$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa File: ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa (raw, json) Hash identifier: qN+ADxYQqqfMCD0F6SparBRcE3elZuPJ60UM+8L9luc= Subject key identifier: 72:D0:B7:B2:A4:55:F7:3D:60:85:1B:90:75:2C:F4:43:C0:35:62:DF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AA7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa Signing time: Fri 01 Sep 2023 10:08:09 +0000 ROA not before: Fri 01 Sep 2023 10:08:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.64.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10919 (0x2aa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=72D0B7B2A455F73D60851B90752CF443C03562DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:f4:5b:6c:65:ca:9e:8c:65:da:b0:2e:01: 6a:ed:2a:4e:a4:7f:4c:9c:9c:d3:78:e6:1d:76:34: 92:66:00:b1:3a:e9:c8:a8:ea:17:4d:d0:34:fb:60: 8f:99:df:04:3b:bb:c2:8f:fa:49:76:b0:f8:bf:18: b3:ec:7c:89:8b:70:a8:e4:88:df:bf:8f:95:5a:d8: 92:8b:59:19:db:59:26:75:fa:cc:8e:f9:9e:88:53: c5:d4:fa:e3:39:4c:fc:6c:a3:30:d2:5d:f3:a1:01: ee:2e:e7:ea:99:59:95:ce:86:47:14:bb:8c:19:d4: 46:48:38:b8:32:aa:4c:2f:17:74:29:c6:68:c9:47: fe:38:df:60:0d:9d:04:a7:b5:12:d5:ca:e2:af:d4: cd:28:94:34:a8:a0:1a:c3:46:5c:85:44:18:61:de: 59:49:ce:6a:4c:40:0e:cd:67:8e:38:ee:fa:06:1f: 1c:2f:32:19:38:ca:8b:79:10:b3:90:06:98:25:e9: 4f:d3:cb:08:cf:1a:d6:96:a4:b8:bc:2f:14:f2:8f: a2:8c:a4:60:3a:fa:62:4b:38:52:f2:74:16:08:1f: 74:07:6b:22:fc:c5:2c:f8:f5:dc:36:59:b4:95:ea: 0f:1c:0f:52:4c:90:36:1f:e4:d2:28:b0:fb:ec:af: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:B7:B2:A4:55:F7:3D:60:85:1B:90:75:2C:F4:43:C0:35:62:DF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.64.0/21 Signature Algorithm: sha256WithRSAEncryption 78:22:61:54:df:d5:05:39:ff:80:1c:44:fe:52:6b:38:3a:f3: 53:1d:4a:45:e5:fa:d0:47:e8:2e:55:9d:05:8d:7a:6b:3e:4b: fc:53:69:f6:d9:4e:d9:07:cf:1f:94:b4:12:ca:f0:e0:5c:7d: 08:f9:06:13:2b:a9:1a:a4:4b:f4:a9:9b:aa:57:f4:17:88:ce: e6:89:02:0a:aa:f5:e1:8a:ad:1b:10:31:fc:31:f7:50:73:23: e3:59:d5:11:c6:1b:99:c2:e2:2a:e9:27:73:c6:01:eb:3a:0f: e3:e7:8e:a6:62:8a:66:34:3c:b3:45:ea:e7:63:f2:de:6a:ef: 65:54:dd:77:ab:0e:7f:da:0e:a0:06:06:61:5b:87:59:b9:68: e0:13:e2:2d:32:ed:0b:0b:5a:f1:6e:f8:ca:6b:cc:fc:f0:78: ff:c8:e1:9a:41:2d:93:b8:05:49:d3:55:be:b1:96:e1:87:4f: 6a:25:0b:eb:c4:c9:fe:e6:39:0d:e9:2a:51:be:79:02:f9:a2: 64:85:22:5c:f1:82:35:75:01:9a:41:fc:3f:3a:84:5a:06:0f: 58:db:5c:ea:b0:6f:3e:eb:54:be:f0:f5:7d:3e:d8:79:95:8d: d9:c9:27:75:af:86:17:14:02:1b:56:50:bf:a7:e7:c0:a9:c1: 45:d3:42:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcyRDBCN0IyQTQ1NUY3 M0Q2MDg1MUI5MDc1MkNGNDQzQzAzNTYyREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmFvRbbGXKnoxl2rAuAWrtKk6kf0ycnNN45h12NJJmALE66cio 6hdN0DT7YI+Z3wQ7u8KP+kl2sPi/GLPsfImLcKjkiN+/j5Va2JKLWRnbWSZ1+syO +Z6IU8XU+uM5TPxsozDSXfOhAe4u5+qZWZXOhkcUu4wZ1EZIOLgyqkwvF3QpxmjJ R/4432ANnQSntRLVyuKv1M0olDSooBrDRlyFRBhh3llJzmpMQA7NZ4447voGHxwv Mhk4yot5ELOQBpgl6U/TywjPGtaWpLi8LxTyj6KMpGA6+mJLOFLydBYIH3QHayL8 xSz49dw2WbSV6g8cD1JMkDYf5NIosPvsr78tAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUctC3sqRV9z1ghRuQdSz0Q8A1Yt8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N0QzNzcVJWOXoxZ2hSdVFk U3owUThBMVl0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6EAwDQYJKoZIhvcNAQELBQADggEBAHgiYVTf1QU5/4AcRP5Sazg681MdSkXl+tBH 6C5VnQWNems+S/xTafbZTtkHzx+UtBLK8OBcfQj5BhMrqRqkS/Spm6pX9BeIzuaJ Agqq9eGKrRsQMfwx91BzI+NZ1RHGG5nC4irpJ3PGAes6D+PnjqZiimY0PLNF6udj 8t5q72VU3XerDn/aDqAGBmFbh1m5aOAT4i0y7QsLWvFu+MprzPzweP/I4ZpBLZO4 BUnTVb6xluGHT2olC+vEyf7mOQ3pKlG+eQL5omSFIlzxgjV1AZpB/D86hFoGD1jb XOqwbz7rVL7w9X0+2HmVjdnJJ3WvhhcUAhtWUL+n58CpwUXTQis= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org