$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa File: YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa (raw, json) Hash identifier: KplGncmCWRqpPNytOGjijA08eG/PVtJQrJgsusKMrUI= Subject key identifier: 61:B6:64:27:55:61:32:22:F7:75:D0:49:2F:25:43:D2:3D:4D:EA:03 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A2C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa Signing time: Fri 01 Sep 2023 10:07:34 +0000 ROA not before: Fri 01 Sep 2023 10:07:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10796 (0x2a2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=61B6642755613222F775D0492F2543D23D4DEA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:55:e6:0a:23:c4:9f:6d:54:6a:3d:69:82: bd:75:53:37:ad:d8:ff:32:b3:81:f5:d3:68:35:cf: 57:c5:75:52:1f:4a:7f:fb:32:83:64:39:f0:45:2d: 48:2d:c7:a4:07:ef:2c:12:f2:24:66:08:97:64:66: 6d:a4:84:10:81:77:16:6e:02:98:eb:f1:f3:0f:a4: cd:15:d2:22:f1:ab:6d:0e:2a:51:80:0e:1d:54:6c: 30:0a:9a:34:92:aa:91:8b:d9:6a:f9:7d:76:cb:3b: b4:67:bf:e3:73:7d:7c:dd:2c:e2:42:a2:3e:ca:ba: 31:f6:11:0d:fd:ba:53:6e:cf:ef:9d:73:42:54:65: 28:5c:61:91:7d:eb:8b:ad:82:03:d8:61:ef:85:47: 71:10:ae:b7:17:ec:d0:7c:f2:32:d2:87:a9:a2:74: 37:eb:20:00:0e:d4:ba:c8:b4:9c:49:db:23:1d:3e: 44:7c:c8:f4:10:6d:f4:d5:d4:a0:ea:23:25:96:1e: da:b9:64:2d:43:7a:8d:17:42:38:5a:69:03:05:2b: 61:42:4d:86:2b:64:f8:8a:ac:79:49:1c:9d:12:ce: c3:ec:10:62:d9:a9:95:38:22:02:af:01:e4:9d:eb: 6c:e3:1d:29:ad:24:d1:ae:74:cc:0b:2d:72:24:08: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B6:64:27:55:61:32:22:F7:75:D0:49:2F:25:43:D2:3D:4D:EA:03 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.152.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:c3:18:d3:27:2f:0e:87:18:28:67:78:a4:e0:3b:f1:7c:60: 20:01:73:6e:28:15:bc:b2:38:28:85:3a:5e:f3:e8:2c:57:9d: 79:7a:0c:6b:8f:ab:6d:d4:6e:47:31:00:4c:6e:8e:45:05:25: 64:1a:cf:69:ac:a3:76:57:66:80:f6:0b:72:3d:27:98:e4:9f: 3c:61:af:d4:75:93:e7:ba:d0:8c:13:ae:d8:85:45:99:fd:e6: 71:6c:e3:09:9c:ab:f6:d8:bb:25:a3:06:f6:50:88:62:f9:e7: 84:8b:4f:31:6f:93:63:53:98:e7:67:71:42:1d:9a:07:55:0b: ec:0d:87:15:1b:f4:0d:15:58:d7:9e:53:fa:76:3d:47:d5:e7: 54:78:c4:a6:d8:15:6a:44:fc:96:50:4d:fd:f1:12:64:31:6c: 5d:63:9e:ef:4b:88:ea:ee:19:11:f4:80:3b:19:04:99:9e:a8: ed:0f:5b:7a:9f:b0:47:95:1c:cd:0c:65:68:00:fe:3f:41:b6: 3f:05:37:c0:47:4a:f2:4e:e4:1f:fb:22:c2:71:1f:36:79:80: b9:89:d7:9d:0e:43:4a:7f:61:ce:bf:52:07:9f:3c:ec:b9:8a: 75:7b:80:79:ba:ce:8d:f0:81:1f:34:5b:cb:7d:8f:0c:dc:39: 10:64:b1:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYxQjY2NDI3NTU2MTMy MjJGNzc1RDA0OTJGMjU0M0QyM0Q0REVBMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC991XmCiPEn21Uaj1pgr11Uzet2P8ys4H102g1z1fFdVIfSn/7 MoNkOfBFLUgtx6QH7ywS8iRmCJdkZm2khBCBdxZuApjr8fMPpM0V0iLxq20OKlGA Dh1UbDAKmjSSqpGL2Wr5fXbLO7Rnv+NzfXzdLOJCoj7KujH2EQ39ulNuz++dc0JU ZShcYZF964utggPYYe+FR3EQrrcX7NB88jLSh6midDfrIAAO1LrItJxJ2yMdPkR8 yPQQbfTV1KDqIyWWHtq5ZC1Deo0XQjhaaQMFK2FCTYYrZPiKrHlJHJ0SzsPsEGLZ qZU4IgKvAeSd62zjHSmtJNGudMwLLXIkCB3VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYbZkJ1VhMiL3ddBJLyVD0j1N6gMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1liWmtKMVZoTWlMM2RkQkpM eVZEMGoxTjZnTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AZgwDQYJKoZIhvcNAQELBQADggEBAFvDGNMnLw6HGChneKTgO/F8YCABc24oFbyy OCiFOl7z6CxXnXl6DGuPq23UbkcxAExujkUFJWQaz2mso3ZXZoD2C3I9J5jknzxh r9R1k+e60IwTrtiFRZn95nFs4wmcq/bYuyWjBvZQiGL554SLTzFvk2NTmOdncUId mgdVC+wNhxUb9A0VWNeeU/p2PUfV51R4xKbYFWpE/JZQTf3xEmQxbF1jnu9LiOru GRH0gDsZBJmeqO0PW3qfsEeVHM0MZWgA/j9Btj8FN8BHSvJO5B/7IsJxHzZ5gLmJ 150OQ0p/Yc6/UgefPOy5inV7gHm6zo3wgR80W8t9jwzcORBksSQ= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org