$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bFS9sL_I6MH92zK5slbVfNq4RsM.roa File: bFS9sL_I6MH92zK5slbVfNq4RsM.roa (raw, json) Hash identifier: HKZNfsRum7pZ1APktlywdK0mS9089tPnX7Gy8bQTDhA= Subject key identifier: 6C:54:BD:B0:BF:C8:E8:C1:FD:DB:32:B9:B2:56:D5:7C:DA:B8:46:C3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28C0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bFS9sL_I6MH92zK5slbVfNq4RsM.roa Signing time: Fri 01 Sep 2023 10:05:43 +0000 ROA not before: Fri 01 Sep 2023 10:05:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10432 (0x28c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6C54BDB0BFC8E8C1FDDB32B9B256D57CDAB846C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:74:23:d1:19:d4:61:85:43:19:df:44:58:c2: af:03:aa:00:43:17:98:46:ba:9f:08:51:f9:71:34: c5:1f:a2:07:95:6a:40:32:2c:46:ed:cb:9d:7f:ee: 1d:0b:24:f5:6f:4c:95:26:4b:5a:62:00:c9:d1:a3: f4:ec:46:97:66:2a:a5:5b:90:e1:1f:cf:93:97:f8: f9:81:f1:41:99:f6:62:44:9f:b0:d6:f2:b3:56:df: aa:c5:77:25:5e:3a:f3:99:fe:2f:19:92:54:7f:f0: fb:dd:2f:fb:f6:11:9c:f9:ee:95:1f:5a:b6:1a:e8: c9:7f:1c:07:71:98:57:40:cc:16:97:bb:02:e1:74: b7:67:ca:3d:55:3d:f2:3e:40:19:fa:ac:d3:92:7e: 5b:83:dd:8d:01:f4:22:58:aa:e5:3a:8e:8c:f4:4b: 1f:db:7d:5e:b9:37:d0:ce:d6:29:41:a5:fc:d2:60: b3:0f:4d:43:f1:cd:2e:e2:2c:e1:eb:23:c4:03:6c: 8d:20:30:8a:fd:94:d0:4e:71:32:96:35:5f:b7:23: 68:50:73:36:f7:25:ca:07:0c:5c:ee:13:50:2f:c3: 74:c6:96:fd:ca:3a:13:f3:28:c2:86:ac:75:93:24: 7d:d3:f0:55:a0:25:f9:52:1c:77:21:53:72:a2:40: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:54:BD:B0:BF:C8:E8:C1:FD:DB:32:B9:B2:56:D5:7C:DA:B8:46:C3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bFS9sL_I6MH92zK5slbVfNq4RsM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.84.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:a8:e7:3e:a0:f8:fc:56:d6:0d:30:0b:bb:52:ca:dd:4c:69: c8:11:81:ec:ba:a2:b9:95:dd:85:de:90:56:57:1d:f4:d5:f0: 8f:a5:8a:b5:e2:73:a9:13:7e:f8:d8:94:60:60:36:fa:d6:21: 04:dc:5e:60:bc:d8:2b:47:2d:07:c2:ae:96:c6:90:7b:a9:1d: 70:ad:f3:7b:72:a5:ea:35:52:db:df:86:08:6a:0d:59:76:02: fd:20:4b:bd:7c:96:b1:25:68:9b:a0:2b:a6:d0:2e:2a:37:b6: 2d:5d:0f:8b:80:fe:95:50:d5:a4:71:42:01:7b:15:b8:64:39: cd:10:65:81:9d:77:e3:99:36:81:cb:81:14:bf:a8:58:f9:6c: 80:5e:27:1a:d8:2e:72:5f:57:4f:f7:b4:a2:da:dd:22:8b:b4: 78:be:b6:aa:60:5a:34:ce:bc:28:45:4d:7f:61:c3:1b:9f:e9: 75:f9:b9:9c:f2:4a:f4:f0:70:3f:1e:1c:e9:72:0c:a6:27:de: e6:f6:99:32:b0:5e:ce:6a:97:3b:e6:8c:61:f4:e8:3f:ec:61: ab:1b:27:0f:4e:80:ad:0c:97:d5:73:7b:f9:c8:b2:19:f0:51: 83:28:67:2f:36:fd:de:f7:58:d6:89:63:08:64:ba:25:32:d4: 70:38:82:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZDNTRCREIwQkZDOEU4 QzFGRERCMzJCOUIyNTZENTdDREFCODQ2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhdCPRGdRhhUMZ30RYwq8DqgBDF5hGup8IUflxNMUfogeVakAy LEbty51/7h0LJPVvTJUmS1piAMnRo/TsRpdmKqVbkOEfz5OX+PmB8UGZ9mJEn7DW 8rNW36rFdyVeOvOZ/i8ZklR/8PvdL/v2EZz57pUfWrYa6Ml/HAdxmFdAzBaXuwLh dLdnyj1VPfI+QBn6rNOSfluD3Y0B9CJYquU6joz0Sx/bfV65N9DO1ilBpfzSYLMP TUPxzS7iLOHrI8QDbI0gMIr9lNBOcTKWNV+3I2hQczb3JcoHDFzuE1Avw3TGlv3K OhPzKMKGrHWTJH3T8FWgJflSHHchU3KiQHdnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbFS9sL/I6MH92zK5slbVfNq4RsMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JGUzlzTF9JNk1IOTJ6SzVz bGJWZk5xNFJzTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6VQwDQYJKoZIhvcNAQELBQADggEBAC+o5z6g+PxW1g0wC7tSyt1MacgRgey6ormV 3YXekFZXHfTV8I+lirXic6kTfvjYlGBgNvrWIQTcXmC82CtHLQfCrpbGkHupHXCt 83typeo1UtvfhghqDVl2Av0gS718lrElaJugK6bQLio3ti1dD4uA/pVQ1aRxQgF7 FbhkOc0QZYGdd+OZNoHLgRS/qFj5bIBeJxrYLnJfV0/3tKLa3SKLtHi+tqpgWjTO vChFTX9hwxuf6XX5uZzySvTwcD8eHOlyDKYn3ub2mTKwXs5qlzvmjGH06D/sYasb Jw9OgK0Ml9Vze/nIshnwUYMoZy82/d73WNaJYwhkuiUy1HA4gts= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org