$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7_RTPVRpBwiO0rUO7sUSBxeNboY.roa File: 7_RTPVRpBwiO0rUO7sUSBxeNboY.roa (raw, json) Hash identifier: xeDaRDMP1QGTh0RXgHiLS9mPAP87ji+NLYbLplCGoJY= Subject key identifier: EF:F4:53:3D:54:69:07:08:8E:D2:B5:0E:EE:C5:12:07:17:8D:6E:86 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29E4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7_RTPVRpBwiO0rUO7sUSBxeNboY.roa Signing time: Fri 01 Sep 2023 10:07:13 +0000 ROA not before: Fri 01 Sep 2023 10:07:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10724 (0x29e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EFF4533D546907088ED2B50EEEC51207178D6E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:34:bd:67:85:a2:8b:87:35:db:2e:e8:ff: cf:e4:98:ea:b8:c6:07:f6:5b:2c:c6:76:9d:c6:c6: 42:e3:62:59:80:30:4d:79:9b:bc:48:59:85:f3:39: 92:0a:48:e3:cf:31:23:54:c1:f1:4c:dc:76:58:1b: d9:60:62:cb:04:db:d4:f1:fe:96:1e:e8:3f:a5:3a: 43:97:8d:9c:49:23:32:17:52:bd:e7:23:90:a0:1e: 42:41:be:88:79:95:82:df:86:a7:ea:65:9f:a8:1b: d2:cf:a2:cb:f3:76:9a:d8:f6:33:7e:82:55:ee:d2: b5:83:4e:80:e7:31:3d:96:04:96:0f:b3:99:fd:a6: 19:c2:02:f9:77:ec:68:ad:d3:c5:0b:3e:1c:47:51: bb:3b:2a:93:77:0e:3d:01:60:98:c9:a2:b1:c3:b8: 9a:72:01:b1:53:de:0e:1f:e8:6d:af:58:2c:bd:f5: 67:1e:4c:2c:7f:aa:07:72:18:a0:4a:8f:08:72:b7: 2a:2e:08:d7:4f:ea:eb:33:bb:4f:62:a0:ba:e3:0e: fb:ad:5b:ca:fb:30:64:8c:e5:95:01:9b:7b:3a:ed: 2d:a6:b6:d8:d8:be:77:3c:ce:9c:dc:af:da:66:7b: 8b:3b:ed:65:07:13:00:e3:44:88:8c:91:20:33:3b: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F4:53:3D:54:69:07:08:8E:D2:B5:0E:EE:C5:12:07:17:8D:6E:86 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7_RTPVRpBwiO0rUO7sUSBxeNboY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.100.0/22 Signature Algorithm: sha256WithRSAEncryption a4:1b:b0:25:cb:90:e5:a4:2b:01:72:76:50:c3:24:e4:c5:90: 6e:7a:4f:af:b5:3f:36:45:9e:38:3d:3c:07:75:f9:6b:e4:8c: 81:08:51:93:77:d1:9b:84:3e:94:18:bd:8a:78:79:23:39:9a: 8d:43:32:4c:00:ef:c5:0f:a3:65:f2:71:b2:c0:8f:1e:b2:4c: 77:1a:a2:ae:82:14:c3:1d:51:c1:1f:0f:3d:76:45:77:33:fe: f9:48:c9:c3:54:4c:02:40:a9:38:d5:cc:6b:28:2a:f5:0a:c4: e9:7d:f6:5d:12:c4:d0:c8:f7:e8:9b:69:84:d9:02:e6:a0:78: b4:5d:ee:75:86:9c:78:64:9d:95:f0:60:d4:81:ef:c1:7c:3d: eb:3d:26:a2:43:e6:21:04:e6:b4:89:25:28:9f:71:58:47:97: 20:bc:68:4b:f4:a6:6b:2c:11:36:c7:68:de:a2:6d:c2:7e:66: 9f:d5:ab:69:01:aa:72:5c:75:34:f3:f5:c1:85:ab:fe:25:78: de:e4:55:06:b5:72:7a:ce:6f:96:02:ac:bb:b6:57:5e:b2:21: 44:dd:59:f9:b5:f8:28:4e:7b:08:7f:9e:4e:b6:96:84:75:43: 3b:bf:1b:e4:35:5d:54:c8:6e:e1:67:25:45:56:8d:9a:9b:02: 47:62:25:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVGRjQ1MzNENTQ2OTA3 MDg4RUQyQjUwRUVFQzUxMjA3MTc4RDZFODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7yzS9Z4Wii4c12y7o/8/kmOq4xgf2WyzGdp3GxkLjYlmAME15 m7xIWYXzOZIKSOPPMSNUwfFM3HZYG9lgYssE29Tx/pYe6D+lOkOXjZxJIzIXUr3n I5CgHkJBvoh5lYLfhqfqZZ+oG9LPosvzdprY9jN+glXu0rWDToDnMT2WBJYPs5n9 phnCAvl37Git08ULPhxHUbs7KpN3Dj0BYJjJorHDuJpyAbFT3g4f6G2vWCy99Wce TCx/qgdyGKBKjwhytyouCNdP6uszu09ioLrjDvutW8r7MGSM5ZUBm3s67S2mttjY vnc8zpzcr9pme4s77WUHEwDjRIiMkSAzO+WvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7/RTPVRpBwiO0rUO7sUSBxeNboYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdfUlRQVlJwQndpTzByVU83 c1VTQnhlTmJvWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6GQwDQYJKoZIhvcNAQELBQADggEBAKQbsCXLkOWkKwFydlDDJOTFkG56T6+1PzZF njg9PAd1+WvkjIEIUZN30ZuEPpQYvYp4eSM5mo1DMkwA78UPo2XycbLAjx6yTHca oq6CFMMdUcEfDz12RXcz/vlIycNUTAJAqTjVzGsoKvUKxOl99l0SxNDI9+ibaYTZ AuageLRd7nWGnHhknZXwYNSB78F8Pes9JqJD5iEE5rSJJSifcVhHlyC8aEv0pmss ETbHaN6ibcJ+Zp/Vq2kBqnJcdTTz9cGFq/4leN7kVQa1cnrOb5YCrLu2V16yIUTd Wfm1+ChOewh/nk62loR1Qzu/G+Q1XVTIbuFnJUVWjZqbAkdiJVg= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org