$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa File: VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa (raw, json) Hash identifier: xrUWjLQCjGdkbJWCwlcKdjGHTpOyyM+ehpuLo0iW074= Subject key identifier: 55:A2:68:41:DE:BF:18:AE:92:28:6C:1E:6C:AB:5B:A4:48:2F:C0:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2ACA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa Signing time: Fri 01 Sep 2023 10:08:18 +0000 ROA not before: Fri 01 Sep 2023 10:08:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 211.76.119.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10954 (0x2aca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=55A26841DEBF18AE92286C1E6CAB5BA4482FC0B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:45:82:1d:83:0f:c6:91:d0:78:74:ca:53: 7e:bf:ca:75:4e:7e:ba:80:a3:23:a3:ae:6e:54:e2: 9b:90:87:cb:87:af:d1:60:a2:f0:9e:75:4c:39:7f: 99:24:f0:ac:4e:93:a3:d7:dc:c4:94:c6:79:20:3d: 0e:58:47:88:8b:21:b4:45:f9:15:85:18:5b:8f:5b: 74:15:47:73:62:7f:6c:d9:61:13:e0:31:c1:79:f6: 24:73:52:f5:b5:3c:b8:22:1d:3a:f9:3b:2e:6f:56: 30:5f:31:bc:ff:55:23:0d:d8:f4:6b:df:e7:10:34: 47:61:59:03:0a:31:0d:fa:c1:c1:76:2f:5b:5f:15: b6:32:8c:95:79:56:d1:f7:dd:00:68:8f:85:cc:48: 50:83:31:72:50:dd:a2:7a:04:d5:59:8f:7e:62:8c: 92:ef:b3:98:17:60:86:e8:c4:1a:e3:88:a6:5d:fb: a2:4f:98:46:2e:74:6a:fc:49:8b:65:40:0c:d8:ab: 74:80:79:d8:3a:a0:b4:5e:d0:91:ee:f8:62:eb:9a: 12:30:e2:8b:d9:85:76:b6:43:ee:ba:fb:4d:2e:5d: a5:5f:90:00:30:df:40:72:2d:b5:68:01:56:8f:76: 1f:f5:00:dd:a1:01:67:14:0f:07:c7:72:19:4e:1c: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:68:41:DE:BF:18:AE:92:28:6C:1E:6C:AB:5B:A4:48:2F:C0:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.119.0/25 Signature Algorithm: sha256WithRSAEncryption 5e:44:01:26:39:27:fc:d5:87:7f:48:8f:69:60:e6:91:7f:dc: 41:1f:5c:33:1d:ca:a3:5c:58:b1:24:aa:a6:e9:ab:22:16:38: 46:22:8a:c0:1a:2e:71:be:31:e4:a9:68:01:61:1d:86:cc:5d: b6:f6:cf:32:8c:d8:3c:09:32:06:86:41:92:17:ac:e2:24:82: d9:50:2b:a6:49:c6:e6:a8:4a:2c:74:2d:d9:bb:55:20:18:77: 2c:c3:5d:db:43:25:29:4d:2c:39:ae:48:2a:fe:ee:6d:e8:83: 65:55:c4:b8:c4:c0:d0:1e:8d:8e:d8:11:2e:4b:1e:11:75:e8: 97:39:39:b5:3c:d7:30:31:0c:57:2f:02:1a:91:9b:01:3c:d4: c3:8e:b2:3e:ac:4b:9b:f4:95:78:ac:1b:8b:54:90:a1:f7:91: dd:21:c3:66:c4:35:7d:7d:15:ae:2f:84:a7:71:2a:37:ad:08: 33:aa:41:6d:e1:e6:e7:a7:ef:52:49:c4:4b:31:83:2d:a7:28: ec:3f:e4:0d:6e:bb:fe:44:c7:11:3b:0d:89:a5:96:5b:e2:3f: 5c:87:aa:b6:fc:fd:4a:80:16:54:c2:56:cd:4d:12:dd:18:6e: d5:85:a1:4c:1c:59:e6:51:ec:a2:55:33:dd:5e:4e:4e:08:14: 65:33:74:db -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU1QTI2ODQxREVCRjE4 QUU5MjI4NkMxRTZDQUI1QkE0NDgyRkMwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsDEWCHYMPxpHQeHTKU36/ynVOfrqAoyOjrm5U4puQh8uHr9Fg ovCedUw5f5kk8KxOk6PX3MSUxnkgPQ5YR4iLIbRF+RWFGFuPW3QVR3Nif2zZYRPg McF59iRzUvW1PLgiHTr5Oy5vVjBfMbz/VSMN2PRr3+cQNEdhWQMKMQ36wcF2L1tf FbYyjJV5VtH33QBoj4XMSFCDMXJQ3aJ6BNVZj35ijJLvs5gXYIboxBrjiKZd+6JP mEYudGr8SYtlQAzYq3SAedg6oLRe0JHu+GLrmhIw4ovZhXa2Q+66+00uXaVfkAAw 30ByLbVoAVaPdh/1AN2hAWcUDwfHchlOHDLtAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUVaJoQd6/GK6SKGwebKtbpEgvwLQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZhSm9RZDZfR0s2U0tHd2Vi S3RicEVndndMUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THcAMA0GCSqGSIb3DQEBCwUAA4IBAQBeRAEmOSf81Yd/SI9pYOaRf9xBH1wzHcqj XFixJKqm6asiFjhGIorAGi5xvjHkqWgBYR2GzF229s8yjNg8CTIGhkGSF6ziJILZ UCumScbmqEosdC3Zu1UgGHcsw13bQyUpTSw5rkgq/u5t6INlVcS4xMDQHo2O2BEu Sx4RdeiXOTm1PNcwMQxXLwIakZsBPNTDjrI+rEub9JV4rBuLVJCh95HdIcNmxDV9 fRWuL4SncSo3rQgzqkFt4ebnp+9SScRLMYMtpyjsP+QNbrv+RMcROw2JpZZb4j9c h6q2/P1KgBZUwlbNTRLdGG7VhaFMHFnmUeyiVTPdXk5OCBRlM3Tb -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org