$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa File: 8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa (raw, json) Hash identifier: hFRZJZ9Fjd9gGNg6NSMFgpHpByms4U69N0WTXNaFRc4= Subject key identifier: F1:96:07:D8:C3:94:38:FC:82:0D:B4:F7:56:EF:BA:C0:D4:E3:25:E1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AA4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa Signing time: Fri 01 Sep 2023 10:08:08 +0000 ROA not before: Fri 01 Sep 2023 10:08:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10916 (0x2aa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F19607D8C39438FC820DB4F756EFBAC0D4E325E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:39:18:1e:ee:68:51:3e:a2:62:61:b7:a8: 76:f2:c9:b7:8d:67:ec:74:9c:c4:6d:51:6f:86:eb: 36:bd:01:39:42:9f:7c:30:e1:5a:db:c8:e3:7e:5a: 84:46:60:11:9b:bb:f4:2a:75:47:ef:7b:33:b9:0e: 9c:b5:96:70:a8:e1:7d:27:20:38:fb:26:37:4b:fb: 77:3a:72:e6:41:c9:a3:9c:a2:bf:fe:d7:d9:47:53: 52:c0:5a:f3:72:0d:07:90:a6:a5:0d:6c:16:d1:e3: 0a:16:62:29:5c:4b:88:dd:37:82:7f:37:fe:69:9d: 86:aa:d0:e6:df:87:fe:0c:df:51:f6:64:72:51:2b: 81:26:b8:e7:c5:74:e4:e3:66:07:9d:10:32:be:ff: 62:2f:53:e7:67:11:f0:68:02:b9:0b:f9:eb:46:1b: 15:4f:d9:50:10:86:7a:af:50:b6:a6:40:5a:9c:81: a9:fc:c1:3a:35:c5:c6:dc:68:63:0f:81:df:be:28: d1:f9:fa:81:b4:94:f9:26:1c:1f:0c:84:9d:c7:20: 50:bd:44:27:8d:fa:99:bf:b5:5c:1c:31:58:35:4d: 88:f0:a4:ca:2e:17:b9:36:48:e8:1f:23:cf:15:e9: 22:25:49:c9:d2:40:78:30:14:59:0c:de:f2:d5:5e: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:96:07:D8:C3:94:38:FC:82:0D:B4:F7:56:EF:BA:C0:D4:E3:25:E1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.72.0/22 Signature Algorithm: sha256WithRSAEncryption 55:a5:6c:12:08:37:99:e2:3d:22:40:f7:56:16:d1:6b:a7:bd: 4b:f0:75:b2:32:70:44:00:12:7b:0b:7d:ee:33:20:57:a2:13: 4d:2e:2b:36:eb:6e:d9:d6:7e:7a:24:73:33:f4:64:f1:84:b6: 01:b9:f6:78:76:79:1d:57:41:e8:90:d9:bd:2c:ab:50:91:e5: e6:e1:ca:2d:a5:2e:10:ae:cc:7a:3e:0a:8d:10:e7:7a:81:4e: 91:8c:25:87:34:c9:25:ba:03:54:d3:50:27:ac:f6:62:80:5b: 95:c0:74:e6:95:97:ba:d9:41:f9:87:18:6e:e4:58:9f:b4:60: 9c:cf:6e:92:80:99:85:f3:85:b4:63:4e:a9:b4:d0:5c:1f:1a: 9f:ca:7f:2d:cd:96:42:f5:7e:f3:26:63:ef:c9:1a:3e:2c:93: a9:e7:cb:75:e8:dc:10:b3:dd:5a:43:10:56:79:1e:ff:54:ed: 78:f1:ff:b6:fb:9d:71:13:e5:aa:ac:91:63:01:1e:91:94:46: 22:79:32:ae:8a:19:71:07:be:7f:c1:fa:47:6c:ad:c3:90:30: 3f:3e:3c:c6:50:10:ee:a7:f4:6a:ca:b5:60:a4:5c:bf:bd:13: af:b7:61:ad:29:03:04:7d:9b:e1:92:db:f4:bc:fa:e0:f5:0e: e5:8d:f3:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxOTYwN0Q4QzM5NDM4 RkM4MjBEQjRGNzU2RUZCQUMwRDRFMzI1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcvjkYHu5oUT6iYmG3qHbyybeNZ+x0nMRtUW+G6za9ATlCn3ww 4VrbyON+WoRGYBGbu/QqdUfvezO5Dpy1lnCo4X0nIDj7JjdL+3c6cuZByaOcor/+ 19lHU1LAWvNyDQeQpqUNbBbR4woWYilcS4jdN4J/N/5pnYaq0Obfh/4M31H2ZHJR K4EmuOfFdOTjZgedEDK+/2IvU+dnEfBoArkL+etGGxVP2VAQhnqvULamQFqcgan8 wTo1xcbcaGMPgd++KNH5+oG0lPkmHB8MhJ3HIFC9RCeN+pm/tVwcMVg1TYjwpMou F7k2SOgfI88V6SIlScnSQHgwFFkM3vLVXvmpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8ZYH2MOUOPyCDbT3Vu+6wNTjJeEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhaWUgyTU9VT1B5Q0RiVDNW dS02d05UakplRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6EgwDQYJKoZIhvcNAQELBQADggEBAFWlbBIIN5niPSJA91YW0WunvUvwdbIycEQA EnsLfe4zIFeiE00uKzbrbtnWfnokczP0ZPGEtgG59nh2eR1XQeiQ2b0sq1CR5ebh yi2lLhCuzHo+Co0Q53qBTpGMJYc0ySW6A1TTUCes9mKAW5XAdOaVl7rZQfmHGG7k WJ+0YJzPbpKAmYXzhbRjTqm00FwfGp/Kfy3NlkL1fvMmY+/JGj4sk6nny3Xo3BCz 3VpDEFZ5Hv9U7Xjx/7b7nXET5aqskWMBHpGURiJ5Mq6KGXEHvn/B+kdsrcOQMD8+ PMZQEO6n9GrKtWCkXL+9E6+3Ya0pAwR9m+GS2/S8+uD1DuWN81Q= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org