$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JwwlDFGVPf3Pee3RWCAtucm9Gfo.roa File: JwwlDFGVPf3Pee3RWCAtucm9Gfo.roa (raw, json) Hash identifier: t6Uxb3OgQyZCALUDcMNcSCprnoWu9MFPNKvEt62Ky/8= Subject key identifier: 27:0C:25:0C:51:95:3D:FD:CF:79:ED:D1:58:20:2D:B9:C9:BD:19:FA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A24 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JwwlDFGVPf3Pee3RWCAtucm9Gfo.roa Signing time: Fri 01 Sep 2023 10:07:32 +0000 ROA not before: Fri 01 Sep 2023 10:07:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10788 (0x2a24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=270C250C51953DFDCF79EDD158202DB9C9BD19FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:61:a8:a0:66:79:fe:20:cc:99:70:c1:38: cf:35:51:f5:8e:38:aa:ce:3c:29:4f:aa:f5:12:24: 8f:cd:c0:a5:9a:c6:a9:c4:1e:3d:2c:e2:89:ca:03: 65:72:58:d5:47:e8:91:73:b6:4f:f4:75:a6:45:55: 97:b9:bb:95:18:38:4e:a6:78:c6:60:62:50:58:9d: 39:ab:79:2d:a7:3e:40:5f:0a:87:bf:1f:bb:5c:ae: 94:7a:3e:ff:a2:bf:56:54:2f:3d:36:cf:54:37:a0: 23:04:5f:ff:79:ac:94:5b:c6:4a:79:d3:0e:21:9e: 79:ca:92:dd:3c:2c:e6:0a:01:9c:4e:eb:a1:3e:4b: bf:d7:a9:35:a4:b8:64:2d:d5:a8:1f:09:f4:ff:c3: 8b:de:ca:79:99:ec:f0:31:f5:38:ca:ea:30:ce:25: d6:51:6b:cc:be:a9:5e:d3:60:5d:59:30:cb:dd:f0: fd:8f:ed:90:f6:5e:69:46:1d:c5:7b:e9:d5:61:26: 84:43:17:76:66:6e:97:e3:cb:d6:3e:0c:4e:06:cf: 17:80:f0:8a:18:d5:9c:00:ea:86:87:05:a4:3c:a6: d5:65:73:a5:4e:6c:47:0f:39:48:3b:5c:1d:d6:64: 7d:99:1d:94:90:9f:3d:70:bf:a3:c8:76:d9:61:a0: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0C:25:0C:51:95:3D:FD:CF:79:ED:D1:58:20:2D:B9:C9:BD:19:FA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JwwlDFGVPf3Pee3RWCAtucm9Gfo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.224.0/22 Signature Algorithm: sha256WithRSAEncryption b1:d9:5b:6e:50:19:7c:64:52:97:e2:16:10:35:78:99:ca:3e: 41:fc:09:57:6d:55:0b:e3:28:6e:a7:26:54:1d:1e:eb:3c:17: a6:27:c9:20:26:ec:e9:79:b0:8c:c3:42:dd:f3:76:95:40:13: 7f:8f:e2:8a:36:32:40:58:2c:55:54:73:20:14:a8:4e:61:e1: 6f:15:fd:dd:ff:d2:b9:f5:0a:e5:43:a9:7c:fb:6a:03:b0:1b: 5d:ed:eb:04:20:cf:19:a7:0e:90:d2:88:e8:89:03:63:11:36: f8:89:3a:29:a0:97:27:b0:fc:f2:d8:c8:88:cc:87:ba:ab:35: 8d:76:04:8b:7e:d8:2e:3a:a3:a5:ff:bb:37:79:f2:01:6e:de: c4:64:b8:76:80:4f:d5:bc:80:f6:96:57:a7:8a:42:4b:6a:ce: a8:60:ab:70:79:cb:0b:82:a0:66:bb:e6:70:62:3f:f3:0f:9a: d7:b7:7e:e7:ec:78:05:a0:63:6b:8a:9d:11:46:0a:9f:71:a7: 8e:61:29:48:a8:c6:32:b1:db:fc:76:e2:f9:ca:d9:33:8c:c8: 15:2f:9c:11:74:43:a0:66:1b:ff:12:ec:6f:c9:b2:eb:9c:ca: c9:a7:ea:67:83:07:49:2b:e2:cd:6d:db:66:ae:5e:8c:4d:35: 3f:f8:f4:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI3MEMyNTBDNTE5NTNE RkRDRjc5RUREMTU4MjAyREI5QzlCRDE5RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLRGGooGZ5/iDMmXDBOM81UfWOOKrOPClPqvUSJI/NwKWaxqnE Hj0s4onKA2VyWNVH6JFztk/0daZFVZe5u5UYOE6meMZgYlBYnTmreS2nPkBfCoe/ H7tcrpR6Pv+iv1ZULz02z1Q3oCMEX/95rJRbxkp50w4hnnnKkt08LOYKAZxO66E+ S7/XqTWkuGQt1agfCfT/w4veynmZ7PAx9TjK6jDOJdZRa8y+qV7TYF1ZMMvd8P2P 7ZD2XmlGHcV76dVhJoRDF3Zmbpfjy9Y+DE4GzxeA8IoY1ZwA6oaHBaQ8ptVlc6VO bEcPOUg7XB3WZH2ZHZSQnz1wv6PIdtlhoNHRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJwwlDFGVPf3Pee3RWCAtucm9GfowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0p3d2xERkdWUGYzUGVlM1JX Q0F0dWNtOUdmby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6eAwDQYJKoZIhvcNAQELBQADggEBALHZW25QGXxkUpfiFhA1eJnKPkH8CVdtVQvj KG6nJlQdHus8F6YnySAm7Ol5sIzDQt3zdpVAE3+P4oo2MkBYLFVUcyAUqE5h4W8V /d3/0rn1CuVDqXz7agOwG13t6wQgzxmnDpDSiOiJA2MRNviJOimglyew/PLYyIjM h7qrNY12BIt+2C46o6X/uzd58gFu3sRkuHaAT9W8gPaWV6eKQktqzqhgq3B5ywuC oGa75nBiP/MPmte3fufseAWgY2uKnRFGCp9xp45hKUioxjKx2/x24vnK2TOMyBUv nBF0Q6BmG/8S7G/Jsuucysmn6meDB0kr4s1t22auXoxNNT/49Ls= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org