$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GaDJGvRRsNDJkYmexHXLTytnRe8.roa File: GaDJGvRRsNDJkYmexHXLTytnRe8.roa (raw, json) Hash identifier: jwI4kTTaOah6UTmS2h3OborgAOrvClSlbP48ztMJplw= Subject key identifier: 19:A0:C9:1A:F4:51:B0:D0:C9:91:89:9E:C4:75:CB:4F:2B:67:45:EF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29AA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GaDJGvRRsNDJkYmexHXLTytnRe8.roa Signing time: Fri 01 Sep 2023 10:06:54 +0000 ROA not before: Fri 01 Sep 2023 10:06:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10666 (0x29aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=19A0C91AF451B0D0C991899EC475CB4F2B6745EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8f:8e:4f:69:0e:12:04:88:dd:b5:e8:62:73: 46:f4:68:89:f2:cc:4c:80:8a:42:41:b0:ce:44:7a: 50:7f:17:e2:8f:3b:55:2f:49:9a:38:2b:2d:5e:1b: 9b:59:bb:7d:8b:2c:96:21:84:e5:47:39:f3:13:78: b8:71:c8:d2:ec:fd:6f:55:bf:47:a3:07:3a:17:83: 47:0a:f2:a4:40:16:0d:af:b9:a9:16:82:9c:f7:7c: d5:17:73:87:e6:d8:b1:60:95:25:0d:df:bc:fe:55: e4:98:40:9e:ce:68:9b:31:10:dd:c4:78:50:fd:02: bd:d0:1a:de:cb:c1:f4:b3:1c:a7:d5:dd:4e:3b:f2: d1:06:ac:4e:2a:0f:f0:f7:23:0b:28:58:a2:6d:5c: 87:1f:f3:71:b8:db:3c:ca:75:50:be:92:be:ec:2c: e7:32:11:d4:81:92:9d:ba:01:b7:cd:60:ac:39:36: c5:1c:cf:9f:24:5b:ab:b0:31:26:11:b1:0d:ff:a3: 12:a6:7d:02:9d:c2:d6:d4:dd:3c:75:bb:96:0a:ff: bc:a0:07:4c:fe:09:72:3c:e0:09:1a:29:cb:91:a7: 5b:ee:02:69:fd:d2:4b:f8:21:c7:e2:39:ad:51:9c: 73:ff:d2:47:0c:dd:8f:44:be:db:e4:0a:14:8d:0e: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A0:C9:1A:F4:51:B0:D0:C9:91:89:9E:C4:75:CB:4F:2B:67:45:EF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GaDJGvRRsNDJkYmexHXLTytnRe8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.156.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:13:8e:a1:ae:6b:04:ab:a8:88:74:45:3b:8a:f0:a5:63:a5: 43:17:2e:31:56:b3:83:40:dc:8d:20:b8:f1:8b:14:86:58:fe: 8e:8b:c2:69:e5:a2:d5:1e:8e:68:14:e0:82:7b:e3:48:30:e7: f1:86:ec:9c:db:cb:4c:f5:e9:0b:7d:fd:f3:4f:23:2b:66:fc: 91:17:25:16:11:0f:33:98:32:65:80:e5:23:86:10:f9:e7:96: 55:71:74:bb:67:9c:32:79:c1:1a:d7:19:90:ed:71:86:5a:4d: bd:7b:3c:cd:b7:3b:a8:9a:50:3e:9a:f2:15:22:52:d7:73:ad: f6:cf:27:8a:68:e9:2d:4d:48:5c:1f:03:aa:e1:00:14:ea:28: 87:13:4e:41:b7:61:07:01:39:f0:32:09:78:8c:fb:85:c9:5a: a4:b0:2f:25:ee:42:47:80:64:2e:7e:d5:23:a4:67:ec:b6:18: 30:94:15:a3:e5:0f:4d:4b:28:39:00:af:5a:26:3b:fe:ef:dd: 82:79:26:2e:49:c9:de:6d:f3:a5:80:fe:bd:de:fa:60:e8:4f: 3e:e3:cb:32:22:47:38:b8:86:d0:cb:27:8f:af:0f:d5:f6:b5: 7f:ab:d5:06:e8:49:61:53:49:65:89:4a:51:84:2e:c6:8d:b3: da:5f:6a:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE5QTBDOTFBRjQ1MUIw RDBDOTkxODk5RUM0NzVDQjRGMkI2NzQ1RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDej45PaQ4SBIjdtehic0b0aInyzEyAikJBsM5EelB/F+KPO1Uv SZo4Ky1eG5tZu32LLJYhhOVHOfMTeLhxyNLs/W9Vv0ejBzoXg0cK8qRAFg2vuakW gpz3fNUXc4fm2LFglSUN37z+VeSYQJ7OaJsxEN3EeFD9Ar3QGt7LwfSzHKfV3U47 8tEGrE4qD/D3IwsoWKJtXIcf83G42zzKdVC+kr7sLOcyEdSBkp26AbfNYKw5NsUc z58kW6uwMSYRsQ3/oxKmfQKdwtbU3Tx1u5YK/7ygB0z+CXI84AkaKcuRp1vuAmn9 0kv4IcfiOa1RnHP/0kcM3Y9EvtvkChSNDgLdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGaDJGvRRsNDJkYmexHXLTytnRe8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dhREpHdlJSc05ESmtZbWV4 SFhMVHl0blJlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AZwwDQYJKoZIhvcNAQELBQADggEBAB0TjqGuawSrqIh0RTuK8KVjpUMXLjFWs4NA 3I0guPGLFIZY/o6LwmnlotUejmgU4IJ740gw5/GG7Jzby0z16Qt9/fNPIytm/JEX JRYRDzOYMmWA5SOGEPnnllVxdLtnnDJ5wRrXGZDtcYZaTb17PM23O6iaUD6a8hUi UtdzrfbPJ4po6S1NSFwfA6rhABTqKIcTTkG3YQcBOfAyCXiM+4XJWqSwLyXuQkeA ZC5+1SOkZ+y2GDCUFaPlD01LKDkAr1omO/7v3YJ5Ji5Jyd5t86WA/r3e+mDoTz7j yzIiRzi4htDLJ4+vD9X2tX+r1QboSWFTSWWJSlGELsaNs9pfaiI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org