$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa File: 6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa (raw, json) Hash identifier: gjwJTY9EQOCALXj07Es32zF1+sq1e8yauROf7rnRy6U= Subject key identifier: E9:4E:71:CC:6C:37:CF:FD:70:86:A0:21:F2:F9:66:05:0D:12:4D:9F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2916 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa Signing time: Fri 01 Sep 2023 10:06:08 +0000 ROA not before: Fri 01 Sep 2023 10:06:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10518 (0x2916) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E94E71CC6C37CFFD7086A021F2F966050D124D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:c9:d7:d8:73:66:fc:32:57:30:7c:f1:4c: eb:29:70:1e:95:e9:d1:49:bb:bc:00:fc:27:22:18: f0:c1:a0:bc:13:66:b0:e6:ac:cc:fc:c4:6d:05:b4: dc:79:92:fe:94:b9:c4:36:3b:b4:98:68:1a:a4:85: 2e:3b:ed:57:83:36:cb:20:71:10:a1:a5:45:40:bd: cd:73:03:9d:6e:b8:0a:5f:bf:5c:ba:d2:c0:f9:0b: 42:05:8d:73:d8:f4:7b:a4:c4:7f:cf:29:d0:f2:c4: 62:11:a7:15:cc:44:73:2a:60:be:b7:cf:56:37:71: 7f:f5:eb:7c:53:6d:81:aa:d5:09:d5:65:83:1a:de: 5e:f4:dc:db:46:ad:a1:0a:47:74:0b:9e:34:7b:f2: 72:b7:34:ae:78:1e:88:ad:c6:f0:51:80:e0:e9:fa: b9:4d:88:fc:18:d5:67:54:96:09:dc:95:15:d7:e9: 9a:d9:43:50:a8:08:f7:5b:4d:33:44:eb:9b:92:93: bf:fd:a3:4b:a5:ac:f2:76:07:b8:24:30:6d:cf:0b: 44:0d:0b:37:51:d8:87:13:e8:96:f7:06:52:d4:f5: 44:0e:1d:2c:e0:5e:37:9d:4c:77:88:2a:c3:ea:15: 2d:f1:d8:a0:d4:9b:96:10:71:7a:b7:37:fe:bb:46: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4E:71:CC:6C:37:CF:FD:70:86:A0:21:F2:F9:66:05:0D:12:4D:9F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.248.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:f1:16:70:40:b9:1b:8c:00:1c:f9:da:5d:04:7f:b5:ca:b3: 22:cd:68:f9:f2:a3:07:ac:4c:a2:8d:20:cf:bf:8a:47:34:c4: ae:2b:af:b2:69:a2:be:3e:ed:cd:02:69:34:d3:1d:1d:80:2a: 89:34:c7:e0:9c:63:1b:44:90:4a:f8:e4:76:a2:3d:b6:2f:86: f5:14:91:13:90:64:00:c7:cb:22:00:e7:29:01:83:69:4c:f4: a0:84:04:6a:a8:8a:b9:06:c1:ad:e7:38:fc:5f:ca:f3:9d:af: 5a:70:5e:cb:88:f9:06:1d:25:87:c8:40:3e:1f:fa:f9:d2:e5: 86:46:48:57:9c:19:25:b1:da:51:b4:79:6d:04:94:09:fc:62: ba:94:3c:bd:ee:3a:b8:18:38:b1:ba:2b:93:c0:1d:c1:9c:27: bb:4a:c4:c6:c7:7c:16:f6:47:dc:29:72:f8:60:51:2d:8f:06: 10:61:03:00:23:41:0f:4f:ea:a5:42:83:88:be:26:2f:1a:29: d5:79:7c:74:8f:cf:1a:ca:98:bf:89:58:1e:cb:68:d8:51:57: 0e:49:1f:21:f4:6c:f2:13:0b:c2:02:c5:85:37:02:4d:42:27: a1:28:28:de:d1:a8:09:3d:46:5c:87:2a:3d:14:25:9d:bb:e2: 26:b2:72:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU5NEU3MUNDNkMzN0NG RkQ3MDg2QTAyMUYyRjk2NjA1MEQxMjREOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjs8nX2HNm/DJXMHzxTOspcB6V6dFJu7wA/CciGPDBoLwTZrDm rMz8xG0FtNx5kv6UucQ2O7SYaBqkhS477VeDNssgcRChpUVAvc1zA51uuApfv1y6 0sD5C0IFjXPY9HukxH/PKdDyxGIRpxXMRHMqYL63z1Y3cX/163xTbYGq1QnVZYMa 3l703NtGraEKR3QLnjR78nK3NK54HoitxvBRgODp+rlNiPwY1WdUlgnclRXX6ZrZ Q1CoCPdbTTNE65uSk7/9o0ulrPJ2B7gkMG3PC0QNCzdR2IcT6Jb3BlLU9UQOHSzg XjedTHeIKsPqFS3x2KDUm5YQcXq3N/67RmxvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6U5xzGw3z/1whqAh8vlmBQ0STZ8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZVNXh6R3czel8xd2hxQWg4 dmxtQlEwU1RaOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfgwDQYJKoZIhvcNAQELBQADggEBAAvxFnBAuRuMABz52l0Ef7XKsyLNaPnyowes TKKNIM+/ikc0xK4rr7Jpor4+7c0CaTTTHR2AKok0x+CcYxtEkEr45HaiPbYvhvUU kROQZADHyyIA5ykBg2lM9KCEBGqoirkGwa3nOPxfyvOdr1pwXsuI+QYdJYfIQD4f +vnS5YZGSFecGSWx2lG0eW0ElAn8YrqUPL3uOrgYOLG6K5PAHcGcJ7tKxMbHfBb2 R9wpcvhgUS2PBhBhAwAjQQ9P6qVCg4i+Ji8aKdV5fHSPzxrKmL+JWB7LaNhRVw5J HyH0bPITC8ICxYU3Ak1CJ6EoKN7RqAk9RlyHKj0UJZ274iaycns= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org