$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa File: bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa (raw, json) Hash identifier: Ln61EHkmQ4kxaA2UU/jZP5dZPu4Ok7LNh+Sld3AUYhg= Subject key identifier: 6D:59:8E:3A:CE:AC:D1:6C:78:05:ED:11:B7:0E:C1:1F:E1:3A:AD:BD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2901 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa Signing time: Fri 01 Sep 2023 10:06:03 +0000 ROA not before: Fri 01 Sep 2023 10:06:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 211.76.119.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10497 (0x2901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6D598E3ACEACD16C7805ED11B70EC11FE13AADBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:76:31:be:6b:ee:f8:72:c3:fd:86:fc:1a: a2:8e:2e:9e:d7:d4:28:7e:71:49:6f:21:51:6c:a9: 76:52:19:89:cf:ba:bf:68:6d:9d:26:99:5b:a2:fe: 45:a8:fc:a8:c5:17:88:7f:d8:bb:00:1f:c2:d0:48: 3d:af:ef:9e:4d:79:c4:01:88:b6:2f:c8:93:90:4f: 7e:4e:a7:8c:df:20:73:0b:ca:23:b5:1e:9c:89:9d: 01:99:d4:b2:f9:29:38:eb:48:c0:52:e7:97:ae:4a: f0:f9:4e:83:e9:51:ee:55:d1:b4:46:88:db:77:a0: bf:56:5a:7a:60:22:55:97:b0:52:8d:58:9c:57:fb: d0:b7:c0:81:0f:d7:a8:dc:c3:df:9a:1f:e4:73:d6: e4:21:a5:56:5b:0c:c3:23:3b:ec:19:11:32:4a:f8: 50:50:6a:72:e8:10:6f:3f:14:2d:1f:db:ef:5d:df: a8:62:7a:d7:17:d8:85:1c:c6:80:c6:ea:4c:b4:71: 45:93:33:57:00:42:fb:e1:1a:ae:63:0c:2e:96:cf: aa:94:ab:9e:cd:2c:62:54:b3:1d:91:b1:04:8a:3e: 3e:50:53:84:6f:10:d2:05:a8:20:2e:3a:64:a1:22: fc:a9:b6:de:f3:01:f5:52:ff:f4:08:78:97:f7:5b: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:59:8E:3A:CE:AC:D1:6C:78:05:ED:11:B7:0E:C1:1F:E1:3A:AD:BD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.119.128/25 Signature Algorithm: sha256WithRSAEncryption 1e:da:d9:ad:a2:79:e1:6d:12:ac:09:4a:0e:5c:e2:e8:58:12: a3:ca:bc:4d:07:a2:1a:69:93:05:7c:03:e8:e0:e7:5a:8e:47: d2:e2:b9:9b:a9:2a:51:5e:bc:71:77:bc:32:81:aa:20:bd:fc: d4:8f:29:8b:05:cc:74:79:13:43:8e:8e:fb:71:c0:eb:0f:cc: c1:6e:fd:d8:c3:69:ad:a6:77:43:20:ab:e1:24:81:47:ce:d3: 18:40:10:da:d0:a3:15:7c:2e:05:1a:57:73:d9:0e:72:7c:57: 71:78:64:20:f0:21:8c:56:d4:de:8f:9d:64:a7:da:03:d5:1f: 82:0a:a5:ee:51:2c:25:12:f6:9c:9a:d3:f3:29:ad:7f:00:65: 1f:5e:43:7c:ea:12:a9:5b:85:91:2d:42:7d:f8:b6:64:29:46: ee:e2:2f:b4:78:1a:fd:27:96:bb:89:7d:b3:b4:b2:8e:10:dc: 23:7a:b1:c3:8d:a6:5c:f1:a2:54:ec:d6:25:ef:0a:63:9f:33: 0f:42:c8:a3:43:4f:33:bd:72:eb:e8:80:be:91:1a:50:07:4d: a3:68:d9:cc:a4:bd:79:47:97:1d:17:d3:ac:1b:08:76:2d:f7: dc:d3:71:91:da:20:c6:5d:73:1b:b5:c2:da:1d:07:8a:be:85: 69:e2:df:e0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZENTk4RTNBQ0VBQ0Qx NkM3ODA1RUQxMUI3MEVDMTFGRTEzQUFEQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtHnYxvmvu+HLD/Yb8GqKOLp7X1Ch+cUlvIVFsqXZSGYnPur9o bZ0mmVui/kWo/KjFF4h/2LsAH8LQSD2v755NecQBiLYvyJOQT35Op4zfIHMLyiO1 HpyJnQGZ1LL5KTjrSMBS55euSvD5ToPpUe5V0bRGiNt3oL9WWnpgIlWXsFKNWJxX +9C3wIEP16jcw9+aH+Rz1uQhpVZbDMMjO+wZETJK+FBQanLoEG8/FC0f2+9d36hi etcX2IUcxoDG6ky0cUWTM1cAQvvhGq5jDC6Wz6qUq57NLGJUsx2RsQSKPj5QU4Rv ENIFqCAuOmShIvyptt7zAfVS//QIeJf3W4MXAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUbVmOOs6s0Wx4Be0Rtw7BH+E6rb0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JWbU9PczZzMFd4NEJlMFJ0 dzdCSC1FNnJiMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THeAMA0GCSqGSIb3DQEBCwUAA4IBAQAe2tmtonnhbRKsCUoOXOLoWBKjyrxNB6Ia aZMFfAPo4OdajkfS4rmbqSpRXrxxd7wygaogvfzUjymLBcx0eRNDjo77ccDrD8zB bv3Yw2mtpndDIKvhJIFHztMYQBDa0KMVfC4FGldz2Q5yfFdxeGQg8CGMVtTej51k p9oD1R+CCqXuUSwlEvacmtPzKa1/AGUfXkN86hKpW4WRLUJ9+LZkKUbu4i+0eBr9 J5a7iX2ztLKOENwjerHDjaZc8aJU7NYl7wpjnzMPQsijQ08zvXLr6IC+kRpQB02j aNnMpL15R5cdF9OsGwh2Lffc03GR2iDGXXMbtcLaHQeKvoVp4t/g -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org