$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IVN0rw5C4Ln-zELM7WTf9w7twZ8.roa File: IVN0rw5C4Ln-zELM7WTf9w7twZ8.roa (raw, json) Hash identifier: VlgvzofMQGdmQ0vY5YkQuVFNAzcebchP0Yr6VwfkjSg= Subject key identifier: 21:53:74:AF:0E:42:E0:B9:FE:CC:42:CC:ED:64:DF:F7:0E:ED:C1:9F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FFC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IVN0rw5C4Ln-zELM7WTf9w7twZ8.roa Signing time: Mon 26 Aug 2024 05:29:02 +0000 ROA not before: Mon 26 Aug 2024 05:29:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.0.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12284 (0x2ffc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=215374AF0E42E0B9FECC42CCED64DFF70EEDC19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:fe:94:09:65:12:b0:5f:3f:df:2a:1e:f2: 58:3e:c9:b3:96:da:e9:f4:9d:8f:22:93:91:36:1f: 4f:a3:0e:bc:3f:bf:25:b0:0f:c4:55:71:92:ed:7a: 49:2b:64:e1:31:ad:16:55:e0:97:94:69:1e:00:03: 63:90:52:d1:48:d8:12:34:39:06:31:38:46:7a:f7: 54:57:ea:2e:54:8d:ee:c5:73:ab:87:5e:cf:85:88: a1:74:f3:c5:55:55:a3:ad:52:8c:c0:0d:66:01:b7: 58:4d:9f:1e:53:60:be:80:6a:0d:20:2a:fb:86:01: cc:38:22:40:1d:34:79:07:df:51:ec:30:27:26:a3: ba:75:5e:cc:69:17:fb:3b:ce:fa:71:cc:3c:ab:4c: 75:a3:65:07:1a:c4:19:d4:a3:06:cc:90:25:db:79: 06:32:cd:c7:fd:3b:07:45:10:62:a8:75:56:8a:4c: e4:04:00:68:72:f6:fc:b0:2a:27:e4:b4:43:ac:04: ae:80:34:72:cf:10:b7:b7:d1:d9:5c:57:e0:1f:a1: fa:82:5c:ec:00:7f:f9:bc:a3:8b:74:bd:86:1b:33: c9:7f:1d:b4:fb:ce:9f:28:d9:f0:44:5f:33:08:2a: cc:ca:61:03:49:40:0d:ea:ef:4e:9b:37:41:9e:9b: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:53:74:AF:0E:42:E0:B9:FE:CC:42:CC:ED:64:DF:F7:0E:ED:C1:9F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IVN0rw5C4Ln-zELM7WTf9w7twZ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.0.0/21 Signature Algorithm: sha256WithRSAEncryption 10:05:5c:34:c2:3d:42:7e:4a:11:54:96:05:e6:93:1f:43:e2: 73:e4:be:43:a6:d6:41:8e:ef:c7:c7:20:89:fa:8d:f9:9a:d9: af:72:14:62:f8:2c:59:a9:42:91:c1:3e:e0:8e:30:ab:dd:51: 66:e4:df:a5:12:58:09:68:ec:06:4b:ea:22:cd:e5:d1:d6:67: d6:82:28:4a:1f:8b:d6:35:81:b6:d7:48:41:72:7e:18:52:84: f9:cd:08:a6:da:68:a8:2a:59:43:28:b8:75:8e:94:3a:19:f7: 31:d0:b9:a2:17:3f:e4:2b:ee:e9:d8:34:18:3b:a4:44:f7:90: 33:b4:1c:9b:7e:fe:e8:9d:c6:54:64:5e:7b:c6:5f:04:9e:92: b5:fe:ae:57:56:4b:ff:01:14:82:4b:a5:f6:da:03:67:25:a1: 5b:81:e8:1a:75:46:e9:72:e2:d8:a6:e8:4e:6b:e4:8a:9b:bf: 78:17:7f:c4:76:8f:6a:e4:1f:f5:76:d6:ea:6a:58:33:fb:92: 4e:fc:fa:11:f9:e0:2c:8c:07:c9:8c:5b:66:4f:73:1b:26:fe: c7:dd:77:d8:9f:bb:f3:6e:ca:ba:8a:31:7b:25:12:c4:05:18: b9:24:96:ea:98:6c:e7:7b:6a:58:b1:6f:7a:94:a1:68:57:17: 39:ec:30:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxNTM3NEFGMEU0MkUw QjlGRUNDNDJDQ0VENjRERkY3MEVFREMxOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCns/6UCWUSsF8/3yoe8lg+ybOW2un0nY8ik5E2H0+jDrw/vyWw D8RVcZLtekkrZOExrRZV4JeUaR4AA2OQUtFI2BI0OQYxOEZ691RX6i5Uje7Fc6uH Xs+FiKF088VVVaOtUozADWYBt1hNnx5TYL6Aag0gKvuGAcw4IkAdNHkH31HsMCcm o7p1XsxpF/s7zvpxzDyrTHWjZQcaxBnUowbMkCXbeQYyzcf9OwdFEGKodVaKTOQE AGhy9vywKifktEOsBK6ANHLPELe30dlcV+AfofqCXOwAf/m8o4t0vYYbM8l/HbT7 zp8o2fBEXzMIKszKYQNJQA3q706bN0Gem11RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIVN0rw5C4Ln+zELM7WTf9w7twZ8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lWTjBydzVDNExuLXpFTE03 V1RmOXc3dHdaOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AQAwDQYJKoZIhvcNAQELBQADggEBABAFXDTCPUJ+ShFUlgXmkx9D4nPkvkOm1kGO 78fHIIn6jfma2a9yFGL4LFmpQpHBPuCOMKvdUWbk36USWAlo7AZL6iLN5dHWZ9aC KEofi9Y1gbbXSEFyfhhShPnNCKbaaKgqWUMouHWOlDoZ9zHQuaIXP+Qr7unYNBg7 pET3kDO0HJt+/uidxlRkXnvGXwSekrX+rldWS/8BFIJLpfbaA2cloVuB6Bp1Ruly 4tim6E5r5Iqbv3gXf8R2j2rkH/V21upqWDP7kk78+hH54CyMB8mMW2ZPcxsm/sfd d9ifu/NuyrqKMXslEsQFGLkkluqYbOd7alixb3qUoWhXFznsMHk= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:38 2024 by rpki-client on console-fra.rpki-client.org