$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa File: KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa (raw, json) Hash identifier: UPu43irllhz2vcqJco1yW5wqMFZ9iWB5oKWvZy3zYNw= Subject key identifier: 2A:74:57:03:E9:34:F1:7A:2E:F6:AF:F5:64:2C:4A:10:F4:C4:EC:22 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A3D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa Signing time: Fri 01 Sep 2023 10:07:39 +0000 ROA not before: Fri 01 Sep 2023 10:07:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10813 (0x2a3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2A745703E934F17A2EF6AFF5642C4A10F4C4EC22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:d6:9a:b9:51:b4:1d:ce:ca:b5:53:94:18: 9e:8d:01:3d:af:a5:24:5e:26:8f:32:2e:18:61:55: eb:47:dc:57:88:51:87:20:96:1d:0c:2f:bb:3d:5e: fb:16:b4:1b:5b:8b:cb:1a:35:66:0d:a9:4c:a9:a0: 13:f0:e4:ad:f5:d4:8a:fc:2c:af:85:c5:1e:cd:8e: aa:d1:a8:69:d9:a4:da:bb:93:e5:b5:76:36:98:2a: 42:31:04:22:10:d2:06:31:6a:f9:40:0c:ab:38:59: 29:88:18:dd:8e:53:ea:d6:5b:a7:fd:29:d9:2b:ae: d9:fd:22:ba:04:13:3b:6c:10:d2:64:16:dd:68:2a: c7:b4:07:51:39:16:d1:67:8e:89:e9:f9:fa:32:3d: 85:dc:30:90:4f:87:63:d0:ce:57:ab:05:c4:b7:8d: 70:12:b7:b6:73:ff:9b:ec:e4:48:c6:e4:a4:2f:43: 01:1d:89:4d:50:db:68:49:67:56:12:ec:d8:14:4c: 91:92:39:b0:44:9c:d1:44:2c:ff:66:50:dc:e2:98: e0:8e:10:64:f5:c3:dc:18:62:c2:4f:b5:a5:74:ca: 1e:fd:9b:1b:dd:09:41:2e:4f:40:16:79:66:7d:dd: d0:07:10:ed:58:18:ca:ef:a1:87:11:a6:9d:92:6a: a6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:57:03:E9:34:F1:7A:2E:F6:AF:F5:64:2C:4A:10:F4:C4:EC:22 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.236.0/22 Signature Algorithm: sha256WithRSAEncryption 25:e6:ee:44:e7:48:21:07:a7:3a:52:04:54:09:fb:5f:f6:d6: 17:5a:ca:3d:cc:05:e5:17:ca:1c:8a:ee:db:5d:3f:de:ad:dc: 8f:02:37:c0:22:d0:05:98:7a:cb:8f:cf:3c:f1:23:fc:1f:31: da:66:85:06:0a:be:8c:03:8f:75:f3:fe:36:41:ff:68:44:d5: 5f:88:6a:f9:f0:a1:b3:f7:e1:8d:6a:84:d1:89:a1:f3:53:df: 3c:d4:b5:6d:8e:49:c3:2d:94:3b:99:93:bc:0d:54:cf:30:a3: 08:bf:dd:da:9b:81:fd:3a:a0:cb:23:61:7f:a3:28:e0:5a:bb: e8:6b:c6:b9:79:e3:93:f0:5d:ea:21:51:68:56:55:29:5f:31: 1b:38:56:12:81:da:2a:cd:e7:97:0b:49:57:28:14:58:d4:e4: 90:81:e4:68:86:18:d5:b1:40:f8:27:ce:57:5d:3b:7b:d8:c4: 5c:50:48:8a:3d:0b:f8:03:95:2a:9f:c2:61:f5:57:83:85:f0: c4:de:c5:62:05:4c:91:e7:cc:17:34:b9:53:e2:d9:6e:08:10: a9:33:6a:78:a7:43:3e:97:81:4a:40:cc:11:f8:7c:ce:a5:f1: 7c:6b:a0:c7:d7:62:1a:8a:a1:5a:53:87:ed:b6:86:05:eb:ff: 07:2c:2a:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJBNzQ1NzAzRTkzNEYx N0EyRUY2QUZGNTY0MkM0QTEwRjRDNEVDMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjR9aauVG0Hc7KtVOUGJ6NAT2vpSReJo8yLhhhVetH3FeIUYcg lh0ML7s9XvsWtBtbi8saNWYNqUypoBPw5K311Ir8LK+FxR7NjqrRqGnZpNq7k+W1 djaYKkIxBCIQ0gYxavlADKs4WSmIGN2OU+rWW6f9Kdkrrtn9IroEEztsENJkFt1o Kse0B1E5FtFnjonp+foyPYXcMJBPh2PQzlerBcS3jXASt7Zz/5vs5EjG5KQvQwEd iU1Q22hJZ1YS7NgUTJGSObBEnNFELP9mUNzimOCOEGT1w9wYYsJPtaV0yh79mxvd CUEuT0AWeWZ93dAHEO1YGMrvoYcRpp2SaqYJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKnRXA+k08Xou9q/1ZCxKEPTE7CIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tuUlhBLWswOFhvdTlxXzFa Q3hLRVBURTdDSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6ewwDQYJKoZIhvcNAQELBQADggEBACXm7kTnSCEHpzpSBFQJ+1/21hdayj3MBeUX yhyK7ttdP96t3I8CN8Ai0AWYesuPzzzxI/wfMdpmhQYKvowDj3Xz/jZB/2hE1V+I avnwobP34Y1qhNGJofNT3zzUtW2OScMtlDuZk7wNVM8wowi/3dqbgf06oMsjYX+j KOBau+hrxrl545PwXeohUWhWVSlfMRs4VhKB2irN55cLSVcoFFjU5JCB5GiGGNWx QPgnzlddO3vYxFxQSIo9C/gDlSqfwmH1V4OF8MTexWIFTJHnzBc0uVPi2W4IEKkz aninQz6XgUpAzBH4fM6l8XxroMfXYhqKoVpTh+22hgXr/wcsKm4= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org