$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa File: c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa (raw, json) Hash identifier: ckvcI9m+aGO2qAdOxSNQh05UPZ2reYIj96wlM4MOglo= Subject key identifier: 73:A0:CA:BF:C5:29:B7:A0:D4:21:A4:13:51:43:21:1A:ED:9C:AB:12 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A2B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa Signing time: Fri 01 Sep 2023 10:07:34 +0000 ROA not before: Fri 01 Sep 2023 10:07:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10795 (0x2a2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=73A0CABFC529B7A0D421A4135143211AED9CAB12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:8e:99:52:2d:83:8d:c2:b9:96:d2:fd:18: 0b:e0:31:1d:97:be:2f:fb:32:0d:5e:0c:ca:88:b5: 5c:cc:96:19:41:de:f3:f3:dc:24:6c:0f:69:eb:56: 37:75:9b:25:44:c3:3d:eb:ed:12:26:aa:32:ab:d0: 9b:b1:08:24:d3:4a:94:ea:ad:76:b0:a0:24:9e:b8: af:b1:34:98:21:99:7c:a5:e3:e8:77:96:aa:92:24: bf:0f:f4:ac:ee:f1:00:a5:9a:6c:ab:1b:8d:49:f2: 25:af:74:fd:c7:c5:4c:30:62:3e:d9:1e:83:f1:ca: 69:69:ef:e7:f9:f9:d4:b6:1e:56:00:c4:ce:d9:88: a0:40:20:94:8a:93:ae:39:3d:55:04:25:c4:4d:6d: 20:15:db:78:3c:2c:6a:b5:5f:c8:35:43:64:a6:57: 90:cb:4a:bb:68:91:1c:61:4c:41:d9:8f:f5:5d:4e: 50:e4:80:8b:32:42:fe:09:55:1a:29:a3:ff:57:a5: b5:a2:8c:bd:c4:2e:0b:0a:be:1f:24:b4:50:a7:94: 22:71:a8:08:03:01:1a:b6:ed:64:94:06:9d:2e:38: 35:3f:1e:bf:a7:49:7c:70:bf:39:94:3b:a2:89:f1: ec:47:60:a4:76:4b:06:f8:5a:d3:0a:6c:3e:c0:a1: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A0:CA:BF:C5:29:B7:A0:D4:21:A4:13:51:43:21:1A:ED:9C:AB:12 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.96.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:23:98:d2:cf:70:4d:59:f7:75:94:a6:f6:47:e3:54:fb:b7: 86:49:02:86:e3:7d:db:be:23:5e:e3:2a:82:88:0b:6e:f7:05: 38:13:ec:45:25:18:cd:82:02:9a:9c:8d:01:2f:74:30:d9:20: 61:94:2c:fc:f6:42:89:4b:41:7d:bf:0e:0c:d3:35:e6:25:88: 56:04:5c:5a:33:22:0c:1f:e5:56:d6:76:f5:31:49:d2:ec:ef: 25:b1:fe:d8:88:6f:49:cf:4a:03:75:e1:e0:da:ea:e1:40:f0: f1:cc:8b:62:d8:06:bf:69:a3:f1:e3:da:d3:2d:52:ff:4c:52: 6a:e9:00:13:1d:56:cb:fe:d1:ac:7d:01:39:ff:94:56:1b:10: 98:fa:ec:58:ff:cd:2c:27:55:b9:03:31:44:43:45:a6:d4:56: 74:cd:df:bb:d2:0d:68:44:5e:b7:7d:b1:b0:6e:6a:8f:78:ad: be:e0:b7:63:f4:69:af:1f:df:f6:7c:ef:c7:48:b1:7a:41:6b: fe:fe:48:c3:89:23:82:7c:5f:d4:93:e9:be:08:34:cb:28:e9: 22:80:bb:3a:ab:06:d9:6e:b4:29:10:b8:5e:a1:a5:63:b0:94: 17:80:7f:6f:ba:56:f1:f8:58:a8:a8:28:68:33:78:75:b7:ef: 0e:0e:92:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczQTBDQUJGQzUyOUI3 QTBENDIxQTQxMzUxNDMyMTFBRUQ5Q0FCMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeo46ZUi2DjcK5ltL9GAvgMR2Xvi/7Mg1eDMqItVzMlhlB3vPz 3CRsD2nrVjd1myVEwz3r7RImqjKr0JuxCCTTSpTqrXawoCSeuK+xNJghmXyl4+h3 lqqSJL8P9Kzu8QClmmyrG41J8iWvdP3HxUwwYj7ZHoPxymlp7+f5+dS2HlYAxM7Z iKBAIJSKk645PVUEJcRNbSAV23g8LGq1X8g1Q2SmV5DLSrtokRxhTEHZj/VdTlDk gIsyQv4JVRopo/9XpbWijL3ELgsKvh8ktFCnlCJxqAgDARq27WSUBp0uODU/Hr+n SXxwvzmUO6KJ8exHYKR2Swb4WtMKbD7AofHVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUc6DKv8Upt6DUIaQTUUMhGu2cqxIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2M2REt2OFVwdDZEVUlhUVRV VU1oR3UyY3F4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6GAwDQYJKoZIhvcNAQELBQADggEBAIwjmNLPcE1Z93WUpvZH41T7t4ZJAobjfdu+ I17jKoKIC273BTgT7EUlGM2CApqcjQEvdDDZIGGULPz2QolLQX2/DgzTNeYliFYE XFozIgwf5VbWdvUxSdLs7yWx/tiIb0nPSgN14eDa6uFA8PHMi2LYBr9po/Hj2tMt Uv9MUmrpABMdVsv+0ax9ATn/lFYbEJj67Fj/zSwnVbkDMURDRabUVnTN37vSDWhE Xrd9sbBuao94rb7gt2P0aa8f3/Z878dIsXpBa/7+SMOJI4J8X9ST6b4INMso6SKA uzqrBtlutCkQuF6hpWOwlBeAf2+6VvH4WKioKGgzeHW37w4OkiI= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:58 2024 by rpki-client on console-ams.rpki-client.org