$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TWhAJIIjvcmcLoxI-56iSydHDDQ.roa File: TWhAJIIjvcmcLoxI-56iSydHDDQ.roa (raw, json) Hash identifier: 0yIZ6sT7zrZHHj4bRTa1TEmS8aJtt/+AqriiN0QJ0S4= Subject key identifier: 4D:68:40:24:82:23:BD:C9:9C:2E:8C:48:FB:9E:A2:4B:27:47:0C:34 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AC5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TWhAJIIjvcmcLoxI-56iSydHDDQ.roa Signing time: Fri 01 Sep 2023 10:08:16 +0000 ROA not before: Fri 01 Sep 2023 10:08:16 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10949 (0x2ac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:16 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4D6840248223BDC99C2E8C48FB9EA24B27470C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e8:65:4d:c8:75:69:ea:d6:be:c8:2d:7a:c8: d9:42:32:27:f1:7f:2d:97:43:4e:e2:3b:40:97:6b: b4:97:2f:60:e2:be:e5:bb:c4:5e:31:7a:2d:e3:49: 56:76:09:10:53:06:eb:ea:d0:56:41:c0:c2:a3:56: af:0e:c6:13:96:ce:99:a2:5d:f6:47:e8:4e:d6:3e: 6e:e1:dc:79:2d:06:ae:20:9e:28:71:c8:99:73:d7: 2d:9b:85:07:f3:61:7f:f4:78:ba:25:8f:e0:b6:7b: a1:c3:53:81:45:de:27:96:6a:d3:5d:13:7c:23:bc: 92:df:1d:79:66:87:03:3d:be:94:7d:47:50:6e:04: 6a:f9:72:48:b0:f0:15:b1:3f:f8:82:75:07:74:64: bb:48:6c:4d:3c:68:9b:a2:aa:e7:da:a5:28:5c:1c: 14:79:3d:59:24:d2:05:a4:c7:a2:3d:67:56:d9:a3: 17:ec:12:5c:46:a3:cc:75:47:d3:7f:f4:d5:05:22: fd:c1:c1:9d:bd:ca:86:73:d6:da:2f:34:5a:5e:3a: 22:87:5c:d7:ec:f4:15:bf:14:36:22:79:7f:21:2d: 7c:55:53:81:d1:e3:b5:6c:ea:d7:e8:d2:24:31:19: 0a:c0:30:84:a3:01:c5:fa:bf:33:37:c2:89:89:ba: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:40:24:82:23:BD:C9:9C:2E:8C:48:FB:9E:A2:4B:27:47:0C:34 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TWhAJIIjvcmcLoxI-56iSydHDDQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.200.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:ae:fe:cc:a3:cc:87:a8:04:7a:2a:7a:b8:05:bd:6e:b7:06: 99:27:5a:41:79:ed:c6:a2:13:68:bf:3d:ed:11:28:0e:36:88: 1a:b5:a0:ef:87:5c:a1:fa:a4:91:37:f3:1c:ae:e1:6f:dd:36: 58:03:ea:77:6a:f4:79:59:67:02:dc:ff:93:42:31:fa:01:b4: 1a:14:20:7e:92:ff:8c:52:75:e8:ac:b6:5c:2d:01:ba:45:64: 0c:21:7f:e5:da:fe:50:20:e6:6a:94:9f:02:2f:c6:03:30:e1: a4:52:c0:85:19:59:4e:bf:44:08:fe:38:eb:5f:d5:9a:5e:34: 07:d4:c1:67:46:78:c8:8a:53:3c:f9:91:a7:69:1d:ae:da:f6: cd:d6:3c:90:b3:57:2f:f1:c4:3c:b0:c4:6f:ef:eb:03:04:de: fa:a7:6c:d3:be:5a:a7:60:41:b3:c1:b1:60:6d:35:7e:ca:4e: b5:b6:5e:56:10:b0:c3:9e:b8:1f:61:cc:ae:c8:51:40:47:c8: fd:86:bb:9c:9b:77:38:ad:f4:d0:4e:0d:6f:bf:97:87:d2:1a: 04:e6:52:f1:e8:8d:9a:00:6c:51:af:56:d9:33:34:49:83:c1: 52:b6:d2:a0:cc:ed:ee:42:d1:e3:61:de:74:1b:0e:c3:61:37: 08:f2:ff:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRENjg0MDI0ODIyM0JE Qzk5QzJFOEM0OEZCOUVBMjRCMjc0NzBDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ6GVNyHVp6ta+yC16yNlCMifxfy2XQ07iO0CXa7SXL2DivuW7 xF4xei3jSVZ2CRBTBuvq0FZBwMKjVq8OxhOWzpmiXfZH6E7WPm7h3HktBq4gnihx yJlz1y2bhQfzYX/0eLolj+C2e6HDU4FF3ieWatNdE3wjvJLfHXlmhwM9vpR9R1Bu BGr5ckiw8BWxP/iCdQd0ZLtIbE08aJuiqufapShcHBR5PVkk0gWkx6I9Z1bZoxfs ElxGo8x1R9N/9NUFIv3BwZ29yoZz1tovNFpeOiKHXNfs9BW/FDYieX8hLXxVU4HR 47Vs6tfo0iQxGQrAMISjAcX6vzM3womJumQhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTWhAJIIjvcmcLoxI+56iSydHDDQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RXaEFKSUlqdmNtY0xveEkt NTZpU3lkSEREUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6MgwDQYJKoZIhvcNAQELBQADggEBAJ2u/syjzIeoBHoqergFvW63BpknWkF57cai E2i/Pe0RKA42iBq1oO+HXKH6pJE38xyu4W/dNlgD6ndq9HlZZwLc/5NCMfoBtBoU IH6S/4xSdeistlwtAbpFZAwhf+Xa/lAg5mqUnwIvxgMw4aRSwIUZWU6/RAj+OOtf 1ZpeNAfUwWdGeMiKUzz5kadpHa7a9s3WPJCzVy/xxDywxG/v6wME3vqnbNO+Wqdg QbPBsWBtNX7KTrW2XlYQsMOeuB9hzK7IUUBHyP2Gu5ybdzit9NBODW+/l4fSGgTm UvHojZoAbFGvVtkzNEmDwVK20qDM7e5C0eNh3nQbDsNhNwjy/wc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org