$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa File: bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa (raw, json) Hash identifier: GA6vxF4yuJJeXdQP4c5o8rHWxU/Q6b0fwPd/XTDwc3E= Subject key identifier: 6D:02:F3:C0:E4:FA:9F:64:6F:01:9E:A8:3D:C1:52:F1:E8:6D:F6:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A74 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa Signing time: Fri 01 Sep 2023 10:07:55 +0000 ROA not before: Fri 01 Sep 2023 10:07:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10868 (0x2a74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6D02F3C0E4FA9F646F019EA83DC152F1E86DF6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:c6:4a:92:2f:bd:de:9c:34:e7:da:78:85: 65:96:f1:ca:22:67:4d:39:9f:d8:1f:2d:46:35:75: 7e:dd:ad:c5:e6:87:2c:42:a9:ae:c6:3e:b1:e7:f3: d2:c6:12:44:06:0b:4d:18:31:76:8b:7d:f4:05:d7: 47:4c:92:69:cf:39:b7:8e:26:f8:a9:c7:5d:72:5f: e3:fd:a0:ee:6a:9a:cd:73:81:e4:70:06:52:58:7b: ae:a4:7f:f9:04:54:2c:d9:57:0d:1c:fe:cb:09:62: 9e:b0:b1:79:7d:b9:ad:b4:95:e5:79:c8:03:c8:a3: 66:e4:5f:f2:52:62:2a:a9:1d:af:f4:36:85:89:56: 22:c9:8c:d5:64:e7:7b:d8:79:06:6f:2f:8b:d1:27: 97:d7:f0:61:f8:be:66:b5:e6:2f:30:5c:7e:17:9d: 0a:5d:90:73:4e:83:0b:c5:e9:ed:ef:58:d1:92:8a: 3b:9c:25:55:07:67:04:24:39:f7:a0:eb:c1:b4:ad: c9:f2:32:53:15:bf:32:01:34:d7:25:0e:93:6e:fb: 8a:7e:17:3d:51:a3:a2:ba:88:6a:d2:4b:a4:d2:ac: b2:b9:0c:fe:b3:42:79:07:7b:36:62:61:b8:e9:9b: 28:ff:25:7e:71:59:03:a3:46:f7:d5:ec:55:ac:14: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:02:F3:C0:E4:FA:9F:64:6F:01:9E:A8:3D:C1:52:F1:E8:6D:F6:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.64.0/20 Signature Algorithm: sha256WithRSAEncryption 82:c7:d8:89:b8:09:f4:dd:72:cc:18:9f:78:9f:1d:57:2e:f5: a3:1f:ca:5a:52:8e:dd:fd:80:fb:b2:2c:19:de:a3:a5:1a:6b: bf:98:bb:ae:02:55:c6:5a:a3:59:45:d4:28:74:f8:b6:3a:68: 7f:1c:66:ac:55:4d:66:31:99:df:4c:2c:d9:ec:b4:ad:8c:2e: bb:0d:e4:47:da:a5:11:85:2c:4a:cc:f7:40:d2:66:41:a5:6a: 7f:a7:e5:f4:df:ac:a0:c1:4b:3c:64:48:aa:9e:ee:3c:cd:4c: ed:45:c2:35:df:96:50:3e:f6:74:a8:6b:46:a2:94:35:35:fd: 8f:1e:81:ed:d8:61:cc:2e:08:bb:7c:aa:d3:d7:6e:4f:88:d7: 10:df:e6:a3:50:dc:fe:dc:8a:ab:b7:39:47:31:2b:a9:c2:e5: 88:2d:04:07:f2:12:f1:21:37:4c:5b:5a:5e:ca:9c:d2:1a:30: dd:d9:e3:89:8c:99:ed:ed:36:97:bd:d2:57:d5:57:68:aa:a3: 88:0d:67:48:54:ec:a1:e4:8e:a6:a8:5a:cc:bd:33:db:b3:b0: a4:33:34:45:e3:f8:41:fd:e0:2f:1b:1d:f8:f4:e5:6f:4e:7f: c6:fe:d0:ac:76:e1:85:06:78:10:74:91:3b:fe:25:38:72:9c: 90:78:1c:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZEMDJGM0MwRTRGQTlG NjQ2RjAxOUVBODNEQzE1MkYxRTg2REY2QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+lMZKki+93pw059p4hWWW8coiZ005n9gfLUY1dX7drcXmhyxC qa7GPrHn89LGEkQGC00YMXaLffQF10dMkmnPObeOJvipx11yX+P9oO5qms1zgeRw BlJYe66kf/kEVCzZVw0c/ssJYp6wsXl9ua20leV5yAPIo2bkX/JSYiqpHa/0NoWJ ViLJjNVk53vYeQZvL4vRJ5fX8GH4vma15i8wXH4XnQpdkHNOgwvF6e3vWNGSijuc JVUHZwQkOfeg68G0rcnyMlMVvzIBNNclDpNu+4p+Fz1Ro6K6iGrSS6TSrLK5DP6z QnkHezZiYbjpmyj/JX5xWQOjRvfV7FWsFOZhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbQLzwOT6n2RvAZ6oPcFS8eht9r8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JRTHp3T1Q2bjJSdkFaNm9Q Y0ZTOGVodDlyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR2 6UAwDQYJKoZIhvcNAQELBQADggEBAILH2Im4CfTdcswYn3ifHVcu9aMfylpSjt39 gPuyLBneo6Uaa7+Yu64CVcZao1lF1Ch0+LY6aH8cZqxVTWYxmd9MLNnstK2MLrsN 5EfapRGFLErM90DSZkGlan+n5fTfrKDBSzxkSKqe7jzNTO1FwjXfllA+9nSoa0ai lDU1/Y8ege3YYcwuCLt8qtPXbk+I1xDf5qNQ3P7ciqu3OUcxK6nC5YgtBAfyEvEh N0xbWl7KnNIaMN3Z44mMme3tNpe90lfVV2iqo4gNZ0hU7KHkjqaoWsy9M9uzsKQz NEXj+EH94C8bHfj05W9Of8b+0Kx24YUGeBB0kTv+JThynJB4HF4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org