$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa File: QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa (raw, json) Hash identifier: L2fOVjhC4BGIcnU3LlL8nVztgzDzEGxeZeQed5r8glA= Subject key identifier: 40:17:CD:3F:AC:86:79:52:E9:65:45:57:6C:90:BC:07:6C:06:83:8B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31E1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa Signing time: Mon 26 Aug 2024 05:31:02 +0000 ROA not before: Mon 26 Aug 2024 05:31:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12769 (0x31e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4017CD3FAC867952E96545576C90BC076C06838B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:ce:3c:a2:85:cd:0c:95:fd:96:4a:64:f3: 72:3d:b5:7d:41:3a:a6:ae:b7:98:8a:fc:61:5e:86: 60:94:34:fc:82:c5:58:f2:c0:e1:b8:06:42:70:14: 49:85:18:be:8c:1a:fb:13:08:8f:b4:cd:39:ed:73: 9c:fa:5b:93:58:d4:0b:73:f3:aa:cf:29:47:54:b0: ab:31:a3:a4:be:0e:61:7a:00:cf:b5:7b:2e:0e:73: 7f:04:9c:5e:98:ef:c1:57:88:59:f0:cb:7f:4c:0e: e7:d9:a3:a2:ff:92:55:cd:89:c6:a8:ee:e2:77:61: ef:56:f4:38:9f:30:c7:a5:a5:b5:e9:98:96:8f:d8: f1:09:65:a6:2c:1c:64:12:3c:a3:34:b8:91:cf:66: 40:33:c0:37:e7:e3:45:51:e7:38:00:5e:35:6a:fd: 9a:75:e9:63:5f:ea:bb:bd:2c:20:da:a0:74:2e:9c: 5b:06:bd:aa:5b:2a:6c:70:bb:d6:e8:c2:d5:6d:d3: 72:c7:95:65:42:10:f6:98:4d:0f:b2:7c:0a:d5:31: ad:30:de:cd:87:eb:8f:5f:8a:b2:c7:76:ba:ee:14: b4:e8:21:6a:a9:45:36:06:bc:c9:f4:2f:3a:ac:e2: 6c:be:44:fb:26:e1:4a:fc:48:ea:df:f2:c9:28:f2: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:17:CD:3F:AC:86:79:52:E9:65:45:57:6C:90:BC:07:6C:06:83:8B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBfNP6yGeVLpZUVXbJC8B2wGg4s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.172.0/22 Signature Algorithm: sha256WithRSAEncryption 99:d1:e5:87:f2:86:28:9f:91:ed:0a:61:31:ed:c7:02:33:be: 30:c7:72:1a:c5:2d:0e:05:fc:f7:c9:e2:49:c2:f9:fe:b4:23: da:bb:a2:c1:f0:67:e8:21:dc:9e:a2:3c:12:50:c2:75:18:d0: b3:92:03:82:9b:3d:91:d7:b6:dc:c4:18:98:3b:6e:d6:bd:5d: 41:42:1e:be:f6:8d:be:f7:9a:9f:58:45:8e:16:3d:2d:14:ed: 35:8d:d8:e2:b0:c6:f0:b7:4b:2f:3d:7f:b8:9b:77:5f:a1:93: 4e:d0:1c:5b:21:12:08:42:54:df:7f:e4:ea:0f:c3:20:f6:cc: 08:1c:72:92:9d:6e:1b:b1:f5:08:65:81:5f:8e:98:e2:fd:9b: 60:2b:74:63:22:44:ae:6b:14:65:6d:53:8b:8d:22:bb:1e:a4: fd:b8:5c:c8:57:82:c1:01:8d:97:5a:96:76:5f:c2:41:da:03: 4d:8e:97:d9:61:7b:58:dd:53:3e:e3:a3:19:91:5b:a5:2f:f7: 3e:9f:e6:9e:3d:a0:02:65:14:86:bb:13:17:8c:8e:c0:e5:5c: bb:43:2e:2b:b8:57:d0:c0:4b:67:0f:e0:6f:47:5f:c1:b3:c1: 64:7e:0c:42:c7:ec:4c:3f:f0:df:b2:fc:12:aa:87:82:db:e9: 16:e3:7c:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwMTdDRDNGQUM4Njc5 NTJFOTY1NDU1NzZDOTBCQzA3NkMwNjgzOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+Ds48ooXNDJX9lkpk83I9tX1BOqaut5iK/GFehmCUNPyCxVjy wOG4BkJwFEmFGL6MGvsTCI+0zTntc5z6W5NY1Atz86rPKUdUsKsxo6S+DmF6AM+1 ey4Oc38EnF6Y78FXiFnwy39MDufZo6L/klXNicao7uJ3Ye9W9DifMMelpbXpmJaP 2PEJZaYsHGQSPKM0uJHPZkAzwDfn40VR5zgAXjVq/Zp16WNf6ru9LCDaoHQunFsG vapbKmxwu9bowtVt03LHlWVCEPaYTQ+yfArVMa0w3s2H649firLHdrruFLToIWqp RTYGvMn0Lzqs4my+RPsm4Ur8SOrf8sko8qTnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQBfNP6yGeVLpZUVXbJC8B2wGg4swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FCZk5QNnlHZVZMcFpVVlhi SkM4QjJ3R2c0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AawwDQYJKoZIhvcNAQELBQADggEBAJnR5Yfyhiifke0KYTHtxwIzvjDHchrFLQ4F /PfJ4knC+f60I9q7osHwZ+gh3J6iPBJQwnUY0LOSA4KbPZHXttzEGJg7bta9XUFC Hr72jb73mp9YRY4WPS0U7TWN2OKwxvC3Sy89f7ibd1+hk07QHFshEghCVN9/5OoP wyD2zAgccpKdbhux9QhlgV+OmOL9m2ArdGMiRK5rFGVtU4uNIrsepP24XMhXgsEB jZdalnZfwkHaA02Ol9lhe1jdUz7joxmRW6Uv9z6f5p49oAJlFIa7ExeMjsDlXLtD Liu4V9DAS2cP4G9HX8GzwWR+DELH7Ew/8N+y/BKqh4Lb6RbjfEs= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org