$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GrrhUBZ6KRY_XhrMCosoiBICEVo.roa File: GrrhUBZ6KRY_XhrMCosoiBICEVo.roa (raw, json) Hash identifier: Ziht+ytMlcZT1oTtq6PTbOAbNsq8FWL6b7wmR8HU0+c= Subject key identifier: 1A:BA:E1:50:16:7A:29:16:3F:5E:1A:CC:0A:8B:28:88:12:02:11:5A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29DC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GrrhUBZ6KRY_XhrMCosoiBICEVo.roa Signing time: Fri 01 Sep 2023 10:07:11 +0000 ROA not before: Fri 01 Sep 2023 10:07:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 118.232.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10716 (0x29dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1ABAE150167A29163F5E1ACC0A8B28881202115A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:c8:da:cc:87:16:a6:86:fc:99:99:4f:a1: eb:98:1d:d8:f7:dd:07:8c:45:f6:80:ad:01:d1:8c: 5b:35:a3:05:c6:78:a9:b5:0a:1b:08:25:92:b3:54: 53:25:47:2f:74:6e:f0:af:30:fc:9e:cd:e0:cc:ce: 03:13:94:d3:ad:45:9c:33:4b:03:e3:2e:61:c4:c0: d4:61:e0:4d:77:0c:28:41:a1:c2:e6:84:bd:27:41: 5f:8b:57:27:d2:8d:c1:f4:73:24:f3:d0:36:23:0e: ba:5b:54:24:7b:c6:0b:df:dc:fe:f0:fb:2b:2b:01: 9c:7e:10:ac:7f:a2:a0:c0:32:03:d5:19:91:8c:c5: 26:8a:83:87:eb:85:70:89:83:75:36:5b:a0:5d:40: ff:f3:89:ad:8a:1b:0c:f6:79:cd:61:9a:f5:b3:07: 45:55:a3:37:a5:e0:f5:05:7c:70:90:65:3a:e2:fe: ae:79:68:a6:83:c6:d0:4b:55:50:9c:02:9f:81:51: 54:1b:31:bb:5b:48:85:bb:e4:65:3e:e6:eb:9e:e1: ac:99:3f:14:f4:09:56:94:8c:88:0a:b2:57:ee:89: 4f:49:05:9d:8c:9d:cc:47:35:8a:8b:08:65:d5:59: 22:c3:70:90:67:ac:5b:9f:2e:5f:cd:08:5e:2a:b2: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:E1:50:16:7A:29:16:3F:5E:1A:CC:0A:8B:28:88:12:02:11:5A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GrrhUBZ6KRY_XhrMCosoiBICEVo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/18 Signature Algorithm: sha256WithRSAEncryption 0d:01:a3:ea:16:1a:65:61:32:ab:ca:43:bb:62:49:b4:43:95: a4:2c:75:64:14:28:fa:0d:d8:b5:c0:7f:3c:13:53:8e:23:67: 6a:91:87:40:fe:58:c0:3b:08:42:85:d0:27:e7:aa:dc:8e:32: 8a:bf:47:b2:a4:7d:75:a7:c4:99:24:60:ec:fd:d8:4e:02:1a: 08:4e:d8:6b:01:4d:fb:c1:5d:f8:b6:c4:d4:02:ac:85:e0:91: ad:20:c3:62:88:00:aa:46:5b:18:a3:22:29:a9:9a:22:b8:9a: e0:a7:1b:d6:86:69:b0:ba:78:c6:fb:42:88:ea:4f:44:64:32: d5:94:a6:72:8b:27:43:63:3e:79:4d:67:8d:32:cb:aa:4d:ed: 36:45:b3:26:a0:31:06:71:f8:d3:11:ef:c7:d8:5a:a8:a2:a8: 51:01:4d:d6:8d:80:24:7c:22:7a:9f:08:8a:28:6c:b3:c0:df: 09:3b:42:dc:1d:c2:f2:27:31:71:c3:c6:4a:7f:b1:1b:76:43: f5:cb:b7:f0:00:46:22:d5:5a:e7:0a:d3:d0:9c:7f:cf:1e:fd: 67:11:5b:a6:f2:cb:af:46:5b:70:a5:22:9f:8c:9a:70:ec:70: c1:a7:aa:5d:1c:fa:ad:7c:58:33:4a:24:66:68:d0:e1:ec:d7: af:10:7e:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFBQkFFMTUwMTY3QTI5 MTYzRjVFMUFDQzBBOEIyODg4MTIwMjExNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5IsjazIcWpob8mZlPoeuYHdj33QeMRfaArQHRjFs1owXGeKm1 ChsIJZKzVFMlRy90bvCvMPyezeDMzgMTlNOtRZwzSwPjLmHEwNRh4E13DChBocLm hL0nQV+LVyfSjcH0cyTz0DYjDrpbVCR7xgvf3P7w+ysrAZx+EKx/oqDAMgPVGZGM xSaKg4frhXCJg3U2W6BdQP/zia2KGwz2ec1hmvWzB0VVozel4PUFfHCQZTri/q55 aKaDxtBLVVCcAp+BUVQbMbtbSIW75GU+5uue4ayZPxT0CVaUjIgKslfuiU9JBZ2M ncxHNYqLCGXVWSLDcJBnrFufLl/NCF4qspdPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGrrhUBZ6KRY/XhrMCosoiBICEVowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dycmhVQlo2S1JZX1hock1D b3NvaUJJQ0VWby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2 6MAwDQYJKoZIhvcNAQELBQADggEBAA0Bo+oWGmVhMqvKQ7tiSbRDlaQsdWQUKPoN 2LXAfzwTU44jZ2qRh0D+WMA7CEKF0CfnqtyOMoq/R7KkfXWnxJkkYOz92E4CGghO 2GsBTfvBXfi2xNQCrIXgka0gw2KIAKpGWxijIimpmiK4muCnG9aGabC6eMb7Qojq T0RkMtWUpnKLJ0NjPnlNZ40yy6pN7TZFsyagMQZx+NMR78fYWqiiqFEBTdaNgCR8 InqfCIoobLPA3wk7QtwdwvInMXHDxkp/sRt2Q/XLt/AARiLVWucK09Ccf88e/WcR W6byy69GW3ClIp+MmnDscMGnql0c+q18WDNKJGZo0OHs168Qfrc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org