db:4a:b4:01: 77:2d:64:91:49:aa:83:cd:2e:49:23:05:8c:f4:fe:a9:2d:26: 97:a5:06:17:0e:a4:85:45:51:ac:2a:eb:f0:43:92:1e:6f:b4: 19:d2:3e:f8:7a:ef:87:6c:a2:ed:ec:2f:56:fc:b6:c1:3a:22: 94:69:23:55:b7:95:c7:d9:79:11:b7:c7:4d:01:75:83:ad:e8: a7:b7:07:05:cf:b8:c6:ea:97:1e:26:31:cc:e1:f1:ca:be:91: 7b:50:cc:a7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICKVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU3ODgwRjMzNDkxQ0Ez MzNEMjM5RkVGQkRBODNGMTIwOEUwNzBBMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC008ucMmNn92p7r8FOkamHSyrRr8cc0Fr0tWLPmEPfJmSREFvB 2wJ+Wwd4CP4Q7QFIZhPZ752tARetRYFPmL5cxVIDB0JYjMiWwiOpxkQnx/iEt77U jS+7LQ4mUc5y7sfaks/04FA6WXpTypwP1g9yrjSdsEdsq8DWHBIh59PKTbfRdCy3 /texOfnaEsQFzhU7LdgPwFdyZ/7XsXQ6wG8uleDT3+kDiHSxvm2oLdUCC4HVXRry KhllLxLD06rnFVKox38TEDwXyx62PhdcFfAEAjYB+YHhUoQaDduz4F0VnkChDCR9 eZD9wgEj4gZpaQR9aRq7nl12qMXLXSx7lRJfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU54gPM0kcozPSOf772oPxII4HCgUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzU0Z1BNMGtjb3pQU09mNzcy b1B4SUk0SENnVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wMwDQYJKoZIhvcNAQELBQADggEBAALhCDY8PzhdSZA3ZKnTwoto4Bqoqdq/ eVzOO6ZiNQA1+PFi90AUli14W95OIiZESZ6GvUpKwakqydOhjmhfGDeDm5oVy+dN 6mZqfYnSNSAVf5hIzH0u+KdcXVddDW2f+rHBq3O6avZSMTNWcev8EVnAiYhzXsop n1XbNHs6JQboRfyS2RSvlx043wV54C7AUYCcncl74t10oWGN7xJ820q0AXctZJFJ qoPNLkkjBYz0/qktJpelBhcOpIVFUawq6/BDkh5vtBnSPvh674dsou3sL1b8tsE6 IpRpI1W3lcfZeRG3x00BdYOt6Ke3BwXPuMbqlx4mMczh8cq+kXtQzKc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org