$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RjgmROj1_ox-IohKdiiVvm5x3s0.roa File: RjgmROj1_ox-IohKdiiVvm5x3s0.roa (raw, json) Hash identifier: BJm8S2X3K6wDS0a3FrD3ljsHxNTpGbp8X2gLsRUsluM= Subject key identifier: 46:38:26:44:E8:F5:FE:8C:7E:22:88:4A:76:28:95:BE:6E:71:DE:CD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29BF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RjgmROj1_ox-IohKdiiVvm5x3s0.roa Signing time: Fri 01 Sep 2023 10:07:02 +0000 ROA not before: Fri 01 Sep 2023 10:07:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00:ff05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10687 (0x29bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=46382644E8F5FE8C7E22884A762895BE6E71DECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:5f:8e:7d:f6:c6:cb:05:4c:bd:c5:da:76: 65:ae:e6:a1:44:6d:87:68:2f:5f:15:e5:cf:0d:be: 7b:15:ac:4a:3f:32:82:ae:25:a0:5e:f3:33:e2:86: 8b:7e:01:a7:e9:0b:b2:bb:b7:69:0a:88:a0:c4:03: 35:53:c9:04:23:85:d6:52:1f:74:d1:eb:82:58:75: 27:4b:e0:66:78:8b:ff:1f:69:c7:c0:fc:80:0f:a4: 3e:5d:e5:11:16:46:9e:48:ec:ed:ff:47:bc:8b:95: f3:7e:68:e2:91:d6:4d:0b:5b:11:ed:ad:b0:76:4f: c3:09:a3:26:c0:72:f3:b4:0e:dd:6e:6a:b6:02:7b: 77:f4:f8:e9:6a:b6:a7:92:a4:dd:cb:aa:e6:88:46: 9e:45:09:68:16:2f:a8:17:76:1b:40:d4:b6:54:6d: ed:33:23:8b:3b:53:c9:a4:28:f5:d8:d1:57:34:9c: ee:da:d6:35:27:d9:99:a1:54:65:3b:22:6a:10:fe: 7d:bc:93:24:2b:8d:34:6d:87:d0:03:24:f5:3a:5d: c6:cd:bb:23:c5:77:2c:bf:55:29:50:91:a7:91:13: 72:4f:34:e0:48:2c:bc:22:6d:71:11:2b:1d:c3:b1: f8:c5:f4:18:58:cb:b3:01:9b:03:ad:a0:10:1f:67: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:38:26:44:E8:F5:FE:8C:7E:22:88:4A:76:28:95:BE:6E:71:DE:CD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RjgmROj1_ox-IohKdiiVvm5x3s0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff05::/48 Signature Algorithm: sha256WithRSAEncryption 82:0e:f1:8c:ac:c7:5d:05:74:72:ea:df:80:9e:c5:da:94:2b: 64:7d:05:cf:ae:49:1e:fc:d8:0a:40:29:b2:73:1b:58:ad:da: b4:a9:06:d6:bd:91:b5:60:02:59:3f:c4:ef:07:22:69:70:98: c6:b8:cf:0c:64:8a:84:b9:d1:0b:89:9c:e0:02:b0:a1:91:31: d1:6b:c8:a6:d3:60:89:be:0a:7e:e6:9e:17:4b:fe:26:b4:24: 2e:61:a8:98:d9:23:6b:d5:fc:ad:e1:8b:c0:01:0a:9f:42:be: 96:45:80:df:9d:39:96:a1:94:58:68:ce:9b:93:c0:00:a2:96: db:1b:ea:52:54:bb:b3:95:44:f3:df:e5:2b:9a:48:3c:c7:08: 82:99:af:a9:5b:42:0c:23:e7:42:3b:30:78:1d:d8:07:e6:d6: 8a:eb:e2:59:66:c9:c1:77:20:d3:a3:5e:5a:82:00:1a:56:ac: 8e:f3:01:e5:10:c4:c4:ce:bd:28:cb:94:4b:39:00:a4:9a:83: 5a:9c:37:4b:16:78:6e:75:16:59:3d:5f:ca:02:2b:4b:67:85: dc:5b:49:44:52:f7:c2:f7:56:c4:20:a2:3f:67:bd:b6:7b:9b: 99:25:bb:52:67:d3:e5:75:4b:8c:e7:35:8c:ef:08:b0:e7:ad: 50:5b:38:8d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICKb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ2MzgyNjQ0RThGNUZF OEM3RTIyODg0QTc2Mjg5NUJFNkU3MURFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCU1+OffbGywVMvcXadmWu5qFEbYdoL18V5c8NvnsVrEo/MoKu JaBe8zPihot+AafpC7K7t2kKiKDEAzVTyQQjhdZSH3TR64JYdSdL4GZ4i/8facfA /IAPpD5d5REWRp5I7O3/R7yLlfN+aOKR1k0LWxHtrbB2T8MJoybAcvO0Dt1uarYC e3f0+OlqtqeSpN3LquaIRp5FCWgWL6gXdhtA1LZUbe0zI4s7U8mkKPXY0Vc0nO7a 1jUn2ZmhVGU7ImoQ/n28kyQrjTRth9ADJPU6XcbNuyPFdyy/VSlQkaeRE3JPNOBI LLwibXERKx3DsfjF9BhYy7MBmwOtoBAfZwh1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQURjgmROj1/ox+IohKdiiVvm5x3s0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JqZ21ST2oxX294LUlvaEtk aWlWdm01eDNzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wUwDQYJKoZIhvcNAQELBQADggEBAIIO8Yysx10FdHLq34CexdqUK2R9Bc+u SR782ApAKbJzG1it2rSpBta9kbVgAlk/xO8HImlwmMa4zwxkioS50QuJnOACsKGR MdFryKbTYIm+Cn7mnhdL/ia0JC5hqJjZI2vV/K3hi8ABCp9CvpZFgN+dOZahlFho zpuTwACiltsb6lJUu7OVRPPf5SuaSDzHCIKZr6lbQgwj50I7MHgd2Afm1orr4llm ycF3INOjXlqCABpWrI7zAeUQxMTOvSjLlEs5AKSag1qcN0sWeG51Flk9X8oCK0tn hdxbSURS98L3VsQgoj9nvbZ7m5klu1Jn0+V1S4znNYzvCLDnrVBbOI0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org