$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa File: ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa (raw, json) Hash identifier: 2EQBeOd6rv9LXHnFSxxRwTYfGSZeo3RQOO1Kkkm/g08= Subject key identifier: 6A:9E:0E:53:25:5B:28:F5:60:06:00:91:5F:B3:2E:3F:F0:04:9D:FA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AE4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa Signing time: Fri 01 Sep 2023 10:08:24 +0000 ROA not before: Fri 01 Sep 2023 10:08:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10980 (0x2ae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6A9E0E53255B28F5600600915FB32E3FF0049DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:79:d9:10:50:32:f0:10:93:0a:ea:f3:5f: 7d:f0:f8:97:36:02:7e:b9:e3:c7:e2:61:6a:05:9b: b6:de:26:4b:d8:c2:55:87:1c:2b:82:4c:8d:9b:79: 9d:ef:dc:7d:28:c3:51:eb:99:a2:ce:42:6b:0a:f2: de:c5:5c:92:ca:7f:89:8e:56:97:3d:e4:64:a2:d1: fc:52:a0:ff:09:2c:88:52:89:e7:a3:eb:87:1c:7d: 9e:44:86:3d:d5:86:02:3b:f6:1c:dc:1a:7b:8c:da: 4c:74:d0:35:f1:b5:03:ac:3b:6d:38:1f:04:76:1b: b8:8a:87:81:02:3e:f5:b4:8c:fe:d9:d9:50:11:57: 76:fd:35:85:23:9a:f6:a4:ef:45:1b:13:24:19:eb: 6f:66:67:78:63:48:ba:46:2d:c7:86:60:a3:aa:1a: 8b:09:ae:08:49:02:77:e0:59:fe:8e:97:d0:cc:fd: ef:3c:b3:0d:d7:89:00:b1:6c:0d:95:0e:67:51:54: f0:c3:e0:0a:ea:b8:25:ad:06:c5:80:d4:0f:2b:07: 20:6d:b1:ad:e9:2c:1e:37:dc:9b:b5:a1:0d:2e:af: a2:4f:cd:97:de:05:cc:3d:06:fe:2d:5c:0c:74:3e: f5:de:07:fe:05:55:7c:7c:8f:d9:74:15:bb:86:be: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9E:0E:53:25:5B:28:F5:60:06:00:91:5F:B3:2E:3F:F0:04:9D:FA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.240.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:5b:33:1a:eb:ca:51:c3:21:e7:87:53:e7:82:39:3b:39:32: 97:7e:e7:b7:67:8b:65:8f:39:17:88:2b:31:a7:a9:e8:b3:f8: 98:07:3f:f1:76:10:14:e5:63:21:5d:64:aa:f6:b7:3b:c4:aa: bd:3d:1f:48:d1:3c:14:e0:49:8c:05:2a:22:22:31:26:3f:08: 0a:d6:42:16:d7:0d:75:b5:fd:c7:83:2d:ca:ed:1d:b2:34:79: b9:84:69:b8:6c:41:9b:89:47:ef:78:9e:e2:96:a4:79:cb:20: f5:3f:b0:ed:eb:72:a0:e6:3c:c5:77:5f:6d:f5:92:ee:12:a9: 16:12:2a:98:c8:e6:8d:27:e2:02:70:6e:0d:61:c7:57:51:91: b6:df:61:a5:34:e4:af:7a:01:3b:20:43:f1:45:7b:cb:ba:d2: ae:28:7f:22:6c:08:4f:e8:46:d0:3c:79:4e:57:03:05:b7:1a: 33:61:70:eb:ea:9e:28:54:4f:fa:3d:61:61:70:5d:75:b5:26: 98:3b:6b:c3:8b:2b:98:66:11:5b:1d:52:35:59:8c:7a:2d:bd: 0d:b0:6f:13:3c:47:df:03:17:2d:47:8b:48:54:bb:d3:94:4c: 20:79:5f:d0:6b:ad:35:fd:1f:df:4a:fc:d5:2b:d4:1d:ed:cd: ca:0d:fc:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZBOUUwRTUzMjU1QjI4 RjU2MDA2MDA5MTVGQjMyRTNGRjAwNDlERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUXXnZEFAy8BCTCurzX33w+Jc2An6548fiYWoFm7beJkvYwlWH HCuCTI2beZ3v3H0ow1HrmaLOQmsK8t7FXJLKf4mOVpc95GSi0fxSoP8JLIhSieej 64ccfZ5Ehj3VhgI79hzcGnuM2kx00DXxtQOsO204HwR2G7iKh4ECPvW0jP7Z2VAR V3b9NYUjmvak70UbEyQZ629mZ3hjSLpGLceGYKOqGosJrghJAnfgWf6Ol9DM/e88 sw3XiQCxbA2VDmdRVPDD4ArquCWtBsWA1A8rByBtsa3pLB433Ju1oQ0ur6JPzZfe Bcw9Bv4tXAx0PvXeB/4FVXx8j9l0FbuGvkLFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUap4OUyVbKPVgBgCRX7MuP/AEnfowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FwNE9VeVZiS1BWZ0JnQ1JY N011UF9BRW5mby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6PAwDQYJKoZIhvcNAQELBQADggEBAGpbMxrrylHDIeeHU+eCOTs5Mpd+57dni2WP OReIKzGnqeiz+JgHP/F2EBTlYyFdZKr2tzvEqr09H0jRPBTgSYwFKiIiMSY/CArW QhbXDXW1/ceDLcrtHbI0ebmEabhsQZuJR+94nuKWpHnLIPU/sO3rcqDmPMV3X231 ku4SqRYSKpjI5o0n4gJwbg1hx1dRkbbfYaU05K96ATsgQ/FFe8u60q4ofyJsCE/o RtA8eU5XAwW3GjNhcOvqnihUT/o9YWFwXXW1Jpg7a8OLK5hmEVsdUjVZjHotvQ2w bxM8R98DFy1Hi0hUu9OUTCB5X9BrrTX9H99K/NUr1B3tzcoN/BE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org