$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa File: 5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa (raw, json) Hash identifier: pzGJVzDgKVLbXclYGVPyUuTNyUK+fP7jTvHGOEDi1bc= Subject key identifier: E4:E7:38:C7:6E:19:E5:AF:7B:6C:6D:3F:67:BC:E5:2D:60:7C:23:C2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A6A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa Signing time: Fri 01 Sep 2023 10:07:52 +0000 ROA not before: Fri 01 Sep 2023 10:07:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 103.224.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10858 (0x2a6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E4E738C76E19E5AF7B6C6D3F67BCE52D607C23C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:5d:6e:2f:83:19:dd:84:b2:4c:4f:ac:2a: 11:ab:2a:4a:e1:87:30:d5:59:82:25:fe:26:e8:ef: 67:62:72:62:06:61:c4:61:4e:1e:7f:1a:fc:10:fd: b8:99:56:2a:e4:62:43:cb:da:62:76:63:c4:a1:cd: 3d:b4:70:1b:96:50:10:8b:7c:77:2f:9b:dc:bc:73: 60:5d:81:d6:1c:7e:b8:75:ff:28:f5:90:e7:3f:e0: ee:92:ff:5a:35:8a:fe:fa:90:0f:b7:2a:6e:de:51: 8e:fa:f6:f7:2c:50:6f:84:11:dd:2e:7c:c2:12:34: e9:7c:fa:f7:42:ba:48:5a:88:2d:2e:16:ec:df:c5: 34:18:a8:a9:1e:81:6e:52:c6:06:e0:30:6a:aa:a1: 4a:18:39:dd:e1:1c:37:22:4b:9f:fd:18:ce:44:47: 97:1a:be:5b:a4:59:0b:cd:66:bf:5c:ac:a8:62:fd: c8:57:a2:2b:54:a8:24:d3:60:c9:b7:98:5d:12:9b: cc:74:33:78:74:9c:c6:cc:19:50:1d:b4:60:a8:29: 7d:33:9d:ce:f1:4b:f4:c0:3e:03:1e:f8:31:37:e0: e6:c8:dd:74:12:05:96:3d:eb:ed:12:d3:49:c4:09: 37:6d:d0:92:b7:0e:0d:0a:89:a9:76:bf:6c:e2:16: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E7:38:C7:6E:19:E5:AF:7B:6C:6D:3F:67:BC:E5:2D:60:7C:23:C2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.192.0/22 Signature Algorithm: sha256WithRSAEncryption 56:49:ef:19:3e:ed:01:35:66:d2:97:a8:bc:53:8e:d1:d2:9e: 6f:48:f9:a2:0f:f2:aa:6a:de:4e:1c:3b:35:38:d1:bc:b5:f5: 51:90:14:bc:0b:e1:b1:96:17:9c:21:66:cb:a1:ed:83:1c:65: ad:28:7c:7b:92:16:72:c7:89:aa:b3:bf:95:3e:54:46:c2:2c: 3c:17:d3:97:9b:ea:f1:0f:15:f1:1f:d9:1c:95:2c:dd:53:ac: 07:d8:1d:ab:26:20:49:79:34:c7:b9:fb:58:94:4e:14:ba:68: 63:9f:7d:63:df:b4:35:0d:a6:f6:51:a1:84:61:b7:e9:9f:26: a2:bb:d3:c8:a4:03:d1:95:3c:a6:76:1d:36:4f:60:82:b5:7a: 44:a9:2d:22:f9:f3:00:c4:8c:97:03:2d:f1:1a:92:db:a8:06: 70:8d:d3:df:6e:c2:9c:4d:fe:34:f9:23:02:6f:b6:c4:6b:98: e7:09:ee:d7:1a:d5:30:9a:01:7b:9a:32:ab:ea:21:83:d6:8a: 0b:9a:75:3d:b0:d6:ae:fa:f5:6c:f9:53:20:48:22:e5:fc:72: 1d:71:34:da:bb:17:63:89:3a:64:0c:41:f6:34:06:7a:c7:d4: f2:80:fa:13:1a:04:d0:66:19:fc:7a:27:97:00:94:fb:e7:84: 38:79:1a:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU0RTczOEM3NkUxOUU1 QUY3QjZDNkQzRjY3QkNFNTJENjA3QzIzQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5+V1uL4MZ3YSyTE+sKhGrKkrhhzDVWYIl/ibo72dicmIGYcRh Th5/GvwQ/biZVirkYkPL2mJ2Y8ShzT20cBuWUBCLfHcvm9y8c2BdgdYcfrh1/yj1 kOc/4O6S/1o1iv76kA+3Km7eUY769vcsUG+EEd0ufMISNOl8+vdCukhaiC0uFuzf xTQYqKkegW5SxgbgMGqqoUoYOd3hHDciS5/9GM5ER5cavlukWQvNZr9crKhi/chX oitUqCTTYMm3mF0Sm8x0M3h0nMbMGVAdtGCoKX0znc7xS/TAPgMe+DE34ObI3XQS BZY96+0S00nECTdt0JK3Dg0Kial2v2ziFtPfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5Oc4x24Z5a97bG0/Z7zlLWB8I8IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVPYzR4MjRaNWE5N2JHMF9a N3psTFdCOEk4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn 4MAwDQYJKoZIhvcNAQELBQADggEBAFZJ7xk+7QE1ZtKXqLxTjtHSnm9I+aIP8qpq 3k4cOzU40by19VGQFLwL4bGWF5whZsuh7YMcZa0ofHuSFnLHiaqzv5U+VEbCLDwX 05eb6vEPFfEf2RyVLN1TrAfYHasmIEl5NMe5+1iUThS6aGOffWPftDUNpvZRoYRh t+mfJqK708ikA9GVPKZ2HTZPYIK1ekSpLSL58wDEjJcDLfEaktuoBnCN099uwpxN /jT5IwJvtsRrmOcJ7tca1TCaAXuaMqvqIYPWiguadT2w1q769Wz5UyBIIuX8ch1x NNq7F2OJOmQMQfY0BnrH1PKA+hMaBNBmGfx6J5cAlPvnhDh5Goc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org