$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PTSyyIfA5FXfVh6_frNMi56dXMY.roa File: PTSyyIfA5FXfVh6_frNMi56dXMY.roa (raw, json) Hash identifier: NEnZFA8oHo8gtNTjnyOXsjamwqEy2dCleqoISkHPNEw= Subject key identifier: 3D:34:B2:C8:87:C0:E4:55:DF:56:1E:BF:7E:B3:4C:8B:9E:9D:5C:C6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B09 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PTSyyIfA5FXfVh6_frNMi56dXMY.roa Signing time: Fri 01 Sep 2023 10:09:47 +0000 ROA not before: Fri 01 Sep 2023 10:09:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11017 (0x2b09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3D34B2C887C0E455DF561EBF7EB34C8B9E9D5CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:9a:2e:40:6a:96:16:97:57:f1:7e:b9:8e: 61:ed:3d:e2:f6:8b:d6:18:01:c1:57:55:d1:40:9a: c4:74:12:2a:e2:99:2e:13:aa:f9:01:22:a5:10:70: ce:4a:b1:93:33:ff:13:f1:4d:aa:31:54:54:a6:95: 6f:29:ed:61:ae:f6:e5:38:d3:09:3f:7b:ec:2a:bd: d2:60:e5:e3:ca:72:a6:bb:f1:05:ea:8d:5b:72:37: e9:bc:33:47:cd:38:bc:a6:86:ef:30:ec:9f:6c:0e: d0:22:72:c4:bc:22:78:08:c3:b4:12:de:e4:af:81: 4c:ec:7d:8d:e9:94:c6:08:6d:98:cb:72:6f:cc:f4: fe:f5:f6:92:49:e8:55:91:76:fc:8b:49:4e:c1:bf: b4:f0:50:c8:e1:71:09:d3:77:f3:97:a0:60:16:2b: 42:d1:c0:cb:a6:7b:6e:f9:0b:8a:84:48:97:dd:47: 3e:32:88:57:58:b2:a0:05:77:45:a5:29:da:26:e8: 24:21:de:9e:3c:ad:4f:ba:76:3b:e9:b3:ba:96:3e: 69:be:b0:60:07:a7:6c:90:eb:c4:e1:c0:d8:1c:80: fa:0f:24:81:ae:f3:49:3b:c5:44:84:ff:44:f9:e2: 5e:09:37:98:c5:38:1d:67:82:3d:63:45:af:c1:58: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:34:B2:C8:87:C0:E4:55:DF:56:1E:BF:7E:B3:4C:8B:9E:9D:5C:C6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PTSyyIfA5FXfVh6_frNMi56dXMY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.240.0/22 Signature Algorithm: sha256WithRSAEncryption 84:ed:83:d7:e2:d9:cf:ab:db:0e:ba:7e:8a:da:aa:13:3b:6b: 29:dd:84:82:b9:e0:33:d2:aa:7d:3c:88:0b:6d:eb:b2:dd:6b: 5d:0e:6b:04:00:b0:61:ef:49:93:9f:c6:4f:62:06:54:b7:c9: dc:85:47:ef:26:1b:f0:70:81:93:f9:60:31:6c:ae:f3:d8:c2: dd:fb:fa:82:13:19:28:37:71:47:99:55:74:05:26:5b:67:0e: b4:a6:f0:1c:cc:0a:f6:a1:cc:0b:fc:ea:dd:35:e2:44:65:59: b9:9d:e0:11:be:c4:7e:45:83:28:6f:11:09:30:4c:07:19:64: 0f:e3:7d:a9:c0:dd:97:6a:e0:b4:fc:fd:85:d5:88:de:de:4a: 4e:a6:c3:a9:5a:43:96:04:47:ff:89:9a:98:9b:e9:58:e8:8a: 9e:7f:31:41:9a:6c:f9:fc:a5:37:4c:e8:ab:69:66:a7:d1:95: 75:cb:97:47:87:da:fd:f0:74:2c:6e:7a:14:eb:f6:60:8c:1d: a7:b8:df:75:30:48:50:f1:12:02:81:d4:72:52:e6:42:5d:ee: bc:c5:cc:f7:cf:24:d0:08:92:56:63:d6:a5:03:d6:11:c1:e3: 84:e3:72:ca:4e:46:c8:79:b9:3c:bf:00:f0:2a:54:28:eb:63: e1:b2:00:3d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNEMzRCMkM4ODdDMEU0 NTVERjU2MUVCRjdFQjM0QzhCOUU5RDVDQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEDpouQGqWFpdX8X65jmHtPeL2i9YYAcFXVdFAmsR0EirimS4T qvkBIqUQcM5KsZMz/xPxTaoxVFSmlW8p7WGu9uU40wk/e+wqvdJg5ePKcqa78QXq jVtyN+m8M0fNOLymhu8w7J9sDtAicsS8IngIw7QS3uSvgUzsfY3plMYIbZjLcm/M 9P719pJJ6FWRdvyLSU7Bv7TwUMjhcQnTd/OXoGAWK0LRwMume275C4qESJfdRz4y iFdYsqAFd0WlKdom6CQh3p48rU+6djvps7qWPmm+sGAHp2yQ68ThwNgcgPoPJIGu 80k7xUSE/0T54l4JN5jFOB1ngj1jRa/BWOuvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPTSyyIfA5FXfVh6/frNMi56dXMYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BUU3l5SWZBNUZYZlZoNl9m ck5NaTU2ZFhNWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AfAwDQYJKoZIhvcNAQELBQADggEBAITtg9fi2c+r2w66foraqhM7ayndhIK54DPS qn08iAtt67Lda10OawQAsGHvSZOfxk9iBlS3ydyFR+8mG/BwgZP5YDFsrvPYwt37 +oITGSg3cUeZVXQFJltnDrSm8BzMCvahzAv86t014kRlWbmd4BG+xH5FgyhvEQkw TAcZZA/jfanA3Zdq4LT8/YXViN7eSk6mw6laQ5YER/+Jmpib6Vjoip5/MUGabPn8 pTdM6KtpZqfRlXXLl0eH2v3wdCxuehTr9mCMHae433UwSFDxEgKB1HJS5kJd7rzF zPfPJNAIklZj1qUD1hHB44TjcspORsh5uTy/APAqVCjrY+GyAD0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org