$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa File: B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa (raw, json) Hash identifier: Aedy+fhYVeYOEOabsT22nQEiEAszyxIZ741rWmZf88M= Subject key identifier: 07:F7:0A:7E:A9:48:67:75:BD:3F:9B:AF:4D:4F:CE:AC:73:55:1A:31 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2837 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa Signing time: Fri 01 Sep 2023 10:05:05 +0000 ROA not before: Fri 01 Sep 2023 10:05:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10295 (0x2837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=07F70A7EA9486775BD3F9BAF4D4FCEAC73551A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:e4:d1:98:81:db:27:ae:03:c9:dc:7a:9a: 1a:0e:e6:f3:73:e3:25:33:57:88:44:ae:9d:53:5b: a0:b3:cb:25:86:8b:ec:c6:60:73:cf:f2:ab:f8:9b: 32:ea:20:9b:00:7a:fe:95:53:12:e0:83:61:36:b8: dc:1f:60:e1:7e:46:b9:2b:57:53:9a:3f:b4:f5:5c: 39:1d:86:0c:1d:cf:31:f4:c0:d7:a3:5a:b5:0f:ad: b5:c2:61:d5:a8:a9:ff:61:ce:d6:29:3d:1c:d1:26: a1:e4:da:4e:31:93:44:07:76:3a:db:dd:1d:6b:6a: 38:cf:ec:5a:75:7b:33:b2:60:9b:0e:d0:60:67:de: e0:64:f7:e5:a1:02:42:c7:2e:30:34:87:43:64:ad: d7:85:7e:61:13:7b:08:12:41:c9:4a:54:06:06:be: f4:e2:4a:15:9e:d1:0d:fc:a4:43:32:5f:ba:c2:da: 08:6c:58:f4:bb:0a:7d:f0:5a:44:45:c1:cd:af:a7: 56:3c:9c:5f:7e:52:5e:36:e7:62:26:f6:a9:ad:3d: ec:81:11:5d:66:ab:55:dc:45:60:77:9c:a8:6a:f3: 95:5e:0c:9e:c3:fd:ac:73:60:bc:2e:03:96:bc:40: ba:a8:18:71:9d:3b:0f:50:fd:ec:c7:97:cc:37:5b: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F7:0A:7E:A9:48:67:75:BD:3F:9B:AF:4D:4F:CE:AC:73:55:1A:31 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.244.0/22 Signature Algorithm: sha256WithRSAEncryption b6:7c:c2:1a:d2:18:e4:66:d4:94:29:85:83:b1:31:32:03:00: 8d:28:07:bf:f9:a4:e5:63:cf:42:83:cc:05:55:00:93:2e:c5: 84:cd:c4:4d:b1:96:4d:aa:57:ad:a8:66:7f:7f:f7:85:a3:58: fd:75:85:3c:17:75:2c:31:44:82:d6:a3:11:27:d7:12:3b:de: 1b:57:6f:81:ce:22:2f:d8:79:38:73:81:3a:45:b0:47:57:0b: ca:e6:0d:b5:ce:af:b4:f7:4b:4f:32:b5:a5:87:41:b6:91:cf: f7:3c:30:ed:e7:0e:8b:45:a5:30:da:d5:8b:aa:01:1e:f9:78: 36:ea:82:0b:dd:71:23:15:14:d9:2b:d0:ed:c5:4a:9d:f6:63: 2e:0d:cc:35:ce:cb:a3:3b:ec:90:18:d8:73:c3:0c:2a:d6:c8: a8:f8:5f:73:3c:31:fa:4a:96:b8:2a:fb:a6:ce:a7:be:40:ba: 43:d0:43:a5:9b:4a:a7:d0:b1:f8:da:34:98:88:7f:83:f9:d4: b2:ef:db:2a:62:be:9f:63:b8:b4:49:f6:ae:a5:b3:15:23:17: 50:40:17:84:20:df:da:fd:9d:1d:b9:bf:d3:b2:35:49:dc:10: 37:52:0b:2f:6d:ac:34:4c:35:a0:f2:18:aa:b1:be:b2:80:8a: d0:47:d1:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA3RjcwQTdFQTk0ODY3 NzVCRDNGOUJBRjRENEZDRUFDNzM1NTFBMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm++TRmIHbJ64Dydx6mhoO5vNz4yUzV4hErp1TW6CzyyWGi+zG YHPP8qv4mzLqIJsAev6VUxLgg2E2uNwfYOF+RrkrV1OaP7T1XDkdhgwdzzH0wNej WrUPrbXCYdWoqf9hztYpPRzRJqHk2k4xk0QHdjrb3R1rajjP7Fp1ezOyYJsO0GBn 3uBk9+WhAkLHLjA0h0NkrdeFfmETewgSQclKVAYGvvTiShWe0Q38pEMyX7rC2ghs WPS7Cn3wWkRFwc2vp1Y8nF9+Ul4252Im9qmtPeyBEV1mq1XcRWB3nKhq85VeDJ7D /axzYLwuA5a8QLqoGHGdOw9Q/ezHl8w3W1GNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB/cKfqlIZ3W9P5uvTU/OrHNVGjEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JfY0tmcWxJWjNXOVA1dXZU VV9PckhOVkdqRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfQwDQYJKoZIhvcNAQELBQADggEBALZ8whrSGORm1JQphYOxMTIDAI0oB7/5pOVj z0KDzAVVAJMuxYTNxE2xlk2qV62oZn9/94WjWP11hTwXdSwxRILWoxEn1xI73htX b4HOIi/YeThzgTpFsEdXC8rmDbXOr7T3S08ytaWHQbaRz/c8MO3nDotFpTDa1Yuq AR75eDbqggvdcSMVFNkr0O3FSp32Yy4NzDXOy6M77JAY2HPDDCrWyKj4X3M8MfpK lrgq+6bOp75AukPQQ6WbSqfQsfjaNJiIf4P51LLv2ypivp9juLRJ9q6lsxUjF1BA F4Qg39r9nR25v9OyNUncEDdSCy9trDRMNaDyGKqxvrKAitBH0eA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org