$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq-pBQx8Pf_UYsULhvTcxiUNx18.roa File: Qq-pBQx8Pf_UYsULhvTcxiUNx18.roa (raw, json) Hash identifier: kFycqyznKvvk0oxVIHrHw4YmVK+OdqW9ZwXoAUMgP6c= Subject key identifier: 42:AF:A9:05:0C:7C:3D:FF:D4:62:C5:0B:86:F4:DC:C6:25:0D:C7:5F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A8E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq-pBQx8Pf_UYsULhvTcxiUNx18.roa Signing time: Fri 01 Sep 2023 10:08:03 +0000 ROA not before: Fri 01 Sep 2023 10:08:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10894 (0x2a8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=42AFA9050C7C3DFFD462C50B86F4DCC6250DC75F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:8f:3f:a4:78:02:8e:36:28:7a:68:2b:6c: 62:b9:b2:6f:0e:84:90:8e:1c:e5:03:ee:3f:19:f6: 33:a9:4c:54:cf:b1:91:e8:03:83:91:71:58:fe:3b: d6:c0:b7:49:56:e8:b7:26:14:30:64:52:e4:1d:c0: c0:5a:7c:2e:57:26:7e:95:74:c5:6e:e4:c1:39:80: bc:71:4f:7f:58:5d:a5:2f:1a:26:9b:ad:d2:20:38: 5d:d4:a5:c0:f8:a8:82:c3:f9:e1:86:ba:0f:4c:fc: ff:4e:20:c7:29:c4:7f:a1:af:41:00:77:6b:88:99: 12:cc:76:81:53:38:24:0c:7c:dd:fd:5b:93:72:61: 5c:ba:98:1f:e8:6d:a8:eb:30:50:05:d2:14:88:45: c8:a1:97:1a:ed:fd:96:65:0c:89:68:4c:30:9b:fe: 4f:65:73:c0:5d:91:db:de:3d:ad:a1:30:01:37:07: c5:06:88:1c:30:c8:8f:38:bb:ab:b3:a8:cf:16:1c: 0c:1b:55:27:9d:01:5d:32:5e:90:8a:ff:a5:a7:ae: 26:3e:56:34:4e:66:87:4f:92:9c:61:cf:eb:a0:b9: bb:d1:a3:2a:85:54:51:b0:e7:fd:2c:32:5e:f3:d6: 0d:16:f4:27:63:34:98:ca:2d:0b:56:d8:20:29:29: 85:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:A9:05:0C:7C:3D:FF:D4:62:C5:0B:86:F4:DC:C6:25:0D:C7:5F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq-pBQx8Pf_UYsULhvTcxiUNx18.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.8.0/22 Signature Algorithm: sha256WithRSAEncryption 07:7e:c6:df:92:a6:4e:4a:b7:e2:39:39:1d:cc:f4:60:4a:d2: 80:8d:d7:5f:b3:60:26:47:6a:6f:be:47:7a:d7:4e:cc:b7:f8: 44:95:4c:7d:6e:db:98:c3:70:7f:eb:8b:4c:52:35:e4:51:ed: 44:d5:fb:fb:f5:62:1e:3a:4d:f4:e8:0b:89:5f:f0:97:5a:4f: c8:66:62:cd:7e:4e:b2:73:bd:37:a7:0f:1b:eb:85:76:54:c0: 1d:1f:85:4e:2c:f7:5e:4b:67:f1:b8:bd:d4:ed:c9:9f:44:f5: de:5f:6d:46:70:25:69:b3:75:50:1e:b0:8f:6f:ca:6a:43:22: e2:1f:e9:54:98:02:ee:e8:bd:ad:3f:1b:a0:39:02:98:cb:68: d0:7c:3a:e5:3e:0c:03:11:0a:0a:09:29:11:74:78:87:da:86: cf:36:50:8b:36:9f:e2:bc:c6:00:95:e7:bf:7d:e8:11:a0:1b: 07:94:87:7d:b4:1b:b4:39:28:a9:2a:5c:77:8b:65:25:43:f7: 10:7f:b1:1f:98:8c:91:78:fa:84:6c:f4:8f:f1:11:d5:2e:8c: e6:85:d6:ff:f6:3e:ed:52:0a:80:9b:07:e2:b7:c7:2d:88:8b: a5:83:58:0d:b5:4b:cb:9e:7e:82:d3:81:e5:b1:5a:60:25:a7: 9c:71:ac:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyQUZBOTA1MEM3QzNE RkZENDYyQzUwQjg2RjREQ0M2MjUwREM3NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUFo8/pHgCjjYoemgrbGK5sm8OhJCOHOUD7j8Z9jOpTFTPsZHo A4ORcVj+O9bAt0lW6LcmFDBkUuQdwMBafC5XJn6VdMVu5ME5gLxxT39YXaUvGiab rdIgOF3UpcD4qILD+eGGug9M/P9OIMcpxH+hr0EAd2uImRLMdoFTOCQMfN39W5Ny YVy6mB/obajrMFAF0hSIRcihlxrt/ZZlDIloTDCb/k9lc8BdkdvePa2hMAE3B8UG iBwwyI84u6uzqM8WHAwbVSedAV0yXpCK/6WnriY+VjROZodPkpxhz+ugubvRoyqF VFGw5/0sMl7z1g0W9CdjNJjKLQtW2CApKYV5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQq+pBQx8Pf/UYsULhvTcxiUNx18wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FxLXBCUXg4UGZfVVlzVUxo dlRjeGlVTngxOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AQgwDQYJKoZIhvcNAQELBQADggEBAAd+xt+Spk5Kt+I5OR3M9GBK0oCN11+zYCZH am++R3rXTsy3+ESVTH1u25jDcH/ri0xSNeRR7UTV+/v1Yh46TfToC4lf8JdaT8hm Ys1+TrJzvTenDxvrhXZUwB0fhU4s915LZ/G4vdTtyZ9E9d5fbUZwJWmzdVAesI9v ympDIuIf6VSYAu7ova0/G6A5ApjLaNB8OuU+DAMRCgoJKRF0eIfahs82UIs2n+K8 xgCV57996BGgGweUh320G7Q5KKkqXHeLZSVD9xB/sR+YjJF4+oRs9I/xEdUujOaF 1v/2Pu1SCoCbB+K3xy2Ii6WDWA21S8uefoLTgeWxWmAlp5xxrPQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org