$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QiVsJsrovAl6p-59CeTAKLYh854.roa File: QiVsJsrovAl6p-59CeTAKLYh854.roa (raw, json) Hash identifier: q6QXmCzZOur7HNY1T2qF/HcLKVpxnuwCqhJk27Q07TM= Subject key identifier: 42:25:6C:26:CA:E8:BC:09:7A:A7:EE:7D:09:E4:C0:28:B6:21:F3:9E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29F3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QiVsJsrovAl6p-59CeTAKLYh854.roa Signing time: Fri 01 Sep 2023 10:07:18 +0000 ROA not before: Fri 01 Sep 2023 10:07:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10739 (0x29f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=42256C26CAE8BC097AA7EE7D09E4C028B621F39E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d0:7e:e6:87:be:57:59:a6:05:36:52:f8:a1: 7f:4d:cc:44:32:75:9b:da:c0:ce:7d:3b:48:92:5b: 41:95:e1:18:0d:d1:40:9f:e3:91:af:c7:af:85:98: 3d:99:7f:1b:05:46:52:9a:75:a1:b5:a9:ac:80:4e: 11:99:2d:a3:b2:78:35:1b:84:ec:ce:26:4d:41:e7: a4:46:35:b8:ef:66:55:1b:d4:62:dd:29:4f:75:ce: 4a:55:7f:fd:a1:06:fd:19:bb:92:ea:d8:16:78:d3: 94:e0:d3:fc:c1:f4:68:46:78:e1:57:46:47:28:87: ff:2d:a3:a9:08:b2:eb:e8:be:41:58:63:f5:a0:da: 6c:08:68:23:81:0c:1e:9c:6b:ec:de:38:22:33:d7: 07:99:0e:07:a0:8c:d4:bf:a2:d5:55:3c:eb:4c:eb: 40:ca:ab:be:d0:a8:4d:28:8f:2f:33:21:52:f1:da: 41:0d:68:e3:d6:07:e1:9c:32:1a:f9:5c:68:8b:5f: 87:c5:93:a8:aa:39:f8:ef:5b:a8:8b:3f:45:98:d7: ab:8b:dc:77:25:9e:06:43:41:b7:0b:34:1b:00:4e: 45:c8:80:ea:83:91:9a:54:65:dd:4c:fc:4f:f3:ca: 58:b6:43:25:05:1e:48:67:8c:cf:54:6c:39:b8:7d: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:25:6C:26:CA:E8:BC:09:7A:A7:EE:7D:09:E4:C0:28:B6:21:F3:9E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QiVsJsrovAl6p-59CeTAKLYh854.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.36.0/22 Signature Algorithm: sha256WithRSAEncryption ae:b4:d7:9e:63:d0:2b:85:16:46:68:77:62:3f:2a:dd:62:96: 34:7d:b7:12:f7:6d:f5:3c:7c:85:a3:12:b6:34:2e:9b:64:b7: f1:17:c0:57:ce:d8:48:5d:17:d5:49:53:01:6c:98:fd:b6:bf: d7:56:13:f0:cd:01:3c:3a:e9:35:3c:50:98:6b:24:12:bc:b9: e0:2b:2f:7c:94:06:95:75:4c:a0:83:82:e4:d3:b8:53:75:c3: 0e:cd:ae:8a:c2:d1:31:62:2c:f3:82:2f:3f:25:90:12:fa:a8: b7:f6:97:ec:5a:c3:73:c3:47:58:f3:7d:32:48:8c:24:55:be: f9:1c:9c:5e:40:55:36:e3:a3:e5:13:24:f7:64:fb:95:de:ea: fa:fe:28:15:ce:d2:ee:c7:83:0d:33:90:bd:33:ff:5e:6f:5a: dc:9c:18:50:15:83:fb:b9:36:61:ec:f1:44:cc:67:db:a3:b8: 6f:b5:95:da:60:79:e2:ee:c6:61:d1:1c:41:4d:07:6d:5d:11: fd:b2:c0:e7:cc:08:28:d7:56:6b:5e:b6:1a:76:2b:fe:cc:bc: 34:b7:01:f5:46:ba:56:73:c7:a2:94:01:eb:f5:57:b5:a2:ee: 35:2c:ce:6f:aa:09:65:69:3f:a6:1f:87:49:9b:95:68:35:4d: c3:dc:4b:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyMjU2QzI2Q0FFOEJD MDk3QUE3RUU3RDA5RTRDMDI4QjYyMUYzOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj0H7mh75XWaYFNlL4oX9NzEQydZvawM59O0iSW0GV4RgN0UCf 45Gvx6+FmD2ZfxsFRlKadaG1qayAThGZLaOyeDUbhOzOJk1B56RGNbjvZlUb1GLd KU91zkpVf/2hBv0Zu5Lq2BZ405Tg0/zB9GhGeOFXRkcoh/8to6kIsuvovkFYY/Wg 2mwIaCOBDB6ca+zeOCIz1weZDgegjNS/otVVPOtM60DKq77QqE0ojy8zIVLx2kEN aOPWB+GcMhr5XGiLX4fFk6iqOfjvW6iLP0WY16uL3HclngZDQbcLNBsATkXIgOqD kZpUZd1M/E/zyli2QyUFHkhnjM9UbDm4fctFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQiVsJsrovAl6p+59CeTAKLYh854wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FpVnNKc3JvdkFsNnAtNTlD ZVRBS0xZaDg1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ASQwDQYJKoZIhvcNAQELBQADggEBAK60155j0CuFFkZod2I/Kt1iljR9txL3bfU8 fIWjErY0Lptkt/EXwFfO2EhdF9VJUwFsmP22v9dWE/DNATw66TU8UJhrJBK8ueAr L3yUBpV1TKCDguTTuFN1ww7NrorC0TFiLPOCLz8lkBL6qLf2l+xaw3PDR1jzfTJI jCRVvvkcnF5AVTbjo+UTJPdk+5Xe6vr+KBXO0u7Hgw0zkL0z/15vWtycGFAVg/u5 NmHs8UTMZ9ujuG+1ldpgeeLuxmHRHEFNB21dEf2ywOfMCCjXVmtethp2K/7MvDS3 AfVGulZzx6KUAev1V7Wi7jUszm+qCWVpP6Yfh0mblWg1TcPcS8I= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org