$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VvxgCiwqmfIslHGaj6tUOoYE8Ig.roa File: VvxgCiwqmfIslHGaj6tUOoYE8Ig.roa (raw, json) Hash identifier: uNfWPF3DnfyumRkoXF8/PgsSeZjq6NrectD3we2yc4w= Subject key identifier: 56:FC:60:0A:2C:2A:99:F2:2C:94:71:9A:8F:AB:54:3A:86:04:F0:88 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30DA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VvxgCiwqmfIslHGaj6tUOoYE8Ig.roa Signing time: Mon 26 Aug 2024 05:29:53 +0000 ROA not before: Mon 26 Aug 2024 05:29:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12506 (0x30da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=56FC600A2C2A99F22C94719A8FAB543A8604F088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:c6:85:e7:6e:77:f1:e8:06:2d:17:76:05: 86:96:60:4e:c2:4a:17:e7:4a:e3:4e:fe:5a:e1:95: 31:1e:0e:0e:94:92:93:fd:8b:bc:70:61:cc:ae:bb: d4:1d:4d:7a:8c:d6:96:dc:e2:ff:d7:4a:f7:d4:58: dd:af:03:03:80:29:51:f1:c9:ca:64:ba:9b:4e:fa: d7:77:82:97:a0:05:27:ba:4c:e6:a5:70:54:e9:90: 6a:b6:bf:b9:ad:55:44:2a:87:fc:e6:2e:5e:22:27: 48:df:ff:1a:ea:57:f4:4e:4a:c5:c5:90:71:de:34: cb:42:a7:31:9a:1c:7f:6c:a4:58:6c:1c:73:d4:a3: 4a:9a:5a:35:71:1a:3a:4d:de:55:65:ea:a4:a9:68: 43:98:66:5f:cd:b1:f5:45:a5:93:fd:58:2c:b3:2a: e4:2d:b5:da:ed:19:57:f9:11:95:df:0f:a9:70:5e: eb:71:c9:2c:10:86:1c:d9:ac:47:ec:92:02:bd:d9: 7c:fa:10:95:f3:d2:07:35:0e:21:b6:ef:c5:61:99: 8b:f1:23:cd:4f:44:68:72:81:b1:cf:13:24:77:31: d2:1d:69:79:59:c8:1c:26:92:23:2c:3a:78:3a:5d: 4f:ad:d6:13:b1:7a:20:24:23:10:ab:4d:6e:57:c4: 02:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FC:60:0A:2C:2A:99:F2:2C:94:71:9A:8F:AB:54:3A:86:04:F0:88 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VvxgCiwqmfIslHGaj6tUOoYE8Ig.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.48.0/23 Signature Algorithm: sha256WithRSAEncryption 95:98:51:6e:e6:61:b0:28:70:ca:56:6f:f4:45:74:e2:69:4d: 4b:24:ad:c6:a2:4d:5b:b4:41:e3:a7:57:c8:3f:34:77:76:c2: 58:39:1f:3f:83:cb:52:66:18:8b:ed:00:0f:f2:b1:08:4a:ef: 42:4d:e7:0b:5f:99:71:fc:f3:2a:2a:50:e0:f4:5a:8e:d2:99: 56:1c:26:a3:aa:5d:3b:19:7c:54:78:b6:21:e5:5a:85:8d:5b: a7:e8:57:a8:ec:d6:ad:de:81:f2:b8:1e:df:b3:19:5b:c9:ef: 07:91:39:21:f4:0a:a9:62:7e:57:33:db:57:68:de:c2:ab:ff: 9a:e5:e9:a1:51:ac:44:c1:57:85:b4:6e:c0:da:34:1d:1f:5b: 03:39:74:6e:e4:a5:ee:0d:23:63:7a:95:14:41:01:6c:4c:34: c8:48:f7:4b:3e:3b:f6:eb:1b:f6:f8:8b:c7:a1:ba:ab:6e:c3: e3:20:3c:41:00:d0:ed:bc:d4:1a:fe:ed:aa:25:28:fc:ab:5e: c5:c2:40:7a:32:df:88:74:44:1d:d2:98:c6:ba:93:75:d1:88: 53:40:4b:bf:a0:a9:56:03:41:e8:ff:6c:d1:74:e8:f3:4c:d1: 13:c0:4f:60:36:80:83:b4:a0:9a:c3:b9:23:95:f2:8e:94:6d: d0:68:05:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU2RkM2MDBBMkMyQTk5 RjIyQzk0NzE5QThGQUI1NDNBODYwNEYwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiMcaF52538egGLRd2BYaWYE7CShfnSuNO/lrhlTEeDg6UkpP9 i7xwYcyuu9QdTXqM1pbc4v/XSvfUWN2vAwOAKVHxycpkuptO+td3gpegBSe6TOal cFTpkGq2v7mtVUQqh/zmLl4iJ0jf/xrqV/ROSsXFkHHeNMtCpzGaHH9spFhsHHPU o0qaWjVxGjpN3lVl6qSpaEOYZl/NsfVFpZP9WCyzKuQttdrtGVf5EZXfD6lwXutx ySwQhhzZrEfskgK92Xz6EJXz0gc1DiG278VhmYvxI81PRGhygbHPEyR3MdIdaXlZ yBwmkiMsOng6XU+t1hOxeiAkIxCrTW5XxALlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVvxgCiwqmfIslHGaj6tUOoYE8IgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1Z2eGdDaXdxbWZJc2xIR2Fq NnRVT29ZRThJZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq ATAwDQYJKoZIhvcNAQELBQADggEBAJWYUW7mYbAocMpWb/RFdOJpTUskrcaiTVu0 QeOnV8g/NHd2wlg5Hz+Dy1JmGIvtAA/ysQhK70JN5wtfmXH88yoqUOD0Wo7SmVYc JqOqXTsZfFR4tiHlWoWNW6foV6js1q3egfK4Ht+zGVvJ7weROSH0Cqliflcz21do 3sKr/5rl6aFRrETBV4W0bsDaNB0fWwM5dG7kpe4NI2N6lRRBAWxMNMhI90s+O/br G/b4i8ehuqtuw+MgPEEA0O281Br+7aolKPyrXsXCQHoy34h0RB3SmMa6k3XRiFNA S7+gqVYDQej/bNF06PNM0RPAT2A2gIO0oJrDuSOV8o6UbdBoBdQ= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org