$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa File: YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa (raw, json) Hash identifier: XMrykKP0z32hSM9ItIsuwW/CLsKrDlKncornGFWM/ro= Subject key identifier: 61:3F:A6:55:54:DC:3B:A2:FF:FB:13:3E:77:10:AE:07:B4:E3:85:9A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2957 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa Signing time: Fri 01 Sep 2023 10:06:24 +0000 ROA not before: Fri 01 Sep 2023 10:06:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10583 (0x2957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=613FA65554DC3BA2FFFB133E7710AE07B4E3859A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6b:07:ae:f2:d0:e0:a2:36:15:43:19:df:31: 38:dd:76:f1:26:e9:6a:66:60:dc:96:39:ee:b0:7c: 74:f0:0c:87:b2:4e:52:2a:e0:1f:dc:e1:c7:ac:fc: 9c:ef:1b:0c:5c:08:10:c3:34:67:26:f9:9c:4d:78: b9:2d:7f:e3:bb:3c:e6:18:af:88:20:c9:68:ec:6a: 0b:7a:c4:26:db:ca:2b:7c:9c:4a:6a:9e:7b:1a:d1: 48:82:70:e0:f9:fa:d8:9d:9d:ad:62:2b:2f:83:53: e4:94:58:f2:74:79:38:dc:37:81:b9:83:3a:9c:48: 17:83:7a:37:cd:a7:35:07:21:16:7f:c6:3b:13:d0: 71:a5:5d:42:63:24:04:8c:88:5b:61:9b:dc:f2:c5: 8c:db:8b:d5:8e:da:2a:e8:c6:8b:3f:20:3b:00:49: 20:ba:00:a8:f7:3c:3c:e8:5e:0f:99:9c:e1:2c:86: 1a:b3:6b:22:5a:1d:b8:6d:b9:52:7d:4d:92:6e:41: 82:c1:0d:3f:f1:d0:c3:54:8e:50:2a:b8:12:11:f1: 13:60:9d:2d:46:fd:ca:88:a1:25:f7:7a:12:75:1b: 83:64:84:7c:90:45:22:3f:5b:df:5a:5b:a6:46:81: 28:27:b5:6d:15:27:f1:29:14:d6:78:09:1f:85:8f: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3F:A6:55:54:DC:3B:A2:FF:FB:13:3E:77:10:AE:07:B4:E3:85:9A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.56.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:4c:89:84:a3:28:63:0f:d3:38:15:66:69:4e:65:b3:18:e7: 51:8c:49:db:f5:5c:bf:ed:f0:7d:4c:8e:4e:95:cb:d9:a6:38: 96:b6:65:f9:8e:64:8c:4e:6d:a7:b1:3a:1a:89:1a:b3:4f:21: 89:85:fb:67:22:02:6d:d2:04:e2:05:3a:92:b0:9f:7f:2a:7c: 20:74:bc:f1:7e:3c:b8:55:df:0f:5d:10:f7:82:a0:55:93:09: 32:68:03:dc:20:e0:ef:f9:d5:f8:59:8a:c6:1d:58:c3:b4:7f: 32:20:af:ea:77:eb:af:11:d2:5a:08:de:53:21:8d:57:07:09: 27:91:58:b5:bc:b3:7a:0a:de:86:37:c2:42:c7:95:d7:1e:c8: 17:ce:fd:25:58:12:c0:19:62:44:5b:97:22:7e:ad:6a:d5:85: 5c:68:74:0c:31:4f:a2:3c:49:4a:9d:fa:7d:d6:71:a0:50:90: 6b:d0:1a:b9:ac:7b:0f:38:fe:c9:19:0b:cb:09:b5:a9:a4:78: ce:6a:21:c6:b9:ed:c4:4e:b7:bf:1d:93:4d:99:3d:eb:8c:61: 6d:42:45:3c:3d:4d:f8:1a:07:b6:f9:4a:14:4b:70:91:01:50: 06:60:e6:9a:be:63:e5:e2:ba:05:52:00:ad:02:fd:6e:c1:81: 6a:a4:f8:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYxM0ZBNjU1NTREQzNC QTJGRkZCMTMzRTc3MTBBRTA3QjRFMzg1OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmaweu8tDgojYVQxnfMTjddvEm6WpmYNyWOe6wfHTwDIeyTlIq 4B/c4ces/JzvGwxcCBDDNGcm+ZxNeLktf+O7POYYr4ggyWjsagt6xCbbyit8nEpq nnsa0UiCcOD5+tidna1iKy+DU+SUWPJ0eTjcN4G5gzqcSBeDejfNpzUHIRZ/xjsT 0HGlXUJjJASMiFthm9zyxYzbi9WO2iroxos/IDsASSC6AKj3PDzoXg+ZnOEshhqz ayJaHbhtuVJ9TZJuQYLBDT/x0MNUjlAquBIR8RNgnS1G/cqIoSX3ehJ1G4NkhHyQ RSI/W99aW6ZGgSgntW0VJ/EpFNZ4CR+FjyK/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYT+mVVTcO6L/+xM+dxCuB7TjhZowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lULW1WVlRjTzZMXy14TS1k eEN1QjdUamhaby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6TgwDQYJKoZIhvcNAQELBQADggEBAC5MiYSjKGMP0zgVZmlOZbMY51GMSdv1XL/t 8H1Mjk6Vy9mmOJa2ZfmOZIxObaexOhqJGrNPIYmF+2ciAm3SBOIFOpKwn38qfCB0 vPF+PLhV3w9dEPeCoFWTCTJoA9wg4O/51fhZisYdWMO0fzIgr+p3668R0loI3lMh jVcHCSeRWLW8s3oK3oY3wkLHldceyBfO/SVYEsAZYkRblyJ+rWrVhVxodAwxT6I8 SUqd+n3WcaBQkGvQGrmsew84/skZC8sJtamkeM5qIca57cROt78dk02ZPeuMYW1C RTw9TfgaB7b5ShRLcJEBUAZg5pq+Y+XiugVSAK0C/W7BgWqk+Mk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org