$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72iSO-dyKKepTlcYXM94VGjDwaU.roa File: 72iSO-dyKKepTlcYXM94VGjDwaU.roa (raw, json) Hash identifier: Mi1DTXXByoBbbUFB+zQVB0f6tAvo8Ns+I5fJM40+B9Q= Subject key identifier: EF:68:92:3B:E7:72:28:A7:A9:4E:57:18:5C:CF:78:54:68:C3:C1:A5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2902 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72iSO-dyKKepTlcYXM94VGjDwaU.roa Signing time: Fri 01 Sep 2023 10:06:03 +0000 ROA not before: Fri 01 Sep 2023 10:06:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10498 (0x2902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EF68923BE77228A7A94E57185CCF785468C3C1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:c4:dc:ff:68:3e:4a:d8:ae:1e:8d:8c:cd: 14:85:9e:2b:b2:68:8f:67:b1:b6:a9:75:e8:77:dc: c6:90:fb:a0:09:c1:1d:5d:a7:55:08:84:ef:06:68: 32:e4:5b:18:ff:3a:77:1f:1b:93:ec:1e:5f:77:35: f4:98:12:9b:fa:0e:70:b0:ce:12:0d:48:59:02:fc: 3d:65:6b:e4:53:a6:84:8d:95:10:d8:d0:8f:14:f9: 47:57:24:05:c1:d5:be:04:2a:ea:5a:d2:05:b9:b9: 52:e2:35:d5:6d:b4:93:c4:ca:cc:44:22:91:23:96: 76:66:c4:2f:e8:5a:03:4c:ef:af:84:f8:95:c7:6c: 70:ed:da:36:4c:dd:7d:ff:7b:b1:18:52:64:72:ed: c2:76:29:6c:b6:66:45:b4:80:d1:d6:dd:84:25:99: 78:28:29:2d:37:55:df:39:81:d7:84:d0:15:86:71: 8a:6a:3b:be:d8:05:2f:3f:18:66:66:55:59:13:ae: ea:d3:a7:65:18:71:f9:00:2e:4d:93:9d:49:83:36: 04:8e:4f:2c:13:5d:89:0d:c4:8c:e0:54:e0:83:9b: 25:2b:32:c8:5c:21:4d:3a:48:c2:e3:23:f1:8f:aa: 72:7b:74:f9:40:81:a6:30:f2:80:f7:52:29:f2:3f: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:68:92:3B:E7:72:28:A7:A9:4E:57:18:5C:CF:78:54:68:C3:C1:A5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72iSO-dyKKepTlcYXM94VGjDwaU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.168.0/21 Signature Algorithm: sha256WithRSAEncryption 12:8e:fb:55:81:04:04:3f:bd:37:05:f7:c1:0b:e1:f6:53:3e: 1b:69:12:ba:ef:04:22:1f:3a:e9:16:44:95:2a:5c:2d:4e:f9: 13:27:b7:64:e6:de:bb:47:3b:39:38:d0:b8:6a:aa:64:c0:1a: b9:23:98:40:42:57:c0:8f:df:4f:15:5c:56:50:97:aa:1f:e6: d4:2b:f9:f1:a5:b8:07:b7:95:1c:92:9d:e2:51:86:ce:14:94: d5:9a:1f:71:94:7b:ea:b3:ed:86:38:3c:d5:a9:d8:93:d8:2b: c0:36:c9:e6:be:94:fd:d1:8a:15:48:72:0a:b5:b6:44:a9:a4: 32:ee:d3:79:4c:76:c8:13:24:85:bc:3d:d8:31:ce:c3:f5:9a: 65:ff:f4:b8:27:b6:63:90:cb:65:1a:72:4b:88:88:43:e8:1b: 94:1e:1c:2a:05:41:df:dd:bf:a0:55:17:0e:db:fb:c0:7b:94: a9:48:d4:98:2a:3d:8b:c4:9a:3f:49:2c:94:1d:b7:bd:92:e4: 04:6d:fa:ea:66:31:a0:93:8e:e9:86:e3:70:1f:75:62:15:f5: 4c:91:79:4d:ff:a6:2d:87:78:fb:60:9d:be:e0:e0:45:47:c7: dc:88:89:1e:47:26:7a:9f:5e:41:b5:6f:9b:ea:af:f6:f5:56: 72:65:bd:40 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVGNjg5MjNCRTc3MjI4 QTdBOTRFNTcxODVDQ0Y3ODU0NjhDM0MxQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJncTc/2g+StiuHo2MzRSFniuyaI9nsbapdeh33MaQ+6AJwR1d p1UIhO8GaDLkWxj/OncfG5PsHl93NfSYEpv6DnCwzhINSFkC/D1la+RTpoSNlRDY 0I8U+UdXJAXB1b4EKupa0gW5uVLiNdVttJPEysxEIpEjlnZmxC/oWgNM76+E+JXH bHDt2jZM3X3/e7EYUmRy7cJ2KWy2ZkW0gNHW3YQlmXgoKS03Vd85gdeE0BWGcYpq O77YBS8/GGZmVVkTrurTp2UYcfkALk2TnUmDNgSOTywTXYkNxIzgVOCDmyUrMshc IU06SMLjI/GPqnJ7dPlAgaYw8oD3UinyP5JlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU72iSO+dyKKepTlcYXM94VGjDwaUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzcyaVNPLWR5S0tlcFRsY1lY TTk0VkdqRHdhVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6agwDQYJKoZIhvcNAQELBQADggEBABKO+1WBBAQ/vTcF98EL4fZTPhtpErrvBCIf OukWRJUqXC1O+RMnt2Tm3rtHOzk40LhqqmTAGrkjmEBCV8CP308VXFZQl6of5tQr +fGluAe3lRySneJRhs4UlNWaH3GUe+qz7YY4PNWp2JPYK8A2yea+lP3RihVIcgq1 tkSppDLu03lMdsgTJIW8PdgxzsP1mmX/9LgntmOQy2UackuIiEPoG5QeHCoFQd/d v6BVFw7b+8B7lKlI1JgqPYvEmj9JLJQdt72S5ARt+upmMaCTjumG43AfdWIV9UyR eU3/pi2HePtgnb7g4EVHx9yIiR5HJnqfXkG1b5vqr/b1VnJlvUA= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:29 2024 by rpki-client on console-fra.rpki-client.org