$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GARFQfuijaTkDnJoeEfvrnz70rM.roa File: GARFQfuijaTkDnJoeEfvrnz70rM.roa (raw, json) Hash identifier: CHiKtLVpKjkpXo8N4yxAWLc3Jbvi852pLoAnQkz1jP0= Subject key identifier: 18:04:45:41:FB:A2:8D:A4:E4:0E:72:68:78:47:EF:AE:7C:FB:D2:B3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2818 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GARFQfuijaTkDnJoeEfvrnz70rM.roa Signing time: Fri 01 Sep 2023 10:04:55 +0000 ROA not before: Fri 01 Sep 2023 10:04:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10264 (0x2818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=18044541FBA28DA4E40E72687847EFAE7CFBD2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:1a:2e:b6:c0:ec:95:25:f5:0e:45:99:6f: 29:f3:68:e3:f3:3b:91:be:b7:ad:b4:87:f3:98:38: 4c:44:26:ae:61:04:c7:b9:d5:f0:90:36:12:d9:9f: 05:68:b7:3b:25:4d:a5:78:29:d0:8a:68:95:07:ac: 71:75:7e:8f:92:56:47:74:ab:b3:14:20:de:46:1f: ab:4a:01:fe:52:be:ac:f5:d7:fd:30:d2:40:6c:21: e4:57:01:ce:da:99:f7:9a:c2:08:fd:b2:45:34:d6: 83:d9:37:f1:c3:11:5f:aa:5b:0b:f3:dc:71:1a:dc: a4:a0:6c:f9:02:07:f6:ad:bf:40:e8:a0:13:86:59: 33:b8:af:81:d6:20:ff:fb:f6:8e:63:b1:df:ee:63: d1:38:a9:33:c7:72:b6:0e:47:d1:60:21:5e:02:cb: e1:28:2f:23:3c:11:cb:dc:1d:41:02:b4:c5:bb:9f: 73:92:e2:ec:ea:de:c5:f4:78:45:36:aa:46:6a:1e: 58:2a:15:bc:f5:70:ba:b4:ba:d6:cf:19:6d:88:4a: 26:db:4d:20:76:ca:85:aa:7c:de:76:41:89:93:f9: 3e:a1:d6:b1:3c:77:63:2c:6a:81:de:6f:92:4b:19: c6:de:d1:c1:25:df:95:48:1c:c0:2f:af:fd:5b:a1: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:04:45:41:FB:A2:8D:A4:E4:0E:72:68:78:47:EF:AE:7C:FB:D2:B3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GARFQfuijaTkDnJoeEfvrnz70rM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.228.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:eb:1a:c1:7e:f9:ec:84:f6:a6:9b:28:ef:fa:78:2c:a9:5f: 22:b4:30:73:90:ce:b4:77:e3:ed:55:e5:b3:70:d6:08:f3:27: 40:c5:51:a3:cf:b2:96:1d:e8:ab:ea:13:41:a2:da:4e:f4:91: e9:42:8b:31:c1:05:c9:3f:16:84:31:3a:d0:81:0f:47:66:89: 8f:a7:64:a5:03:6b:08:02:91:33:a4:04:02:71:c2:a0:ff:64: 97:8f:f0:e7:99:bd:9b:70:56:f0:65:b7:e5:d8:2f:99:4f:99: d4:ff:68:e0:2c:2b:8c:aa:81:2b:16:fa:44:84:fa:05:21:20: 96:2e:59:d6:80:78:ca:06:75:63:c6:0d:83:d2:73:3b:cb:1a: 63:9e:ff:0b:47:f1:75:a1:af:e7:0f:c0:63:1b:d3:ca:e1:bc: 4a:5e:ac:e5:8b:9e:14:aa:0b:4a:c7:f3:8d:a1:6b:19:5c:2b: e4:bc:1d:4f:f1:c6:a2:23:b8:5e:39:ed:70:c5:06:99:39:6b: 52:24:21:ff:20:15:72:04:10:3b:2b:ca:ca:14:f0:1b:a4:72: 01:61:1b:90:de:a1:aa:9f:12:de:e7:ce:45:9c:9b:84:0d:6f: d4:c8:96:59:48:69:2d:17:03:ac:61:e9:67:6d:78:5d:06:d0: 40:f2:05:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE4MDQ0NTQxRkJBMjhE QTRFNDBFNzI2ODc4NDdFRkFFN0NGQkQyQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCV5BoutsDslSX1DkWZbynzaOPzO5G+t620h/OYOExEJq5hBMe5 1fCQNhLZnwVotzslTaV4KdCKaJUHrHF1fo+SVkd0q7MUIN5GH6tKAf5Svqz11/0w 0kBsIeRXAc7amfeawgj9skU01oPZN/HDEV+qWwvz3HEa3KSgbPkCB/atv0DooBOG WTO4r4HWIP/79o5jsd/uY9E4qTPHcrYOR9FgIV4Cy+EoLyM8EcvcHUECtMW7n3OS 4uzq3sX0eEU2qkZqHlgqFbz1cLq0utbPGW2ISibbTSB2yoWqfN52QYmT+T6h1rE8 d2MsaoHeb5JLGcbe0cEl35VIHMAvr/1boWy5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGARFQfuijaTkDnJoeEfvrnz70rMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dBUkZRZnVpamFUa0RuSm9l RWZ2cm56NzByTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6eQwDQYJKoZIhvcNAQELBQADggEBAJrrGsF++eyE9qabKO/6eCypXyK0MHOQzrR3 4+1V5bNw1gjzJ0DFUaPPspYd6KvqE0Gi2k70kelCizHBBck/FoQxOtCBD0dmiY+n ZKUDawgCkTOkBAJxwqD/ZJeP8OeZvZtwVvBlt+XYL5lPmdT/aOAsK4yqgSsW+kSE +gUhIJYuWdaAeMoGdWPGDYPSczvLGmOe/wtH8XWhr+cPwGMb08rhvEperOWLnhSq C0rH842haxlcK+S8HU/xxqIjuF457XDFBpk5a1IkIf8gFXIEEDsrysoU8BukcgFh G5DeoaqfEt7nzkWcm4QNb9TIlllIaS0XA6xh6WdteF0G0EDyBQk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org