$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWmaN2gySQH7r9tmLcZcfxuRT30.roa File: WWmaN2gySQH7r9tmLcZcfxuRT30.roa (raw, json) Hash identifier: 8NeKP2fhVdYSqPimcamV8gNCf1rFT5ZTuIQDI/MpjNo= Subject key identifier: 59:69:9A:37:68:32:49:01:FB:AF:DB:66:2D:C6:5C:7F:1B:91:4F:7D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28CC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWmaN2gySQH7r9tmLcZcfxuRT30.roa Signing time: Fri 01 Sep 2023 10:05:46 +0000 ROA not before: Fri 01 Sep 2023 10:05:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10444 (0x28cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=59699A3768324901FBAFDB662DC65C7F1B914F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:24:69:c1:a9:4e:74:06:6e:c3:86:f2:f0: 33:6f:b1:a2:7c:60:41:b3:33:f3:e6:42:57:f0:b3: 22:2b:8c:89:e2:6d:53:a5:2f:8c:e4:6a:7b:78:15: 43:93:03:ec:94:00:92:ef:2b:e5:71:fb:44:53:00: c8:51:62:af:b5:47:2c:99:aa:90:d2:b0:35:42:e8: ad:5d:bd:d2:93:01:ec:75:e7:25:15:60:a5:3d:eb: 5a:92:b1:a1:44:8b:e1:37:f2:21:19:22:91:43:fd: e4:c2:ff:fc:79:8e:39:f4:03:a4:87:6d:25:cb:1c: a9:db:fb:0e:19:96:b1:50:29:05:7d:ca:fd:e6:31: 13:2d:f0:36:a9:a0:ba:fb:83:37:a6:98:c7:3d:52: 2c:87:eb:b0:78:13:2e:46:6c:50:76:fe:32:ba:c2: ab:19:1d:39:05:74:47:9f:3d:4d:0c:be:32:4c:6a: 3f:af:29:ce:c2:7e:9b:4e:ae:7c:2b:30:83:bc:f0: c7:5a:b3:29:38:77:80:e4:75:42:c9:29:7d:b4:91: 1b:c7:f5:6d:10:d7:e1:7e:89:5d:88:02:3a:9f:db: 67:2c:38:72:9e:c6:b7:fd:a6:b1:71:98:ed:0f:31: 03:fd:fd:97:7b:be:07:29:85:2f:3c:81:29:95:6a: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:69:9A:37:68:32:49:01:FB:AF:DB:66:2D:C6:5C:7F:1B:91:4F:7D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWmaN2gySQH7r9tmLcZcfxuRT30.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.112.0/22 Signature Algorithm: sha256WithRSAEncryption 79:cc:a6:bf:28:ae:96:2d:65:b0:a3:d9:84:2f:fa:52:06:00: f4:49:09:06:9a:d6:40:43:1d:1b:34:71:d8:8c:ff:38:f0:1a: c3:bf:1d:cb:76:65:84:f5:96:84:56:3d:82:aa:8c:f8:e8:33: 3e:5d:30:20:af:f9:fa:f5:fb:de:f7:1a:7d:ce:21:8c:e3:3a: 96:ef:fc:02:3e:af:b2:3f:e6:0b:d8:18:02:09:1b:7c:11:f1: 87:a3:94:a7:1d:40:5d:0b:57:f1:09:8e:e0:de:1a:61:18:71: 5b:10:ea:d6:1d:d7:d0:72:b2:a7:73:30:aa:79:ea:ff:de:47: 8b:69:b9:c3:64:02:55:f6:e1:3d:a6:37:bb:28:a7:d2:b7:7b: 25:fd:58:4b:38:f2:f4:11:93:f0:a1:f9:e8:98:42:32:16:c1: e4:86:7a:b1:80:d0:f4:7c:51:36:9b:e4:13:b0:5c:0e:d4:39: be:76:b8:08:ae:eb:df:bd:93:d4:57:91:4a:8b:58:41:9c:c7: 8d:27:7a:0e:b0:9d:84:ca:66:4c:dc:df:90:cd:33:0d:d5:dd: 9c:8a:60:47:a6:81:7d:8c:df:d8:c5:12:eb:60:19:c0:7f:1a: 89:9e:9f:3b:a2:b6:2c:ca:0d:59:79:08:fd:df:4d:90:83:b6: d1:02:45:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU5Njk5QTM3NjgzMjQ5 MDFGQkFGREI2NjJEQzY1QzdGMUI5MTRGN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuWCRpwalOdAZuw4by8DNvsaJ8YEGzM/PmQlfwsyIrjInibVOl L4zkant4FUOTA+yUAJLvK+Vx+0RTAMhRYq+1RyyZqpDSsDVC6K1dvdKTAex15yUV YKU961qSsaFEi+E38iEZIpFD/eTC//x5jjn0A6SHbSXLHKnb+w4ZlrFQKQV9yv3m MRMt8DapoLr7gzemmMc9UiyH67B4Ey5GbFB2/jK6wqsZHTkFdEefPU0MvjJMaj+v Kc7CfptOrnwrMIO88Mdasyk4d4DkdULJKX20kRvH9W0Q1+F+iV2IAjqf22csOHKe xrf9prFxmO0PMQP9/Zd7vgcphS88gSmVah17AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWWmaN2gySQH7r9tmLcZcfxuRT30wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dXbWFOMmd5U1FIN3I5dG1M Y1pjZnh1UlQzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AXAwDQYJKoZIhvcNAQELBQADggEBAHnMpr8orpYtZbCj2YQv+lIGAPRJCQaa1kBD HRs0cdiM/zjwGsO/Hct2ZYT1loRWPYKqjPjoMz5dMCCv+fr1+973Gn3OIYzjOpbv /AI+r7I/5gvYGAIJG3wR8YejlKcdQF0LV/EJjuDeGmEYcVsQ6tYd19BysqdzMKp5 6v/eR4tpucNkAlX24T2mN7sop9K3eyX9WEs48vQRk/Ch+eiYQjIWweSGerGA0PR8 UTab5BOwXA7UOb52uAiu69+9k9RXkUqLWEGcx40neg6wnYTKZkzc35DNMw3V3ZyK YEemgX2M39jFEutgGcB/GomenzuitizKDVl5CP3fTZCDttECRXw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org