$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa File: ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa (raw, json) Hash identifier: 87Em5ZmJInSE/EyEtDbDoDLR0B1dJm0Art1W5/a1UAQ= Subject key identifier: 22:6A:B1:0E:9D:20:ED:A2:7E:86:75:74:87:F3:B9:AC:E3:94:A6:94 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A4B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa Signing time: Fri 01 Sep 2023 10:07:43 +0000 ROA not before: Fri 01 Sep 2023 10:07:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10827 (0x2a4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=226AB10E9D20EDA27E86757487F3B9ACE394A694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:56:95:cb:9d:a5:22:3d:2a:37:ad:30:73: be:1d:78:d8:81:36:a9:a8:d5:8d:86:27:1c:1e:f4: 3e:24:f0:8d:64:66:ac:c4:34:6c:bf:9d:78:ad:2a: 35:b2:22:e0:c3:55:71:e8:e6:36:43:41:80:43:cb: 97:9d:71:55:36:d6:bc:8c:53:e1:43:5a:fc:53:94: c4:43:90:4b:7e:8d:2d:21:d2:fa:c7:27:de:d4:a3: de:7d:8f:a9:c1:bd:43:6e:55:23:10:6b:f5:d5:73: 04:6a:fa:d1:54:94:40:dc:91:ab:34:37:18:da:54: b1:bb:3b:30:29:e1:0c:f0:41:4e:ee:60:5a:a9:d5: 38:4c:05:ab:d1:46:cb:ee:a0:1d:8c:2e:23:88:6b: 1b:b9:54:22:9b:34:3b:a5:3d:9a:3c:9e:13:07:9f: 89:7b:ae:70:49:33:e8:2a:be:9d:6d:7d:5f:36:16: ba:d9:76:7f:75:63:7d:76:36:6b:ca:1d:12:ac:50: 3a:f7:95:4d:55:9b:4a:d7:1d:ea:99:27:6f:e4:80: eb:7f:b3:55:75:88:3b:20:54:56:92:d1:4f:ba:50: 35:32:e1:35:52:1f:7f:07:ae:d3:fa:a3:c1:58:00: 26:ce:60:19:20:f5:0b:0c:cf:e6:c1:8e:18:b7:3e: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6A:B1:0E:9D:20:ED:A2:7E:86:75:74:87:F3:B9:AC:E3:94:A6:94 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.236.0/24 Signature Algorithm: sha256WithRSAEncryption 70:0f:25:08:8b:98:bf:40:10:b7:83:93:2a:06:f2:d9:d8:2b: e4:be:a1:80:76:c0:3b:cf:c9:59:4d:4b:9c:54:a1:b4:2d:ef: 17:d8:3a:55:e6:56:ba:1f:3f:71:55:cb:06:11:50:0b:4a:db: 18:14:b5:b9:0f:49:8a:ff:ab:c8:0e:ae:ca:dc:d8:dd:0e:0c: b6:90:41:e7:7c:db:85:d8:77:92:2b:42:b8:0b:08:d0:9c:a7: 95:6c:b6:53:38:7f:d4:dc:b0:a2:d7:57:aa:31:a8:a8:7d:1c: 8c:fe:86:d7:32:11:4a:e5:46:d5:04:8b:b8:33:12:05:58:5a: 20:3c:2f:7e:e4:d4:2e:f8:af:39:04:d1:a7:4d:a9:ba:00:b5: c8:45:b8:f9:50:84:b9:a9:6d:16:70:b8:88:da:6c:92:81:ba: 4e:55:5a:4c:71:86:e4:b9:62:05:ed:94:9d:79:31:39:ba:a2: 32:3a:b1:3d:d6:a5:1e:b1:f2:84:21:d2:37:27:8c:d6:ec:a6: c2:5e:8d:de:a5:cf:b3:2d:ea:74:d3:35:df:c7:5a:1c:96:44: 72:92:68:60:14:cd:86:23:57:9a:7e:68:e8:f6:e9:4b:87:22: 00:4d:07:af:8e:68:7c:8c:35:96:d6:f4:7c:5a:d7:0b:cf:8a: a6:b1:3a:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIyNkFCMTBFOUQyMEVE QTI3RTg2NzU3NDg3RjNCOUFDRTM5NEE2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAalaVy52lIj0qN60wc74deNiBNqmo1Y2GJxwe9D4k8I1kZqzE NGy/nXitKjWyIuDDVXHo5jZDQYBDy5edcVU21ryMU+FDWvxTlMRDkEt+jS0h0vrH J97Uo959j6nBvUNuVSMQa/XVcwRq+tFUlEDckas0NxjaVLG7OzAp4QzwQU7uYFqp 1ThMBavRRsvuoB2MLiOIaxu5VCKbNDulPZo8nhMHn4l7rnBJM+gqvp1tfV82FrrZ dn91Y312NmvKHRKsUDr3lU1Vm0rXHeqZJ2/kgOt/s1V1iDsgVFaS0U+6UDUy4TVS H38HrtP6o8FYACbOYBkg9QsMz+bBjhi3PgaHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUImqxDp0g7aJ+hnV0h/O5rOOUppQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ltcXhEcDBnN2FKLWhuVjBo X081ck9PVXBwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AewwDQYJKoZIhvcNAQELBQADggEBAHAPJQiLmL9AELeDkyoG8tnYK+S+oYB2wDvP yVlNS5xUobQt7xfYOlXmVrofP3FVywYRUAtK2xgUtbkPSYr/q8gOrsrc2N0ODLaQ Qed824XYd5IrQrgLCNCcp5VstlM4f9TcsKLXV6oxqKh9HIz+htcyEUrlRtUEi7gz EgVYWiA8L37k1C74rzkE0adNqboAtchFuPlQhLmpbRZwuIjabJKBuk5VWkxxhuS5 YgXtlJ15MTm6ojI6sT3WpR6x8oQh0jcnjNbspsJejd6lz7Mt6nTTNd/HWhyWRHKS aGAUzYYjV5p+aOj26UuHIgBNB6+OaHyMNZbW9Hxa1wvPiqaxOsE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org