$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa File: bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa (raw, json) Hash identifier: tqq1yUWcIonhV0NIOU4AFWlstTmh1Du65dK691ht7Kw= Subject key identifier: 6C:E7:34:CA:EF:BE:92:CF:03:40:5F:44:CF:B9:57:0B:D7:B6:69:2B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2936 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa Signing time: Fri 01 Sep 2023 10:06:17 +0000 ROA not before: Fri 01 Sep 2023 10:06:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10550 (0x2936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6CE734CAEFBE92CF03405F44CFB9570BD7B6692B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:51:13:cf:38:64:6d:61:e5:cd:b2:95:34: d4:21:b6:91:ae:07:40:63:65:45:09:34:d8:30:49: d7:47:0c:6b:6f:d7:10:49:8a:90:db:6f:ff:2b:b3: 06:e2:2c:42:86:ae:d9:c2:6d:11:d7:f7:76:d4:aa: e6:94:5e:f7:d6:ef:62:31:b5:21:96:7e:1d:29:14: 0c:b0:6c:f7:6a:ec:08:25:5e:4c:c2:39:2d:39:46: 60:72:49:90:7e:08:b1:0f:40:d6:e1:d5:ae:40:08: 05:a8:e8:c1:b5:72:b6:e0:d6:01:e0:86:3d:58:fa: a9:bd:16:a0:f7:38:35:e6:b6:6f:24:86:2c:e9:ac: 9d:28:09:a8:ef:71:b9:63:e5:10:3c:35:3b:8b:0d: c9:67:54:e8:7f:de:4c:a4:cd:54:1b:4e:22:89:0c: a1:39:1f:19:d2:e0:6e:c2:18:05:5d:8e:26:27:25: cf:a9:ff:9f:f0:ce:68:fa:df:29:c3:dd:d3:6d:68: 40:b3:c7:3a:cc:e7:13:b2:0f:2f:f7:b5:3b:8f:89: 3e:14:c4:f8:2a:85:44:5b:56:72:a6:22:76:b8:1c: 3d:48:cf:e0:c2:41:d8:65:26:2d:56:ae:3e:a2:82: 49:a3:07:66:b8:b8:d7:e0:83:d4:41:4d:f6:f8:80: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E7:34:CA:EF:BE:92:CF:03:40:5F:44:CF:B9:57:0B:D7:B6:69:2B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.220.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:83:67:3a:25:15:3d:0b:5f:b7:d6:78:57:b7:c3:bd:f4:83: 61:25:6a:7c:15:85:48:03:27:c6:b3:83:70:3d:81:3d:db:39: ed:b5:33:f9:88:7f:7c:66:97:b6:1d:72:11:b7:20:81:64:7e: a2:4c:cc:f4:a6:33:98:c4:21:66:9c:c3:21:5b:7a:fd:6c:ff: c5:78:12:51:c8:ca:10:0e:df:98:2e:c2:4a:49:69:eb:6d:51: 51:d6:cb:cf:41:61:25:2f:9c:f0:cb:cf:45:01:cb:fe:56:f0: 1b:2d:2a:49:74:c2:98:4c:00:14:fb:79:1f:c9:2d:9a:55:93: d9:44:b1:1e:83:cd:c8:db:37:74:3c:d8:4f:e0:b8:94:b9:82: 7a:25:48:20:b8:25:16:f2:06:27:c6:f3:5e:7d:8a:89:25:75: 46:b9:0a:28:6d:9e:72:10:ab:93:9a:95:61:2a:06:88:fb:ec: 8b:90:ba:2b:1a:4b:44:48:a2:92:21:57:4f:99:bd:3c:1e:37: ba:cd:e2:07:ee:85:c2:2e:4d:c0:94:0e:1e:21:e3:1f:39:0e: 6c:f0:98:ba:97:35:86:3c:7e:4c:1c:76:75:f1:c5:b9:1f:32: 32:46:e7:bc:43:b3:0b:c7:f4:af:1d:37:18:19:85:f5:da:8f: 18:c7:2d:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZDRTczNENBRUZCRTky Q0YwMzQwNUY0NENGQjk1NzBCRDdCNjY5MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwHlETzzhkbWHlzbKVNNQhtpGuB0BjZUUJNNgwSddHDGtv1xBJ ipDbb/8rswbiLEKGrtnCbRHX93bUquaUXvfW72IxtSGWfh0pFAywbPdq7AglXkzC OS05RmBySZB+CLEPQNbh1a5ACAWo6MG1crbg1gHghj1Y+qm9FqD3ODXmtm8khizp rJ0oCajvcblj5RA8NTuLDclnVOh/3kykzVQbTiKJDKE5HxnS4G7CGAVdjiYnJc+p /5/wzmj63ynD3dNtaECzxzrM5xOyDy/3tTuPiT4UxPgqhURbVnKmIna4HD1Iz+DC QdhlJi1Wrj6igkmjB2a4uNfgg9RBTfb4gBjjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbOc0yu++ks8DQF9Ez7lXC9e2aSswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JPYzB5dS0ta3M4RFFGOUV6 N2xYQzllMmFTcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AdwwDQYJKoZIhvcNAQELBQADggEBAJuDZzolFT0LX7fWeFe3w730g2ElanwVhUgD J8azg3A9gT3bOe21M/mIf3xml7YdchG3IIFkfqJMzPSmM5jEIWacwyFbev1s/8V4 ElHIyhAO35guwkpJaettUVHWy89BYSUvnPDLz0UBy/5W8BstKkl0wphMABT7eR/J LZpVk9lEsR6DzcjbN3Q82E/guJS5gnolSCC4JRbyBifG8159iokldUa5CihtnnIQ q5OalWEqBoj77IuQuisaS0RIopIhV0+ZvTweN7rN4gfuhcIuTcCUDh4h4x85Dmzw mLqXNYY8fkwcdnXxxbkfMjJG57xDswvH9K8dNxgZhfXajxjHLTY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org