$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa File: S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa (raw, json) Hash identifier: vCmYDBBMGQYg8g/M/ux4Ta8PQLz6rFDy40iz9LId2NE= Subject key identifier: 4B:43:69:B5:AC:C3:62:9D:86:D9:90:E6:68:56:94:27:5F:F1:6C:D2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28B2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa Signing time: Fri 01 Sep 2023 10:05:40 +0000 ROA not before: Fri 01 Sep 2023 10:05:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10418 (0x28b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:40 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4B4369B5ACC3629D86D990E6685694275FF16CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:80:fc:7e:f0:8a:99:a2:1a:11:6d:84:06: e3:f3:09:1f:1e:2a:67:26:ac:b8:ff:68:12:af:4a: b8:45:3b:b2:1b:8d:8a:61:c7:96:75:a6:31:35:6a: c7:90:dd:63:91:c1:3c:18:08:18:87:97:ef:41:7b: 44:d2:7f:87:f8:7b:fd:ba:d7:cd:0a:aa:02:87:68: c3:d1:bf:65:33:c5:95:69:e3:3b:86:bc:43:5c:c1: ff:d1:a4:0a:75:45:d6:da:ca:5e:7e:f9:90:fa:d8: 11:df:8c:01:07:51:5c:2b:b4:47:7d:49:a1:d6:0a: 10:1b:e3:18:65:d6:17:ae:72:04:ec:5d:3d:e9:cb: 8d:41:13:18:fc:ae:02:cf:cb:b3:96:a2:cf:64:d5: 49:bb:fa:2c:a9:91:9f:f6:66:75:44:97:fd:d5:01: 7d:85:cd:8b:35:19:bf:0a:c5:c9:eb:f6:60:d3:d7: f4:6d:6a:0e:05:3d:07:51:15:3a:54:0b:94:f2:86: e1:d3:ad:dc:e0:af:0e:0c:3f:c1:f1:c3:e1:71:06: 63:fe:42:5c:e9:ac:26:86:fc:51:91:0b:7d:83:4a: 44:53:8a:f4:ea:e2:34:f6:8d:10:9c:f9:99:ab:bb: e3:e4:2c:dd:e6:03:41:cb:73:b7:32:2d:43:6a:8f: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:43:69:B5:AC:C3:62:9D:86:D9:90:E6:68:56:94:27:5F:F1:6C:D2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.103.0/24 Signature Algorithm: sha256WithRSAEncryption ae:b8:cb:e7:28:18:54:16:ac:ae:4d:b9:57:25:c0:41:d9:59: 2f:30:a3:00:b9:c3:5b:1d:a2:d1:f1:95:bf:74:c7:eb:d9:6e: 6e:84:74:55:03:57:b5:e5:45:ac:98:b8:ab:5f:94:d3:2e:24: c2:31:53:6f:51:3a:a6:32:f9:a9:48:59:e9:d7:9d:cd:58:4b: 0b:a1:f8:9c:4b:9b:e7:4b:f4:0c:aa:b5:27:55:b1:b9:f7:a1: 34:4c:65:b7:c5:29:f1:fe:a4:30:1c:80:32:d0:c7:86:8e:ea: 45:aa:17:f4:bf:8f:c3:c1:28:6a:b7:ac:07:0f:9f:7f:73:92: 3b:31:da:bd:71:3f:1b:aa:00:86:1c:66:05:da:41:b8:b9:c0: 24:7d:a6:04:b4:b7:11:1f:32:81:9f:39:c1:59:2f:3f:d1:3d: 4c:64:fa:88:89:90:32:b7:ea:c9:83:11:5e:5b:77:9f:0f:95: c0:e8:5f:0b:69:0c:8b:65:89:42:f0:a5:19:28:9b:3b:e8:dc: 2b:9b:0b:72:6b:41:da:57:76:7f:04:56:fe:69:77:4b:19:2c: da:7d:b8:ee:91:4a:30:f6:32:cc:6b:b0:d3:b2:cd:50:b9:1b: 51:81:1d:99:aa:a6:24:bd:3d:8a:34:3c:f2:a5:e9:77:d3:9f: 00:63:a6:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRCNDM2OUI1QUNDMzYy OUQ4NkQ5OTBFNjY4NTY5NDI3NUZGMTZDRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJkoD8fvCKmaIaEW2EBuPzCR8eKmcmrLj/aBKvSrhFO7IbjYph x5Z1pjE1aseQ3WORwTwYCBiHl+9Be0TSf4f4e/26180KqgKHaMPRv2UzxZVp4zuG vENcwf/RpAp1Rdbayl5++ZD62BHfjAEHUVwrtEd9SaHWChAb4xhl1heucgTsXT3p y41BExj8rgLPy7OWos9k1Um7+iypkZ/2ZnVEl/3VAX2FzYs1Gb8Kxcnr9mDT1/Rt ag4FPQdRFTpUC5TyhuHTrdzgrw4MP8Hxw+FxBmP+QlzprCaG/FGRC32DSkRTivTq 4jT2jRCc+Zmru+PkLN3mA0HLc7cyLUNqj8MfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUS0NptazDYp2G2ZDmaFaUJ1/xbNIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1MwTnB0YXpEWXAyRzJaRG1h RmFVSjFfeGJOSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWcwDQYJKoZIhvcNAQELBQADggEBAK64y+coGFQWrK5NuVclwEHZWS8wowC5w1sd otHxlb90x+vZbm6EdFUDV7XlRayYuKtflNMuJMIxU29ROqYy+alIWenXnc1YSwuh +JxLm+dL9AyqtSdVsbn3oTRMZbfFKfH+pDAcgDLQx4aO6kWqF/S/j8PBKGq3rAcP n39zkjsx2r1xPxuqAIYcZgXaQbi5wCR9pgS0txEfMoGfOcFZLz/RPUxk+oiJkDK3 6smDEV5bd58PlcDoXwtpDItliULwpRkomzvo3CubC3JrQdpXdn8EVv5pd0sZLNp9 uO6RSjD2MsxrsNOyzVC5G1GBHZmqpiS9PYo0PPKl6XfTnwBjpkU= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org