$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UwX-5LPs7B7npKWfqJ4IDBPfrCA.roa File: UwX-5LPs7B7npKWfqJ4IDBPfrCA.roa (raw, json) Hash identifier: FDl1unOsOlFD7cwh3RBXu7GJl3GktbsMCDlHA1hZrlo= Subject key identifier: 53:05:FE:E4:B3:EC:EC:1E:E7:A4:A5:9F:A8:9E:08:0C:13:DF:AC:20 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27EB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UwX-5LPs7B7npKWfqJ4IDBPfrCA.roa Signing time: Fri 01 Sep 2023 10:04:43 +0000 ROA not before: Fri 01 Sep 2023 10:04:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10219 (0x27eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5305FEE4B3ECEC1EE7A4A59FA89E080C13DFAC20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:0f:71:27:4d:bd:cb:96:3f:e8:a9:03:29: 23:79:04:18:de:36:e9:51:ca:91:44:11:cd:9c:20: fd:ca:a5:c7:5f:5f:c2:f4:9c:b4:bc:54:be:22:96: 3e:01:fb:d4:5b:35:53:ea:81:ff:2a:9b:46:ba:e2: b6:30:19:5c:49:b8:2d:49:5f:09:db:31:f1:52:66: ff:af:66:40:15:6f:f5:b4:c3:91:be:b4:f0:83:1f: 73:b3:5c:f7:9a:75:5d:62:49:38:48:1f:71:a1:b4: f5:05:8b:ad:4f:3f:f7:77:e3:75:26:90:63:25:ae: f5:a4:98:1e:0d:da:60:2f:e2:3f:c6:93:c2:4a:ce: 27:b8:f7:14:b5:09:16:56:f8:c6:5f:e9:20:bf:1d: 5d:5f:92:15:09:2b:3f:63:0f:be:ed:d2:ee:62:e5: a5:72:b4:a7:53:3f:28:a0:e0:d5:25:59:92:ad:0a: b1:6e:bd:73:18:ff:00:3d:d8:c4:0f:9d:3d:f0:5d: 86:b8:ff:6c:54:9b:3a:66:e7:58:ca:30:98:3c:9f: df:5f:80:79:ee:8e:e7:ea:a4:e9:1d:13:b3:bd:39: 1f:63:0b:d5:24:80:53:36:1d:a4:f0:ff:6b:75:33: 64:fa:92:7f:b6:7b:45:af:03:d3:04:a7:0f:68:a0: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:FE:E4:B3:EC:EC:1E:E7:A4:A5:9F:A8:9E:08:0C:13:DF:AC:20 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UwX-5LPs7B7npKWfqJ4IDBPfrCA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.136.0/22 Signature Algorithm: sha256WithRSAEncryption b4:d6:22:8e:72:1b:1e:55:80:6b:64:5c:6a:dc:ea:ac:ee:1a: 0a:57:a7:84:aa:bb:59:13:bb:4e:8c:53:fb:cc:a6:55:b8:6c: eb:5b:16:43:8c:2f:b2:23:83:59:47:97:8f:c7:4b:a0:29:85: cb:f8:c9:db:f2:63:cd:82:a7:2c:72:bf:5e:44:48:2e:d8:fe: 3f:3c:78:5d:e5:4c:3b:d2:1f:09:6c:6a:03:6a:bd:a6:26:a2: 21:ba:16:31:4e:2f:9b:c3:ca:fe:bb:e4:ea:66:6b:57:38:4f: 0b:52:0e:95:7b:ba:e6:fb:21:5a:78:72:70:83:79:88:9e:06: b4:95:9b:85:37:b1:35:3d:d2:29:90:da:14:99:5a:46:b3:57: 69:f3:3a:1b:08:e1:d9:65:5b:a0:44:66:d2:c2:62:04:c1:e4: 18:c4:14:90:e9:75:d1:b4:23:3e:44:dd:67:a9:fc:84:ba:ea: c9:fc:70:ed:e8:d5:12:4b:0f:c1:67:3d:96:a9:96:13:ff:15: 76:81:54:9b:71:c1:1d:34:ee:fd:70:79:a5:bb:f8:3f:b3:65: 57:ba:67:1a:05:35:86:ef:cc:d3:c6:5f:77:1b:89:01:bd:40: 33:d7:15:0c:eb:c2:0d:1d:f9:0d:b0:cd:68:ce:e6:ed:29:64: c3:d0:a3:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUzMDVGRUU0QjNFQ0VD MUVFN0E0QTU5RkE4OUUwODBDMTNERkFDMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPmA9xJ029y5Y/6KkDKSN5BBjeNulRypFEEc2cIP3KpcdfX8L0 nLS8VL4ilj4B+9RbNVPqgf8qm0a64rYwGVxJuC1JXwnbMfFSZv+vZkAVb/W0w5G+ tPCDH3OzXPeadV1iSThIH3GhtPUFi61PP/d343UmkGMlrvWkmB4N2mAv4j/Gk8JK zie49xS1CRZW+MZf6SC/HV1fkhUJKz9jD77t0u5i5aVytKdTPyig4NUlWZKtCrFu vXMY/wA92MQPnT3wXYa4/2xUmzpm51jKMJg8n99fgHnujufqpOkdE7O9OR9jC9Uk gFM2HaTw/2t1M2T6kn+2e0WvA9MEpw9ooD7fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUwX+5LPs7B7npKWfqJ4IDBPfrCAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1V3WC01TFBzN0I3bnBLV2Zx SjRJREJQZnJDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AYgwDQYJKoZIhvcNAQELBQADggEBALTWIo5yGx5VgGtkXGrc6qzuGgpXp4Squ1kT u06MU/vMplW4bOtbFkOML7Ijg1lHl4/HS6Aphcv4ydvyY82Cpyxyv15ESC7Y/j88 eF3lTDvSHwlsagNqvaYmoiG6FjFOL5vDyv675Opma1c4TwtSDpV7uub7IVp4cnCD eYieBrSVm4U3sTU90imQ2hSZWkazV2nzOhsI4dllW6BEZtLCYgTB5BjEFJDpddG0 Iz5E3Wep/IS66sn8cO3o1RJLD8FnPZaplhP/FXaBVJtxwR007v1weaW7+D+zZVe6 ZxoFNYbvzNPGX3cbiQG9QDPXFQzrwg0d+Q2wzWjO5u0pZMPQo8I= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org