$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/69XZdM4L3fJjN056r6Ir-jZcFpM.roa File: 69XZdM4L3fJjN056r6Ir-jZcFpM.roa (raw, json) Hash identifier: V2EnkpgZnlqPReyKhCwPaOMAfm8FdrQG25TUI+dIGnU= Subject key identifier: EB:D5:D9:74:CE:0B:DD:F2:63:37:4E:7A:AF:A2:2B:FA:36:5C:16:93 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29D8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/69XZdM4L3fJjN056r6Ir-jZcFpM.roa Signing time: Fri 01 Sep 2023 10:07:10 +0000 ROA not before: Fri 01 Sep 2023 10:07:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00:ff06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10712 (0x29d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EBD5D974CE0BDDF263374E7AAFA22BFA365C1693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:5d:96:72:30:ca:8f:2f:c4:46:6c:ba:6e: dd:87:67:aa:bf:69:43:a4:20:27:d9:81:a0:41:58: 02:62:6f:4c:c1:07:7c:8a:2a:b3:9c:93:18:cb:33: 52:16:aa:c1:5f:9b:f0:0f:74:32:77:bf:ab:72:e2: a7:df:43:bc:f6:78:96:4c:75:d5:de:47:82:3d:47: 27:47:77:69:78:4a:d2:e3:b8:78:1a:1c:04:66:92: e1:92:ee:97:50:df:ca:30:c7:33:61:1f:b9:97:e3: 75:a5:76:e5:c8:22:d4:0a:fa:2c:b6:fb:8a:30:49: 22:3e:11:b1:dc:4d:de:bf:33:78:99:b3:e5:02:ad: e1:d7:ee:80:8e:91:53:86:93:7a:af:9b:8f:c8:2c: cb:91:56:3a:79:f8:8c:75:3b:d2:ad:c1:bc:13:59: a0:d9:7d:12:4a:50:e6:de:44:99:12:6f:ac:d3:b9: 32:57:95:90:87:d7:aa:08:24:69:eb:15:c1:a7:86: d3:a8:cf:93:a8:52:7f:2a:ba:25:d2:7b:71:31:29: 86:ae:1d:38:8a:19:6c:95:5c:9d:2b:3a:53:96:fa: cb:0b:d4:84:c7:ef:56:28:de:2e:d1:e5:c1:fc:2c: 2d:20:95:84:f8:af:bf:fd:30:f7:d5:c7:4b:39:6d: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D5:D9:74:CE:0B:DD:F2:63:37:4E:7A:AF:A2:2B:FA:36:5C:16:93 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/69XZdM4L3fJjN056r6Ir-jZcFpM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff06::/48 Signature Algorithm: sha256WithRSAEncryption 03:a4:73:e0:c1:cc:56:79:66:42:82:ac:cf:4c:cd:b6:ec:c8: a1:2b:5d:e2:13:41:0d:81:9f:97:c3:c8:7c:b6:d9:57:7e:7c: 22:86:66:68:de:7d:9e:6b:b0:0a:37:2c:01:74:ea:fb:b1:96: c3:b2:1f:c3:fb:81:6c:c2:98:9d:f7:13:8b:38:9f:40:06:c0: 50:04:8d:87:cc:92:af:a2:0c:56:af:ec:4e:ef:41:4d:80:f2: d4:09:c6:9d:ee:f9:36:b6:2c:ee:f2:c5:84:74:13:8a:d8:07: 1b:1a:0e:fa:19:0e:5c:97:26:ca:8d:9d:dc:29:1b:c0:88:67: e9:05:fd:3b:2f:71:2d:be:11:00:8b:63:3f:fc:94:31:1e:db: 02:ff:ab:9c:04:1a:d6:a7:62:56:62:5f:04:4b:76:e8:e3:c6: 64:5e:f2:a3:8e:20:c9:99:7f:be:f0:ed:07:08:2a:1b:9b:9d: 96:3e:7a:7c:33:d9:dd:69:81:6d:c3:23:6c:94:4c:cd:7e:55: ef:b3:43:ee:df:76:6c:d9:37:f6:8a:47:6b:70:97:7d:77:d9: ad:7c:b2:06:16:b3:79:d3:a7:04:10:e5:1c:fd:b7:51:a1:20: e1:03:ca:c4:57:c7:62:21:38:25:a9:63:65:d1:ef:4b:c3:e5: 2e:6d:0a:9b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICKdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCRDVEOTc0Q0UwQkRE RjI2MzM3NEU3QUFGQTIyQkZBMzY1QzE2OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr0l2WcjDKjy/ERmy6bt2HZ6q/aUOkICfZgaBBWAJib0zBB3yK KrOckxjLM1IWqsFfm/APdDJ3v6ty4qffQ7z2eJZMddXeR4I9RydHd2l4StLjuHga HARmkuGS7pdQ38owxzNhH7mX43WlduXIItQK+iy2+4owSSI+EbHcTd6/M3iZs+UC reHX7oCOkVOGk3qvm4/ILMuRVjp5+Ix1O9KtwbwTWaDZfRJKUObeRJkSb6zTuTJX lZCH16oIJGnrFcGnhtOoz5OoUn8quiXSe3ExKYauHTiKGWyVXJ0rOlOW+ssL1ITH 71Yo3i7R5cH8LC0glYT4r7/9MPfVx0s5baBJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU69XZdM4L3fJjN056r6Ir+jZcFpMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzY5WFpkTTRMM2ZKak4wNTZy NklyLWpaY0ZwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wYwDQYJKoZIhvcNAQELBQADggEBAAOkc+DBzFZ5ZkKCrM9MzbbsyKErXeIT QQ2Bn5fDyHy22Vd+fCKGZmjefZ5rsAo3LAF06vuxlsOyH8P7gWzCmJ33E4s4n0AG wFAEjYfMkq+iDFav7E7vQU2A8tQJxp3u+Ta2LO7yxYR0E4rYBxsaDvoZDlyXJsqN ndwpG8CIZ+kF/TsvcS2+EQCLYz/8lDEe2wL/q5wEGtanYlZiXwRLdujjxmRe8qOO IMmZf77w7QcIKhubnZY+enwz2d1pgW3DI2yUTM1+Ve+zQ+7fdmzZN/aKR2twl313 2a18sgYWs3nTpwQQ5Rz9t1GhIOEDysRXx2IhOCWpY2XR70vD5S5tCps= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org