$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa File: Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa (raw, json) Hash identifier: k7k2DnA1vlG9wIjGul8uQ4px9NfeTMw6+xT46Y5Mw5M= Subject key identifier: 65:B9:38:3D:20:83:67:46:43:BB:FD:14:8B:87:34:F9:D2:DB:13:8D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28F3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa Signing time: Fri 01 Sep 2023 10:05:57 +0000 ROA not before: Fri 01 Sep 2023 10:05:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10483 (0x28f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=65B9383D2083674643BBFD148B8734F9D2DB138D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:42:c8:60:36:d8:e8:62:47:f6:06:31:d9:4e: 05:4e:37:2a:5f:61:35:97:01:28:57:a2:ce:b1:1b: 94:98:e7:00:3a:90:69:d3:5d:0c:7c:28:8e:32:32: da:71:39:10:a2:62:41:f5:1c:59:84:14:45:5b:a9: 5e:6b:55:7c:ab:00:14:9d:53:67:d8:dd:5b:a9:08: 54:0a:ec:6f:11:5c:1f:c6:c9:e1:78:b9:6e:d3:01: e2:62:8b:eb:6d:f7:8f:ac:c3:60:c9:0d:c1:f2:58: 8e:99:46:8f:fb:b9:16:e8:f3:f6:28:a7:4f:e4:80: 39:7c:d5:87:d8:a4:d2:1b:fe:0f:88:9d:ef:5d:27: 4c:3b:d6:12:7b:7c:2c:67:39:3b:00:98:b0:12:f5: 80:98:41:a1:62:35:1d:d3:f6:63:8c:fe:ba:48:54: 56:7a:16:68:5f:a8:f0:b5:65:ec:d1:08:5a:05:51: 69:f9:ef:73:2e:5a:47:b3:43:fc:b1:b0:be:20:2f: 07:6d:50:b1:8a:09:d6:58:a3:33:89:c3:29:3f:b3: 4b:5a:11:45:42:fb:29:d7:19:57:dd:21:26:d3:38: 67:b9:87:c1:6b:58:49:6b:b7:dd:1d:c5:49:c3:69: 22:fd:fc:1d:70:73:19:b8:38:24:b0:20:18:71:9e: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B9:38:3D:20:83:67:46:43:BB:FD:14:8B:87:34:F9:D2:DB:13:8D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.24.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:a9:b5:e5:15:f6:8f:0d:46:6a:93:d9:58:be:23:89:84:78: 49:dc:ae:a0:0b:29:49:d6:ca:31:66:0c:8c:57:9a:7a:79:ac: f7:aa:0d:99:77:d9:99:cd:34:ed:66:7c:95:b6:67:37:63:67: 61:40:2e:a6:8f:ba:2e:cc:47:0c:82:7a:d9:4f:cc:fe:57:5d: c4:a6:7e:27:59:1a:5b:2c:a7:d4:04:03:71:62:28:ca:cc:59: c2:b9:35:34:e4:8e:56:83:a9:07:39:bc:81:1f:c9:59:c7:37: 9b:96:b8:ef:76:44:e7:f9:f5:bd:90:d1:cf:c4:29:51:62:8c: b3:24:c5:10:82:76:e5:ca:ba:ee:22:a0:10:42:d3:82:a4:9b: 25:f7:3f:45:d7:7b:1d:bb:25:ed:2b:fe:03:25:46:9b:8e:0b: ed:26:ab:77:bc:9f:04:5b:7e:d7:95:a3:ba:22:73:bd:d5:fd: 6c:4d:a4:fc:3a:45:91:1b:dc:97:f5:0d:f6:ea:b9:8c:bb:cb: 78:ed:af:f2:33:f1:b6:18:fc:28:22:29:6a:7c:7a:0b:18:b7: 64:f5:bd:e1:20:a4:27:77:62:63:ac:61:e0:b8:2b:64:1c:7a: cb:19:92:1e:7f:be:c5:7e:91:c6:3b:cd:0b:2b:69:ed:3f:54: bf:96:30:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1QjkzODNEMjA4MzY3 NDY0M0JCRkQxNDhCODczNEY5RDJEQjEzOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTQshgNtjoYkf2BjHZTgVONypfYTWXAShXos6xG5SY5wA6kGnT XQx8KI4yMtpxORCiYkH1HFmEFEVbqV5rVXyrABSdU2fY3VupCFQK7G8RXB/GyeF4 uW7TAeJii+tt94+sw2DJDcHyWI6ZRo/7uRbo8/Yop0/kgDl81YfYpNIb/g+Ine9d J0w71hJ7fCxnOTsAmLAS9YCYQaFiNR3T9mOM/rpIVFZ6FmhfqPC1ZezRCFoFUWn5 73MuWkezQ/yxsL4gLwdtULGKCdZYozOJwyk/s0taEUVC+ynXGVfdISbTOGe5h8Fr WElrt90dxUnDaSL9/B1wcxm4OCSwIBhxnqMpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZbk4PSCDZ0ZDu/0Ui4c0+dLbE40wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1piazRQU0NEWjBaRHVfMFVp NGMwLWRMYkU0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ARgwDQYJKoZIhvcNAQELBQADggEBAIupteUV9o8NRmqT2Vi+I4mEeEncrqALKUnW yjFmDIxXmnp5rPeqDZl32ZnNNO1mfJW2ZzdjZ2FALqaPui7MRwyCetlPzP5XXcSm fidZGlssp9QEA3FiKMrMWcK5NTTkjlaDqQc5vIEfyVnHN5uWuO92ROf59b2Q0c/E KVFijLMkxRCCduXKuu4ioBBC04KkmyX3P0XXex27Je0r/gMlRpuOC+0mq3e8nwRb fteVo7oic73V/WxNpPw6RZEb3Jf1DfbquYy7y3jtr/Iz8bYY/CgiKWp8egsYt2T1 veEgpCd3YmOsYeC4K2QcessZkh5/vsV+kcY7zQsrae0/VL+WMIs= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org