$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cKRFj35-cIa4WL9_zunEbjBJGtE.roa File: cKRFj35-cIa4WL9_zunEbjBJGtE.roa (raw, json) Hash identifier: kbZtluPYzmUPAY86xIdXC85p7IZh8957xS1sf8bouAY= Subject key identifier: 70:A4:45:8F:7E:7E:70:86:B8:58:BF:7F:CE:E9:C4:6E:30:49:1A:D1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29FB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cKRFj35-cIa4WL9_zunEbjBJGtE.roa Signing time: Fri 01 Sep 2023 10:07:21 +0000 ROA not before: Fri 01 Sep 2023 10:07:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 211.76.121.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10747 (0x29fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=70A4458F7E7E7086B858BF7FCEE9C46E30491AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:6d:a0:9f:87:a1:c2:13:bd:2e:ba:0f:9d: 03:bf:8d:e2:b5:26:9b:34:e9:42:62:d5:b3:c6:6a: cb:30:95:c5:dd:02:c3:8b:fb:1a:e0:37:51:3d:13: 29:ec:7d:ac:e7:e1:52:b9:32:f5:fc:f0:32:a1:31: c4:d2:96:4a:4e:85:25:21:bb:b3:67:d8:32:83:f5: 2f:2b:a1:da:88:98:d0:ac:26:91:42:41:00:c4:2c: a1:2c:ad:cb:85:20:63:f1:3a:d1:42:98:14:4f:3d: 81:58:c3:04:8a:e9:44:52:a8:15:19:d3:7c:6b:ae: dd:a6:58:3c:ca:a5:a9:e2:f4:53:2e:8a:86:df:09: 24:0f:f9:24:f2:cd:c6:f6:a7:ab:26:53:c7:f8:b9: 8d:f5:94:f8:38:4a:b8:87:ce:9b:54:a2:54:a4:2d: 58:9f:31:49:91:2d:53:47:d0:20:d5:c1:fc:f7:3b: d5:ca:a6:de:dc:e5:81:45:d4:89:ff:53:02:7a:d7: 11:c6:53:bb:6d:09:27:4a:8c:28:b2:e5:45:d8:36: 45:ef:b3:c6:5b:08:4b:3f:b3:93:19:5e:97:72:ee: 42:bf:44:36:f7:ff:34:d0:9d:dd:ec:9c:c4:5d:19: b7:e3:03:94:ac:8f:a0:03:9f:ca:c2:d9:b6:02:e3: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:45:8F:7E:7E:70:86:B8:58:BF:7F:CE:E9:C4:6E:30:49:1A:D1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cKRFj35-cIa4WL9_zunEbjBJGtE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.121.0/25 Signature Algorithm: sha256WithRSAEncryption 95:93:47:fc:8b:cf:2e:0c:dc:6e:1b:a3:1d:bb:fb:3a:1c:4b: a9:3f:c5:e4:38:dc:cc:d7:e4:3a:63:0b:ad:8d:4b:38:0c:af: 94:51:45:01:69:5c:28:2b:02:2a:50:26:06:f7:a3:0b:c1:e2: f5:d9:b8:ef:0a:72:1a:96:dd:65:9c:fd:06:7e:54:11:1c:c1: 94:06:d8:6a:bd:9d:0c:d1:12:58:b9:d4:eb:74:ac:0f:c2:8d: f6:b3:bd:c1:b1:b8:42:2d:29:53:11:34:1a:9a:08:22:50:f3: 9a:19:80:86:8d:d5:cb:5f:9e:b5:ef:c4:1d:20:1a:f6:b4:52: 47:3f:61:10:82:95:7e:a0:c8:9d:5f:2e:7b:24:ba:a1:0e:b3: 67:fe:30:19:5a:3f:c1:31:69:35:f5:c8:dd:49:8b:59:85:db: 52:3e:2e:77:7a:9b:52:62:d0:d1:30:74:bb:08:19:17:a7:b1: e4:b6:4a:ce:de:ea:88:3c:4a:5e:c6:c6:99:b4:4f:a8:a0:a4: bb:0c:61:bb:1e:f8:31:36:0a:bd:ac:e9:a1:4e:5d:6e:fc:f4: 3a:ee:5a:16:fa:9a:36:f8:68:a1:8a:18:59:44:62:94:bb:d5: 7c:e9:76:63:e1:fb:1b:a3:e5:23:53:a7:1d:10:5e:7a:66:c6: 7a:fe:40:9c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwQTQ0NThGN0U3RTcw ODZCODU4QkY3RkNFRTlDNDZFMzA0OTFBRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZam2gn4ehwhO9LroPnQO/jeK1Jps06UJi1bPGasswlcXdAsOL +xrgN1E9Eynsfazn4VK5MvX88DKhMcTSlkpOhSUhu7Nn2DKD9S8rodqImNCsJpFC QQDELKEsrcuFIGPxOtFCmBRPPYFYwwSK6URSqBUZ03xrrt2mWDzKpani9FMuiobf CSQP+STyzcb2p6smU8f4uY31lPg4SriHzptUolSkLVifMUmRLVNH0CDVwfz3O9XK pt7c5YFF1In/UwJ61xHGU7ttCSdKjCiy5UXYNkXvs8ZbCEs/s5MZXpdy7kK/RDb3 /zTQnd3snMRdGbfjA5Ssj6ADn8rC2bYC4zHHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUcKRFj35+cIa4WL9/zunEbjBJGtEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NLUkZqMzUtY0lhNFdMOV96 dW5FYmpCSkd0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THkAMA0GCSqGSIb3DQEBCwUAA4IBAQCVk0f8i88uDNxuG6Mdu/s6HEupP8XkONzM 1+Q6YwutjUs4DK+UUUUBaVwoKwIqUCYG96MLweL12bjvCnIalt1lnP0GflQRHMGU BthqvZ0M0RJYudTrdKwPwo32s73BsbhCLSlTETQamggiUPOaGYCGjdXLX56178Qd IBr2tFJHP2EQgpV+oMidXy57JLqhDrNn/jAZWj/BMWk19cjdSYtZhdtSPi53eptS YtDRMHS7CBkXp7HktkrO3uqIPEpexsaZtE+ooKS7DGG7HvgxNgq9rOmhTl1u/PQ6 7loW+po2+GihihhZRGKUu9V86XZj4fsbo+UjU6cdEF56ZsZ6/kCc -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org