$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa File: _Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa (raw, json) Hash identifier: nQocwXU0u0Xnao48/txrY0g/6WJAuVNWlFbSEFMfWNs= Subject key identifier: FC:69:F5:80:76:83:E5:B5:37:63:F4:2B:D1:B4:39:94:A6:FD:7E:80 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28CE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa Signing time: Fri 01 Sep 2023 10:05:47 +0000 ROA not before: Fri 01 Sep 2023 10:05:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10446 (0x28ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FC69F5807683E5B53763F42BD1B43994A6FD7E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:4a:fa:c8:e0:3e:d3:aa:24:11:ec:5d:ba: 33:a8:5c:82:ce:07:1f:d9:1e:d9:28:ee:11:b1:83: 8c:f4:35:6c:24:17:a2:62:31:b3:ea:c9:f7:1d:f0: 94:e7:36:2f:bc:34:5e:73:1b:01:21:18:75:d0:bb: ff:ae:82:35:f5:f1:13:44:68:f2:e3:4d:f2:e9:2f: 35:68:c9:5f:79:55:59:e9:d9:27:8a:b2:5c:8c:96: 34:c2:97:46:5b:b3:3b:63:fc:f7:ac:47:59:6e:81: ed:de:11:1e:0e:5f:70:f5:9d:cb:83:09:e8:99:94: 93:58:df:90:e7:21:41:37:f5:16:ed:31:eb:79:90: 15:88:d4:61:0c:84:39:89:05:54:67:56:bd:0f:45: cd:89:31:8a:1b:c7:7e:2b:5c:e6:ac:e3:f1:71:51: 0d:12:ce:f3:0d:25:f4:7e:7f:f8:6b:14:bc:c3:b1: a5:35:7a:87:58:6d:4a:7a:f3:b0:23:b3:61:e3:db: 92:84:c9:04:ef:53:fd:94:79:d4:66:4c:d4:50:4b: dc:ef:b4:1d:d0:85:7d:4c:99:da:ea:82:1c:74:ef: b7:46:98:4b:99:5a:a7:6b:fa:83:bb:ca:85:90:20: 9a:c1:ec:83:13:33:eb:b0:19:50:d0:7f:65:84:ef: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:69:F5:80:76:83:E5:B5:37:63:F4:2B:D1:B4:39:94:A6:FD:7E:80 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.224.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:d9:e8:67:d0:0d:ad:14:b2:7b:ee:89:05:1d:50:9b:3c:fb: e0:d0:aa:7a:5c:b4:68:f3:bb:b2:28:4c:bd:48:4b:da:3d:28: 63:46:13:f9:5d:e3:d9:e4:99:fe:37:c6:be:df:b1:84:27:05: 4b:71:da:0a:a3:d0:0e:5e:d7:70:ed:eb:65:7a:48:98:72:dd: 26:8e:fc:8a:da:64:64:d5:be:8e:2a:16:88:e8:94:f0:28:a4: 97:f8:2b:5c:e8:77:77:d8:cb:3d:ad:ef:e8:cc:9d:79:dd:83: a0:b7:b6:80:cb:b1:55:db:2d:7e:ab:dc:20:4c:1f:2f:a7:38: 43:49:f6:a0:8d:a4:70:13:de:75:74:53:73:22:f0:2d:e3:22: 96:70:49:dc:c8:24:12:92:64:44:b1:43:6c:b3:e8:93:8a:8d: 28:b7:ab:e8:0a:d9:a6:02:43:a6:26:a9:3f:be:39:84:30:1b: 34:dd:f8:9c:8b:aa:63:30:5c:84:f8:f1:f0:e9:32:78:a6:86: a0:e5:85:96:62:e3:3e:c0:a4:0e:5b:2c:53:eb:99:8c:38:96: 43:5c:72:dd:02:15:66:a8:17:c6:77:c9:1b:5b:84:b6:36:7b: bf:74:cd:d9:6a:0e:8b:52:d0:40:83:76:9a:81:5a:df:7b:41: c2:d2:a2:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDNjlGNTgwNzY4M0U1 QjUzNzYzRjQyQkQxQjQzOTk0QTZGRDdFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz0kr6yOA+06okEexdujOoXILOBx/ZHtko7hGxg4z0NWwkF6Ji MbPqyfcd8JTnNi+8NF5zGwEhGHXQu/+ugjX18RNEaPLjTfLpLzVoyV95VVnp2SeK slyMljTCl0Zbsztj/PesR1luge3eER4OX3D1ncuDCeiZlJNY35DnIUE39RbtMet5 kBWI1GEMhDmJBVRnVr0PRc2JMYobx34rXOas4/FxUQ0SzvMNJfR+f/hrFLzDsaU1 eodYbUp687Ajs2Hj25KEyQTvU/2UedRmTNRQS9zvtB3QhX1Mmdrqghx077dGmEuZ Wqdr+oO7yoWQIJrB7IMTM+uwGVDQf2WE71qJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/Gn1gHaD5bU3Y/Qr0bQ5lKb9foAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19HbjFnSGFENWJVM1lfUXIw YlE1bEtiOWZvQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AeAwDQYJKoZIhvcNAQELBQADggEBAC/Z6GfQDa0UsnvuiQUdUJs8++DQqnpctGjz u7IoTL1IS9o9KGNGE/ld49nkmf43xr7fsYQnBUtx2gqj0A5e13Dt62V6SJhy3SaO /IraZGTVvo4qFojolPAopJf4K1zod3fYyz2t7+jMnXndg6C3toDLsVXbLX6r3CBM Hy+nOENJ9qCNpHAT3nV0U3Mi8C3jIpZwSdzIJBKSZESxQ2yz6JOKjSi3q+gK2aYC Q6YmqT++OYQwGzTd+JyLqmMwXIT48fDpMnimhqDlhZZi4z7ApA5bLFPrmYw4lkNc ct0CFWaoF8Z3yRtbhLY2e790zdlqDotS0ECDdpqBWt97QcLSojU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org