$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa File: Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa (raw, json) Hash identifier: ZsCPOa2aUsMdk7vIzYoG2cndVvwobGlkWXLfqgqaGqU= Subject key identifier: 67:9B:EA:C5:5E:DA:76:A3:1C:26:B7:F1:4A:91:B9:9D:CB:31:81:6D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A13 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa Signing time: Fri 01 Sep 2023 10:07:27 +0000 ROA not before: Fri 01 Sep 2023 10:07:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10771 (0x2a13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=679BEAC55EDA76A31C26B7F14A91B99DCB31816D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:c8:4a:af:83:05:3b:28:de:a9:f0:4b:7f: b8:ab:01:46:e3:64:10:32:02:82:6a:99:c3:a0:7a: af:35:3e:5f:da:ef:11:e7:b5:b3:c1:da:b5:12:ec: d7:ad:c6:8b:26:ef:28:dc:5d:38:6e:e3:36:bc:14: 7a:23:25:91:14:1e:22:b7:ca:3b:b0:05:8b:c9:ca: 4a:c7:9e:94:11:4f:81:c8:d5:32:60:db:f6:f8:89: d3:e4:ba:ce:9a:35:e1:85:57:1c:7c:e0:64:12:47: 47:38:ea:79:b0:9b:5f:e3:08:a6:3b:9a:69:ea:75: 42:39:6c:90:d4:34:16:03:f8:ef:6f:e6:5e:28:c5: e7:fa:e3:39:05:9b:93:f3:d9:41:e6:62:d8:d6:a3: 74:03:4a:41:c0:44:60:26:99:11:6f:1d:54:dd:08: cf:29:ca:3a:f4:b4:d7:c6:30:ea:d3:bd:86:84:e8: 09:72:aa:34:53:9a:95:cf:ee:dc:b0:dc:36:b4:ae: 9a:02:92:e8:a5:7e:19:7c:a4:51:56:2c:9d:c1:c4: 40:7e:d6:0d:f8:45:6e:5a:cc:83:ab:52:58:54:4e: af:70:0c:de:df:a3:9a:19:72:49:df:82:71:52:40: 30:0e:d6:89:ca:53:0b:54:ca:95:b8:75:12:1a:e6: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9B:EA:C5:5E:DA:76:A3:1C:26:B7:F1:4A:91:B9:9D:CB:31:81:6D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.164.0/24 Signature Algorithm: sha256WithRSAEncryption b7:a3:89:d1:cc:8f:f6:57:b6:02:3e:57:39:9d:19:d8:66:cb: 3b:ab:99:86:38:e0:ff:22:15:65:ac:c3:44:78:e7:e8:a6:cd: 75:71:ca:f6:0f:b9:12:db:d2:e6:2b:73:a1:66:60:9c:3e:9d: 68:84:33:c3:3c:df:43:7d:7a:84:8c:e0:c8:7f:02:cb:03:e0: 16:ec:25:31:ef:5f:a0:40:16:e6:69:14:3d:09:c7:c9:fc:fd: 7d:08:6d:3b:84:3a:fa:d1:22:c0:b4:5a:28:cd:1b:67:63:58: b6:fe:d5:30:8a:54:54:6f:c4:a6:f8:16:5d:7e:bf:3a:59:dc: 15:21:40:c0:ae:7c:07:e3:a3:52:5c:90:e2:d6:02:4a:90:eb: c6:1c:cd:80:8a:b3:4a:19:0e:5f:4b:9c:73:e9:69:c1:68:2d: a8:c2:26:67:0c:90:93:50:0f:8a:41:d4:cb:fd:57:2a:66:61: 51:36:de:01:a1:26:b7:d5:75:86:06:89:c0:b8:1e:33:78:e5: f7:92:29:2b:64:ff:ca:73:5d:5b:77:99:41:18:fc:27:3c:05: 93:42:e4:95:a5:27:16:6d:74:10:d9:39:a7:fe:37:5a:5d:d6: 07:f8:c5:93:1f:72:f8:20:f4:88:39:63:bf:d4:c9:5a:fe:71: 6b:75:d5:68 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3OUJFQUM1NUVEQTc2 QTMxQzI2QjdGMTRBOTFCOTlEQ0IzMTgxNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoochKr4MFOyjeqfBLf7irAUbjZBAyAoJqmcOgeq81Pl/a7xHn tbPB2rUS7Netxosm7yjcXThu4za8FHojJZEUHiK3yjuwBYvJykrHnpQRT4HI1TJg 2/b4idPkus6aNeGFVxx84GQSR0c46nmwm1/jCKY7mmnqdUI5bJDUNBYD+O9v5l4o xef64zkFm5Pz2UHmYtjWo3QDSkHARGAmmRFvHVTdCM8pyjr0tNfGMOrTvYaE6Aly qjRTmpXP7tyw3Da0rpoCkuilfhl8pFFWLJ3BxEB+1g34RW5azIOrUlhUTq9wDN7f o5oZcknfgnFSQDAO1onKUwtUypW4dRIa5qFJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZ5vqxV7adqMcJrfxSpG5ncsxgW0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1o1dnF4VjdhZHFNY0pyZnhT cEc1bmNzeGdXMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AaQwDQYJKoZIhvcNAQELBQADggEBALejidHMj/ZXtgI+VzmdGdhmyzurmYY44P8i FWWsw0R45+imzXVxyvYPuRLb0uYrc6FmYJw+nWiEM8M830N9eoSM4Mh/AssD4Bbs JTHvX6BAFuZpFD0Jx8n8/X0IbTuEOvrRIsC0WijNG2djWLb+1TCKVFRvxKb4Fl1+ vzpZ3BUhQMCufAfjo1JckOLWAkqQ68YczYCKs0oZDl9LnHPpacFoLajCJmcMkJNQ D4pB1Mv9VypmYVE23gGhJrfVdYYGicC4HjN45feSKStk/8pzXVt3mUEY/Cc8BZNC 5JWlJxZtdBDZOaf+N1pd1gf4xZMfcvgg9Ig5Y7/UyVr+cWt11Wg= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org