$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PtrWrQ222hkVbi6sazxMKnU2jZY.roa File: PtrWrQ222hkVbi6sazxMKnU2jZY.roa (raw, json) Hash identifier: xqXEOLCYUHAgYb+dN7icoZjT85jrEVczHH84wREhdng= Subject key identifier: 3E:DA:D6:AD:0D:B6:DA:19:15:6E:2E:AC:6B:3C:4C:2A:75:36:8D:96 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29E6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PtrWrQ222hkVbi6sazxMKnU2jZY.roa Signing time: Fri 01 Sep 2023 10:07:13 +0000 ROA not before: Fri 01 Sep 2023 10:07:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10726 (0x29e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3EDAD6AD0DB6DA19156E2EAC6B3C4C2A75368D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:52:e5:fa:1c:df:ae:16:44:64:85:8c:bf: 16:78:10:bb:14:f2:ec:c1:b9:f1:a7:ad:5e:a2:fb: 99:dd:2a:c4:c7:f0:3d:6b:ee:a5:28:d8:40:68:89: 80:55:8f:21:56:bf:db:0a:0b:43:48:1c:dd:c3:b4: 4d:fb:73:33:89:a2:74:8b:8c:2f:ae:e2:07:4c:e3: 2f:20:1f:2a:17:84:ac:c9:f1:85:09:1b:a0:af:0e: 26:b5:38:67:68:82:54:b4:28:bf:f5:12:d7:c9:96: 93:9f:24:45:00:43:87:9a:a9:2d:34:ef:26:85:9b: 0c:e3:0e:61:6e:31:a1:25:c2:06:c7:77:76:59:9d: 27:19:01:ec:60:a9:11:12:67:0e:cd:da:86:72:b1: 7d:7c:5e:c1:e3:4b:4c:a0:1a:37:ca:6b:cc:3e:40: b9:36:c0:91:25:cb:e7:ed:42:d5:6d:bf:49:ba:3d: ab:c7:c4:a5:2c:92:71:08:36:2c:5e:66:14:34:9a: 18:64:aa:f0:a4:24:19:9c:25:a8:78:a2:11:62:a6: f8:df:3c:ae:3d:cc:bd:5a:da:ce:00:63:13:36:01: dc:a4:9e:44:e0:bc:89:4c:5c:4e:f1:a9:e2:cc:fc: 73:e6:cf:0c:f9:6e:51:70:33:fe:6b:7c:1c:81:ea: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DA:D6:AD:0D:B6:DA:19:15:6E:2E:AC:6B:3C:4C:2A:75:36:8D:96 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PtrWrQ222hkVbi6sazxMKnU2jZY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.52.0/23 Signature Algorithm: sha256WithRSAEncryption ba:99:28:aa:4d:c1:e4:c5:43:d5:5d:7b:68:0c:1d:93:73:07: 73:34:04:ac:4d:79:d6:63:82:b1:1a:07:76:3f:bc:cc:6d:2c: 98:1a:72:fc:de:9a:b6:d9:d2:6b:1c:59:77:9b:91:53:37:2e: 94:ef:7b:35:09:4b:a4:30:fd:7c:44:da:e7:e6:8c:6c:8f:85: 3f:f4:63:d7:56:ed:54:52:e0:9b:65:27:12:7c:66:1f:37:46: 32:35:83:c7:4a:13:d1:ee:a5:c2:df:94:d4:22:26:21:21:4b: d2:4f:c8:d8:3a:d9:c4:b4:93:98:2c:35:4f:65:17:f5:9f:7c: ac:9e:c7:4d:c4:d8:92:9a:df:1f:41:01:99:f4:ae:76:b8:6c: f0:39:0b:e8:f6:96:be:60:48:fa:d4:cb:47:d5:f8:5a:71:62: 7d:bd:72:20:ad:b1:40:2f:4c:cd:46:99:32:51:08:d5:85:39: 47:b5:61:a0:8a:50:28:1a:79:1f:2e:e7:05:ee:df:e4:96:5b: 41:1e:93:25:fb:be:0c:87:0e:c5:42:42:0c:a0:15:8b:54:80: 47:f6:51:88:44:73:f4:60:60:3c:a4:3e:71:09:97:ba:bf:fb: 24:85:36:1b:25:87:f8:22:0e:a8:ef:ee:c0:5e:46:fb:a6:03: e4:80:87:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNFREFENkFEMERCNkRB MTkxNTZFMkVBQzZCM0M0QzJBNzUzNjhEOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJAFLl+hzfrhZEZIWMvxZ4ELsU8uzBufGnrV6i+5ndKsTH8D1r 7qUo2EBoiYBVjyFWv9sKC0NIHN3DtE37czOJonSLjC+u4gdM4y8gHyoXhKzJ8YUJ G6CvDia1OGdoglS0KL/1EtfJlpOfJEUAQ4eaqS007yaFmwzjDmFuMaElwgbHd3ZZ nScZAexgqRESZw7N2oZysX18XsHjS0ygGjfKa8w+QLk2wJEly+ftQtVtv0m6PavH xKUsknEINixeZhQ0mhhkqvCkJBmcJah4ohFipvjfPK49zL1a2s4AYxM2AdyknkTg vIlMXE7xqeLM/HPmzwz5blFwM/5rfByB6nFTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPtrWrQ222hkVbi6sazxMKnU2jZYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1B0cldyUTIyMmhrVmJpNnNh enhNS25VMmpaWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq ATQwDQYJKoZIhvcNAQELBQADggEBALqZKKpNweTFQ9Vde2gMHZNzB3M0BKxNedZj grEaB3Y/vMxtLJgacvzemrbZ0mscWXebkVM3LpTvezUJS6Qw/XxE2ufmjGyPhT/0 Y9dW7VRS4JtlJxJ8Zh83RjI1g8dKE9HupcLflNQiJiEhS9JPyNg62cS0k5gsNU9l F/WffKyex03E2JKa3x9BAZn0rna4bPA5C+j2lr5gSPrUy0fV+FpxYn29ciCtsUAv TM1GmTJRCNWFOUe1YaCKUCgaeR8u5wXu3+SWW0EekyX7vgyHDsVCQgygFYtUgEf2 UYhEc/RgYDykPnEJl7q/+ySFNhslh/giDqjv7sBeRvumA+SAh5M= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org