$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa File: GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa (raw, json) Hash identifier: 2+P29BDifUg2+iq24/0IgtwX6Rp4DYYqXNLJH7Fq1Cg= Subject key identifier: 18:04:B6:D4:BE:6D:A4:AD:97:9F:BE:97:72:6E:18:8C:6A:37:64:ED Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A41 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa Signing time: Fri 01 Sep 2023 10:07:40 +0000 ROA not before: Fri 01 Sep 2023 10:07:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10817 (0x2a41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:40 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1804B6D4BE6DA4AD979FBE97726E188C6A3764ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c4:f7:f6:db:1e:50:96:12:8c:31:c4:48:89: dd:43:07:64:61:20:6d:e4:03:8d:e1:01:dd:89:a7: a6:1a:93:03:2b:c9:ca:d4:a5:ae:14:d1:ee:b1:21: 69:dc:4f:65:4c:f1:f9:7f:b9:61:54:2c:78:9a:cf: 53:85:ed:2f:eb:8b:06:52:0e:3e:7a:f6:85:b9:9a: cc:63:34:57:48:1a:a3:14:49:5c:5a:52:4d:7f:ee: 7e:06:34:a9:4a:5a:b2:8f:85:94:d8:0f:aa:77:02: 53:4e:6c:ba:16:49:90:f9:52:8a:ee:39:00:5a:42: c6:13:7b:ae:2d:29:64:20:99:90:1a:08:49:91:15: d2:0a:6d:e0:ac:18:cc:1a:05:64:6d:f4:66:f2:48: f2:4a:af:d0:ce:24:08:d6:9c:1c:b1:94:0e:f9:89: 9c:ca:06:23:81:5b:8f:d5:81:34:b6:a5:4c:aa:db: 41:2c:5d:90:36:24:80:df:86:ae:0a:33:02:5d:d6: e8:93:e4:66:8c:fc:cc:6e:94:13:6e:02:0f:e8:fc: 86:d6:14:1d:35:30:bc:ad:ed:ac:35:ee:ae:6b:0e: 96:ac:06:64:d3:e3:e0:ac:b6:84:df:d1:9a:7b:e7: 6a:52:a1:de:bd:0f:be:ae:2d:da:47:72:1a:8b:74: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:04:B6:D4:BE:6D:A4:AD:97:9F:BE:97:72:6E:18:8C:6A:37:64:ED X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GAS21L5tpK2Xn76Xcm4YjGo3ZO0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.180.0/24 Signature Algorithm: sha256WithRSAEncryption 18:76:c2:34:2e:14:bd:06:e1:d4:02:c8:4e:fc:f2:3f:8a:ae: b9:fc:07:8e:d9:c9:fb:33:1f:e2:fa:b3:8b:0e:b6:45:95:c9: fd:64:4f:26:7c:ae:95:50:8d:76:53:c6:a8:3e:72:f8:e1:8f: 51:84:0f:9c:9c:99:fb:32:e7:31:99:d8:07:d9:b2:f0:55:f7: cc:26:80:4b:59:21:b8:93:fa:08:bc:93:8d:9f:fa:22:13:bc: 5e:20:0c:55:a3:47:99:35:00:10:29:11:37:ab:c7:f5:1c:ab: 51:e9:7e:97:5e:50:4c:6e:58:1d:13:8a:1b:3d:10:30:1f:d1: ef:33:f5:18:76:ff:5f:8e:63:9d:3c:11:da:0b:ad:e5:76:bc: 4b:5d:18:d3:f6:18:81:e4:5d:aa:d6:12:73:8b:f6:d4:8e:ae: 2b:d9:af:8d:2b:e1:2d:f5:ba:63:e8:a9:29:e5:31:ee:5f:5c: ee:21:77:9f:82:3e:78:49:64:ec:e2:18:e8:72:3c:0a:ca:99: 13:ad:2f:71:17:c5:48:92:d8:1f:80:a8:1d:72:0c:83:4a:b7: 4d:30:3d:78:cb:f9:d1:40:96:e2:35:d8:02:34:28:01:ea:b8: ff:0c:92:c4:91:a1:b1:76:36:60:09:87:ff:47:bf:67:00:a8: ba:46:eb:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE4MDRCNkQ0QkU2REE0 QUQ5NzlGQkU5NzcyNkUxODhDNkEzNzY0RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlxPf22x5QlhKMMcRIid1DB2RhIG3kA43hAd2Jp6YakwMrycrU pa4U0e6xIWncT2VM8fl/uWFULHiaz1OF7S/riwZSDj569oW5msxjNFdIGqMUSVxa Uk1/7n4GNKlKWrKPhZTYD6p3AlNObLoWSZD5UoruOQBaQsYTe64tKWQgmZAaCEmR FdIKbeCsGMwaBWRt9GbySPJKr9DOJAjWnByxlA75iZzKBiOBW4/VgTS2pUyq20Es XZA2JIDfhq4KMwJd1uiT5GaM/MxulBNuAg/o/IbWFB01MLyt7aw17q5rDpasBmTT 4+CstoTf0Zp752pSod69D76uLdpHchqLdGcbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGAS21L5tpK2Xn76Xcm4YjGo3ZO0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dBUzIxTDV0cEsyWG43Nlhj bTRZakdvM1pPMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AbQwDQYJKoZIhvcNAQELBQADggEBABh2wjQuFL0G4dQCyE788j+Krrn8B47Zyfsz H+L6s4sOtkWVyf1kTyZ8rpVQjXZTxqg+cvjhj1GED5ycmfsy5zGZ2AfZsvBV98wm gEtZIbiT+gi8k42f+iITvF4gDFWjR5k1ABApETerx/Ucq1HpfpdeUExuWB0Tihs9 EDAf0e8z9Rh2/1+OY508EdoLreV2vEtdGNP2GIHkXarWEnOL9tSOrivZr40r4S31 umPoqSnlMe5fXO4hd5+CPnhJZOziGOhyPArKmROtL3EXxUiS2B+AqB1yDINKt00w PXjL+dFAluI12AI0KAHquP8MksSRobF2NmAJh/9Hv2cAqLpG6z4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org