$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wua4VjYEkPAIF2OfLuO4Iucvypk.roa File: Wua4VjYEkPAIF2OfLuO4Iucvypk.roa (raw, json) Hash identifier: KifhUZ0Qzdj0fFF3sjtNL4lUCp4N5eGnfrT2M3LzKvI= Subject key identifier: 5A:E6:B8:56:36:04:90:F0:08:17:63:9F:2E:E3:B8:22:E7:2F:CA:99 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27CC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wua4VjYEkPAIF2OfLuO4Iucvypk.roa Signing time: Fri 01 Sep 2023 10:04:33 +0000 ROA not before: Fri 01 Sep 2023 10:04:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10188 (0x27cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5AE6B856360490F00817639F2EE3B822E72FCA99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:fc:73:f0:4a:3a:67:a3:d0:2b:51:21:26: 02:bc:f0:94:cf:dd:a2:59:bf:bd:cb:d1:1f:d3:51: 8a:03:d2:e9:fe:c7:a7:8d:ac:e6:32:56:86:d7:16: 86:a4:b4:75:d4:98:8e:81:ea:bd:72:c8:1c:18:34: 12:68:8a:fa:db:e9:73:68:5d:66:04:4b:fc:93:b1: 31:d2:f6:fa:69:00:06:93:bd:c1:da:72:2e:89:54: 5c:68:0b:8c:33:3b:d8:ed:ae:48:ed:e4:99:d7:74: 9b:7b:9e:78:c9:a0:9d:bc:47:3b:53:bd:09:3d:93: cf:f7:8e:e3:36:df:c9:f4:2c:9f:0c:91:c7:0c:5c: 1b:e4:f5:0b:ca:9d:d9:fa:5a:ae:a5:3d:21:85:4a: 8e:b4:2f:c7:66:32:86:25:90:0e:22:87:46:f0:1a: 2b:f4:fa:32:d9:59:d6:00:50:6d:97:a6:44:6f:7a: 3f:4f:4f:e2:4f:19:c7:2c:1f:bb:59:44:ba:18:63: 0c:a3:1e:8e:60:a4:78:e3:9d:57:62:43:3f:3d:ee: 57:08:68:21:d1:38:22:05:f0:af:57:57:23:63:fd: e3:cd:5f:cf:9a:08:92:5d:dc:cd:e8:9b:8b:35:6b: 2f:e0:8c:48:b3:82:61:d8:5e:aa:f0:06:02:1c:b9: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E6:B8:56:36:04:90:F0:08:17:63:9F:2E:E3:B8:22:E7:2F:CA:99 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wua4VjYEkPAIF2OfLuO4Iucvypk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.88.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:12:c1:5d:78:16:dc:0d:39:56:5b:55:23:bf:41:3e:16:31: 0d:92:48:c9:f6:86:fd:9a:78:1f:db:3d:56:f6:7b:87:29:bf: 66:f9:36:5a:e2:42:87:90:a5:71:b3:5a:b8:28:33:11:3e:1d: 59:5b:08:0e:bf:1a:f2:5d:9c:a5:97:67:a6:15:f4:be:2f:76: 97:3f:5e:7a:49:3a:88:2d:ae:0c:0c:b7:89:83:4b:6b:9a:8a: 1e:51:7f:4b:17:0e:24:7a:89:0e:cc:91:e0:51:77:49:04:4d: c1:4f:f1:69:86:69:9a:28:d7:56:f2:31:65:43:c6:e1:fe:07: 80:4b:90:21:c5:61:16:25:11:44:b3:7c:83:8a:6d:b5:38:bb: a9:4e:3c:ef:0f:f5:d0:52:54:53:33:89:f5:24:bd:9f:04:af: 4e:ae:93:32:8e:7e:1f:13:e0:33:25:e2:11:c1:7f:47:e3:4c: 9b:65:50:64:d9:e6:18:d8:d2:b4:58:da:e8:b4:ea:f0:1c:bc: 9d:57:1e:a0:96:2d:87:5e:69:0e:3d:f3:5a:87:b0:e9:73:69: 51:7a:d5:5d:2c:ee:d5:4e:c6:79:af:26:ad:a0:a6:18:09:24: 1a:f7:b6:91:a7:32:de:dc:1c:84:03:53:95:5c:f8:c3:d9:bd: 8e:ef:4b:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVBRTZCODU2MzYwNDkw RjAwODE3NjM5RjJFRTNCODIyRTcyRkNBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB9/xz8Eo6Z6PQK1EhJgK88JTP3aJZv73L0R/TUYoD0un+x6eN rOYyVobXFoaktHXUmI6B6r1yyBwYNBJoivrb6XNoXWYES/yTsTHS9vppAAaTvcHa ci6JVFxoC4wzO9jtrkjt5JnXdJt7nnjJoJ28RztTvQk9k8/3juM238n0LJ8MkccM XBvk9QvKndn6Wq6lPSGFSo60L8dmMoYlkA4ih0bwGiv0+jLZWdYAUG2XpkRvej9P T+JPGccsH7tZRLoYYwyjHo5gpHjjnVdiQz897lcIaCHROCIF8K9XVyNj/ePNX8+a CJJd3M3om4s1ay/gjEizgmHYXqrwBgIcuSQNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWua4VjYEkPAIF2OfLuO4IucvypkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1d1YTRWallFa1BBSUYyT2ZM dU80SXVjdnlway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6VgwDQYJKoZIhvcNAQELBQADggEBACsSwV14FtwNOVZbVSO/QT4WMQ2SSMn2hv2a eB/bPVb2e4cpv2b5NlriQoeQpXGzWrgoMxE+HVlbCA6/GvJdnKWXZ6YV9L4vdpc/ XnpJOogtrgwMt4mDS2uaih5Rf0sXDiR6iQ7MkeBRd0kETcFP8WmGaZoo11byMWVD xuH+B4BLkCHFYRYlEUSzfIOKbbU4u6lOPO8P9dBSVFMzifUkvZ8Er06ukzKOfh8T 4DMl4hHBf0fjTJtlUGTZ5hjY0rRY2ui06vAcvJ1XHqCWLYdeaQ4981qHsOlzaVF6 1V0s7tVOxnmvJq2gphgJJBr3tpGnMt7cHIQDU5Vc+MPZvY7vSy4= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org