$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa File: RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa (raw, json) Hash identifier: hlC90jhOEHbjcsy3lBbt0ubnDhVR2zLdPKck0jIZL2Y= Subject key identifier: 44:86:AA:C9:0F:F6:40:22:BA:AA:58:44:49:A1:C0:02:9F:16:25:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AF6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa Signing time: Fri 01 Sep 2023 10:08:29 +0000 ROA not before: Fri 01 Sep 2023 10:08:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10998 (0x2af6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4486AAC90FF64022BAAA584449A1C0029F1625DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:c6:14:ac:11:c9:60:95:c3:60:b3:fc:19: 76:1f:5e:0c:44:4d:98:95:d1:f6:c1:97:eb:f9:f1: 6f:10:2a:23:13:92:a2:5b:5d:6f:02:5b:26:41:e1: 3e:02:42:8a:55:7e:3a:9e:98:57:40:ad:fa:a8:46: 8b:5f:15:95:82:fc:bd:1e:5f:3a:44:d4:2b:b0:85: e8:eb:27:1a:97:4f:61:38:ab:5e:8a:1f:eb:c2:46: 7a:17:3e:08:5d:02:d0:30:58:27:b0:99:0a:04:3d: 13:5e:ed:b4:47:b8:af:80:42:ab:27:f0:73:aa:06: 30:f3:ee:a5:56:37:d9:32:43:06:7a:65:e8:6c:21: 6b:4c:d6:bc:2b:17:5f:b3:00:9c:78:35:c2:5e:1e: d4:c1:4e:ea:c2:f2:96:c7:9d:a9:28:d0:60:8a:9a: d9:79:fb:67:7b:0f:ad:50:0d:99:e0:5c:34:8f:3a: a4:c3:b1:9c:7d:48:59:3e:c9:a7:55:47:c9:a1:29: 1f:89:77:8d:f5:46:6f:04:51:eb:73:6b:59:5a:ba: 63:38:90:2c:b3:18:01:df:6d:bc:eb:72:19:83:9c: f0:56:ee:8b:26:44:f9:01:53:0d:18:d7:bb:f8:6f: b3:e5:d6:45:98:fd:78:ea:0a:8f:a9:5c:4c:19:8b: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:86:AA:C9:0F:F6:40:22:BA:AA:58:44:49:A1:C0:02:9F:16:25:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.122.0/23 Signature Algorithm: sha256WithRSAEncryption b1:05:f8:34:80:38:97:2e:d2:ca:52:65:d7:31:81:7f:cf:fe: 91:f7:ec:a0:ee:50:8e:e6:2e:18:d5:be:97:6d:bc:6e:8f:f7: 94:68:c9:18:ad:b0:02:57:13:e6:fd:90:b3:61:c8:8e:49:72: 8f:0b:17:07:04:10:ed:14:a6:35:97:ca:b4:f8:ac:8e:b2:dd: ac:07:28:60:15:87:be:d4:47:27:a6:db:a4:b2:45:64:62:48: b6:e5:a2:97:db:5f:34:20:f8:2c:3d:ea:78:cb:f3:72:d6:55: e0:2c:77:e8:46:de:f8:40:f3:a4:99:9c:85:9d:a2:39:1e:70: e0:3e:39:20:1c:8a:ea:b0:da:b1:a0:af:ba:b9:92:47:64:75: 3b:26:2f:81:9d:bb:64:1a:2b:92:6d:35:8f:ae:eb:df:b8:78: 8c:b3:02:9c:c3:57:e1:53:5a:3a:bd:b6:b1:07:82:20:c8:69: a8:a4:15:61:da:b8:c0:f3:cc:70:90:d9:9b:10:41:91:be:e3: b3:bc:1b:d5:8b:25:0f:31:78:6b:fc:85:a1:bb:38:9c:2e:ec: bc:4f:d8:69:92:37:84:a7:ba:b0:2d:f8:ed:eb:db:c5:7b:15: a1:1e:3d:c2:bb:c8:99:06:dc:e7:fa:64:31:c9:d2:a8:23:95: 3b:b7:5e:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ0ODZBQUM5MEZGNjQw MjJCQUFBNTg0NDQ5QTFDMDAyOUYxNjI1REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5wsYUrBHJYJXDYLP8GXYfXgxETZiV0fbBl+v58W8QKiMTkqJb XW8CWyZB4T4CQopVfjqemFdArfqoRotfFZWC/L0eXzpE1CuwhejrJxqXT2E4q16K H+vCRnoXPghdAtAwWCewmQoEPRNe7bRHuK+AQqsn8HOqBjDz7qVWN9kyQwZ6Zehs IWtM1rwrF1+zAJx4NcJeHtTBTurC8pbHnako0GCKmtl5+2d7D61QDZngXDSPOqTD sZx9SFk+yadVR8mhKR+Jd431Rm8EUetza1laumM4kCyzGAHfbbzrchmDnPBW7osm RPkBUw0Y17v4b7Pl1kWY/XjqCo+pXEwZi3rxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURIaqyQ/2QCK6qlhESaHAAp8WJdwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JJYXF5UV8yUUNLNnFsaEVT YUhBQXA4V0pkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6XowDQYJKoZIhvcNAQELBQADggEBALEF+DSAOJcu0spSZdcxgX/P/pH37KDuUI7m LhjVvpdtvG6P95RoyRitsAJXE+b9kLNhyI5Jco8LFwcEEO0UpjWXyrT4rI6y3awH KGAVh77URyem26SyRWRiSLblopfbXzQg+Cw96njL83LWVeAsd+hG3vhA86SZnIWd ojkecOA+OSAciuqw2rGgr7q5kkdkdTsmL4Gdu2QaK5JtNY+u69+4eIyzApzDV+FT Wjq9trEHgiDIaaikFWHauMDzzHCQ2ZsQQZG+47O8G9WLJQ8xeGv8haG7OJwu7LxP 2GmSN4SnurAt+O3r28V7FaEePcK7yJkG3Of6ZDHJ0qgjlTu3XmE= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org