$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RB4d4Q3Mby6Hp-c7rjiP3cAwjxk.roa File: RB4d4Q3Mby6Hp-c7rjiP3cAwjxk.roa (raw, json) Hash identifier: j2eQRaGZxRTbpG/5cNdcGhLYxtGpmzXq6cF0avYYsi8= Subject key identifier: 44:1E:1D:E1:0D:CC:6F:2E:87:A7:E7:3B:AE:38:8F:DD:C0:30:8F:19 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29C8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RB4d4Q3Mby6Hp-c7rjiP3cAwjxk.roa Signing time: Fri 01 Sep 2023 10:07:04 +0000 ROA not before: Fri 01 Sep 2023 10:07:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10696 (0x29c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=441E1DE10DCC6F2E87A7E73BAE388FDDC0308F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:f6:5c:94:90:d3:a3:37:67:69:4c:3a:d5: d9:cf:b3:4d:86:d0:c1:d3:dd:5e:65:5a:8b:b3:95: ec:74:3a:24:19:54:d8:9f:3e:3b:c7:ee:6b:43:a6: d0:7f:f3:0f:ee:28:67:59:9e:5c:b8:60:5e:90:7c: ed:9b:c1:52:02:7e:bd:28:e4:fa:aa:1e:e7:71:34: 95:5b:59:e8:71:fd:70:7a:51:83:1d:77:cc:09:76: 2a:45:40:6e:a2:01:9a:e8:17:c0:a8:69:dc:bd:27: 3e:ac:eb:79:99:5a:c1:c9:04:95:5f:3e:00:4d:f1: 2e:23:e1:b6:05:45:16:be:2d:b7:44:a3:b2:33:bc: a9:98:39:c1:64:89:96:6c:8c:b8:3d:c1:38:e3:34: cd:0f:dc:4b:bb:34:8e:88:fd:82:49:6b:e7:ca:b3: 87:a7:35:42:cf:08:8e:16:02:6b:fd:ca:47:2e:37: df:39:d6:7c:30:65:96:44:ef:84:b7:03:94:32:88: 09:94:37:1e:54:26:e3:78:06:6c:94:f0:ad:47:c8: 12:13:36:d9:fa:ea:36:85:5a:78:f8:4b:b2:83:b3: 3f:d1:d3:2c:da:09:10:ff:e4:50:fc:02:cf:d6:95: b9:ed:13:ef:be:8b:6c:86:40:92:ef:8d:ec:2b:3a: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1E:1D:E1:0D:CC:6F:2E:87:A7:E7:3B:AE:38:8F:DD:C0:30:8F:19 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RB4d4Q3Mby6Hp-c7rjiP3cAwjxk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.183.0/24 Signature Algorithm: sha256WithRSAEncryption 32:27:94:27:fa:dc:83:08:74:cb:a5:78:e0:88:c4:b4:47:78: 75:8a:a3:d3:40:16:ec:ec:4b:9e:7f:bc:db:11:93:34:99:1d: 08:e6:bf:e3:04:fb:a3:55:01:ec:34:1f:63:8f:f3:36:0f:ee: 9f:c1:c5:69:3e:de:66:ad:59:52:d5:0c:d6:d2:67:84:71:d3: e2:39:b7:9d:11:e4:bf:09:5d:20:7b:f7:7b:78:00:07:bc:27: 54:dc:56:f4:57:a9:ed:b6:11:06:b4:61:de:c0:78:4f:46:94: 03:bd:db:88:a3:21:fb:36:e7:7b:a0:ed:62:73:13:90:01:c6: 90:f5:69:d9:e1:83:79:f8:d3:06:44:9c:4d:64:3e:2f:4d:65: 80:fc:e0:a3:dd:08:87:5c:54:e1:63:3c:c2:28:1f:bc:e2:d3: 40:7e:cd:b7:23:4d:17:19:c7:f8:4b:07:95:5d:8e:64:b9:9e: 85:6a:e1:16:a2:41:f4:3d:ce:c2:13:be:16:22:fd:1b:4c:1d: c1:d0:c7:39:fb:e2:08:cf:6b:5b:0e:d7:5f:37:37:08:5f:9d: b6:ea:33:de:c1:0d:00:40:7a:ee:2c:36:cf:b9:f2:0f:3e:33: 24:b3:7e:03:d7:47:82:b8:b3:f2:cc:10:7d:f3:30:0a:e5:51: 50:e3:f0:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ0MUUxREUxMERDQzZG MkU4N0E3RTczQkFFMzg4RkREQzAzMDhGMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVxPZclJDTozdnaUw61dnPs02G0MHT3V5lWouzlex0OiQZVNif PjvH7mtDptB/8w/uKGdZnly4YF6QfO2bwVICfr0o5PqqHudxNJVbWehx/XB6UYMd d8wJdipFQG6iAZroF8Coady9Jz6s63mZWsHJBJVfPgBN8S4j4bYFRRa+LbdEo7Iz vKmYOcFkiZZsjLg9wTjjNM0P3Eu7NI6I/YJJa+fKs4enNULPCI4WAmv9ykcuN985 1nwwZZZE74S3A5QyiAmUNx5UJuN4BmyU8K1HyBITNtn66jaFWnj4S7KDsz/R0yza CRD/5FD8As/WlbntE+++i2yGQJLvjewrOmwLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURB4d4Q3Mby6Hp+c7rjiP3cAwjxkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JCNGQ0UTNNYnk2SHAtYzdy amlQM2NBd2p4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AbcwDQYJKoZIhvcNAQELBQADggEBADInlCf63IMIdMuleOCIxLRHeHWKo9NAFuzs S55/vNsRkzSZHQjmv+ME+6NVAew0H2OP8zYP7p/BxWk+3matWVLVDNbSZ4Rx0+I5 t50R5L8JXSB793t4AAe8J1TcVvRXqe22EQa0Yd7AeE9GlAO924ijIfs253ug7WJz E5ABxpD1adnhg3n40wZEnE1kPi9NZYD84KPdCIdcVOFjPMIoH7zi00B+zbcjTRcZ x/hLB5VdjmS5noVq4RaiQfQ9zsITvhYi/RtMHcHQxzn74gjPa1sO1183Nwhfnbbq M97BDQBAeu4sNs+58g8+MySzfgPXR4K4s/LMEH3zMArlUVDj8PI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org