$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCF8RbdZ7kzLFkoTmCJWZiegay8.roa File: bCF8RbdZ7kzLFkoTmCJWZiegay8.roa (raw, json) Hash identifier: Bkvh/PcaDlfHltnbr7wFq387FAUBD4g7BzOxCJK3IPQ= Subject key identifier: 6C:21:7C:45:B7:59:EE:4C:CB:16:4A:13:98:22:56:66:27:A0:6B:2F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27EE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCF8RbdZ7kzLFkoTmCJWZiegay8.roa Signing time: Fri 01 Sep 2023 10:04:44 +0000 ROA not before: Fri 01 Sep 2023 10:04:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10222 (0x27ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:44 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6C217C45B759EE4CCB164A139822566627A06B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:f8:4e:30:53:c2:0d:e4:8d:0d:8e:de:b7: f6:ac:76:2d:bf:53:60:48:57:21:43:63:71:f8:5b: 22:e5:c9:da:a1:bc:78:b7:78:14:d7:fd:6f:c9:b7: 30:50:62:ce:29:43:4f:e4:6c:2f:c1:48:77:b0:ab: 00:5e:f6:f5:ec:aa:71:ba:24:5a:c5:c2:b3:37:02: ea:a5:31:0c:ec:ee:cf:b6:19:8f:98:fc:33:ff:32: 42:7b:3f:1e:fd:16:67:2b:d0:ae:3f:3f:97:d8:c3: 01:05:ad:2f:ac:87:a0:7f:a2:0c:1f:56:16:ea:fb: 40:bc:c7:a1:11:82:da:98:08:fa:04:f4:89:e3:95: 22:6a:f9:1a:0e:c2:4d:84:0d:2f:69:d1:08:a8:3e: 79:4c:b3:a0:c1:c4:d7:28:df:c1:34:75:ea:2c:70: a0:40:1f:28:47:a1:c3:3e:64:2c:61:26:15:b0:a7: a3:8a:12:a8:83:e8:39:10:79:95:53:32:6e:61:a8: ed:fe:94:bf:16:49:3e:10:3f:98:dd:31:d2:9b:51: cd:ab:3a:e9:55:44:82:dc:bd:1b:f5:37:0d:e5:d7: 40:ab:15:1e:76:db:8c:28:a8:c0:03:0f:6a:c7:d9: 60:b3:db:e5:da:e2:90:d8:58:ad:9c:26:c9:64:66: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:21:7C:45:B7:59:EE:4C:CB:16:4A:13:98:22:56:66:27:A0:6B:2F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCF8RbdZ7kzLFkoTmCJWZiegay8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.52.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:9e:ba:62:a6:84:cf:65:c3:71:71:e2:96:4f:02:07:0a:92: 45:f5:d7:71:6c:94:0d:12:66:d6:e4:26:d5:35:c4:ff:b2:30: e0:46:ed:5b:60:d0:dc:05:04:74:52:26:83:14:be:ed:0f:76: 37:a4:4f:ca:5a:07:76:82:2a:38:55:36:88:d9:0a:ac:36:84: 63:3c:dc:3a:1a:83:5a:ba:5a:e9:91:89:c2:4b:3f:dd:cf:23: 47:92:4c:27:92:6c:77:f3:1e:63:60:8f:9c:3b:4a:75:a5:74: 19:91:f4:06:25:97:93:53:c0:73:c8:99:a2:e2:e4:a1:f2:43: 34:93:c8:10:f4:09:59:b5:f1:ad:03:e2:be:3b:df:9e:e8:57: 0a:17:e5:8c:a8:b3:ce:a2:78:93:bc:a4:39:88:96:9f:71:9a: b7:bc:e2:8d:de:32:de:3c:89:6c:d6:f7:dd:9d:7c:22:af:46: c6:e4:6e:87:e9:a9:6f:38:dd:a8:92:13:66:51:23:51:e2:4f: 59:ee:24:04:c8:07:e5:82:3c:df:0f:be:5e:12:90:b3:f3:f9: 50:ce:ef:d0:1a:fd:00:7a:3f:33:3b:10:e3:f8:76:02:32:93: 8c:ce:66:8d:5e:ed:6e:aa:5d:dd:64:8d:d8:9d:e6:b3:0d:53: 59:55:86:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZDMjE3QzQ1Qjc1OUVF NENDQjE2NEExMzk4MjI1NjY2MjdBMDZCMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/zPhOMFPCDeSNDY7et/asdi2/U2BIVyFDY3H4WyLlydqhvHi3 eBTX/W/JtzBQYs4pQ0/kbC/BSHewqwBe9vXsqnG6JFrFwrM3AuqlMQzs7s+2GY+Y /DP/MkJ7Px79Fmcr0K4/P5fYwwEFrS+sh6B/ogwfVhbq+0C8x6ERgtqYCPoE9Inj lSJq+RoOwk2EDS9p0QioPnlMs6DBxNco38E0deoscKBAHyhHocM+ZCxhJhWwp6OK EqiD6DkQeZVTMm5hqO3+lL8WST4QP5jdMdKbUc2rOulVRILcvRv1Nw3l10CrFR52 24woqMADD2rH2WCz2+Xa4pDYWK2cJslkZsZjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbCF8RbdZ7kzLFkoTmCJWZiegay8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JDRjhSYmRaN2t6TEZrb1Rt Q0pXWmllZ2F5OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6TQwDQYJKoZIhvcNAQELBQADggEBAC6eumKmhM9lw3Fx4pZPAgcKkkX113FslA0S ZtbkJtU1xP+yMOBG7Vtg0NwFBHRSJoMUvu0PdjekT8paB3aCKjhVNojZCqw2hGM8 3Doag1q6WumRicJLP93PI0eSTCeSbHfzHmNgj5w7SnWldBmR9AYll5NTwHPImaLi 5KHyQzSTyBD0CVm18a0D4r47357oVwoX5Yyos86ieJO8pDmIlp9xmre84o3eMt48 iWzW992dfCKvRsbkbofpqW843aiSE2ZRI1HiT1nuJATIB+WCPN8Pvl4SkLPz+VDO 79Aa/QB6PzM7EOP4dgIyk4zOZo1e7W6qXd1kjdid5rMNU1lVhjI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org