$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa File: cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa (raw, json) Hash identifier: aaWC2EEq4grO8nIO6H4a+xdCm7zF3CLzUFBFkmhnGsk= Subject key identifier: 73:07:4B:02:B8:61:42:13:12:D4:06:18:C5:F9:8B:DD:9D:15:28:0F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A46 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa Signing time: Fri 01 Sep 2023 10:07:42 +0000 ROA not before: Fri 01 Sep 2023 10:07:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10822 (0x2a46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=73074B02B861421312D40618C5F98BDD9D15280F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:ba:85:0c:5e:28:08:ee:74:6d:52:95:c9: 85:40:5c:b9:dd:90:43:ce:5f:b2:6c:5c:6f:7a:d5: 75:a3:c3:4b:c9:fb:7f:3c:9e:94:24:bd:c5:53:9f: ae:41:8a:f4:38:7a:d4:f4:4e:13:1e:d8:e2:39:7f: 59:88:3b:b6:63:33:a2:49:0c:fa:23:a8:ce:39:5f: bf:a3:fd:1e:44:17:c9:ad:b2:7c:a3:26:bf:be:03: 31:20:87:51:83:78:f7:81:37:f6:84:de:50:b9:e3: 6e:88:0e:54:6f:a8:b6:72:ed:13:52:54:fe:ee:12: b9:53:40:04:f1:0b:ad:59:f9:93:60:cc:3e:05:69: 00:ff:fd:65:f4:e8:d2:d9:f7:f4:98:b2:08:60:be: 74:69:38:b0:d6:4f:6d:3d:af:87:02:bf:f1:42:6b: 53:64:cf:fa:3b:18:38:49:29:67:a4:fa:5c:fc:60: 4f:dc:67:92:13:7d:2d:71:19:3a:a7:de:1f:81:1e: 9d:b5:a3:ca:9d:78:a1:79:59:ad:18:be:76:7b:5c: 9f:e8:4e:80:9f:51:6a:35:95:a4:a9:2e:f7:6b:a2: ab:3c:84:70:87:0e:6a:94:10:31:9b:00:d9:5b:58: 5c:8c:f4:97:89:fd:0b:bc:2e:9d:3b:fb:5e:47:fa: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:07:4B:02:B8:61:42:13:12:D4:06:18:C5:F9:8B:DD:9D:15:28:0F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.216.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:5f:1b:41:ff:5e:0e:42:33:31:f4:76:26:88:51:d9:03:e9: ac:43:b4:8d:a4:ad:e1:9d:eb:7d:26:1b:ce:44:4f:1d:68:3a: 00:3d:f2:03:87:01:b9:d3:24:55:86:73:65:5c:d8:cf:c9:1d: 80:1e:e3:36:fe:1a:6d:9a:d4:65:48:3d:fe:12:09:28:4e:ee: 3e:8a:59:20:49:8d:b2:64:07:b2:9c:c7:70:7d:f6:d9:2e:66: a4:97:27:d6:57:9b:f1:46:01:e9:b6:55:26:8d:82:b0:1e:72: 78:93:7f:0f:d2:21:71:12:db:2b:3b:72:40:2c:9c:4c:14:c4: 2f:56:0c:a0:65:ad:cb:cd:30:10:04:1f:76:65:9c:e5:de:bd: 6e:c2:5b:3a:b2:c7:7b:22:5b:e4:bb:53:d4:78:19:29:39:d2: 44:18:e0:6f:3a:eb:04:61:3f:22:48:b0:71:b8:de:a9:71:58: 59:98:10:57:af:d0:90:b6:b8:8e:f4:3d:8d:a2:48:97:3c:8c: 77:6b:91:3f:95:1f:fc:29:2d:5b:c0:2d:22:0d:43:a1:75:70: ea:e3:d9:f2:a3:a6:e9:ca:74:ab:fb:79:69:ed:ba:63:e7:be: 9a:88:00:6e:b7:09:f7:7f:22:f2:e0:67:40:cd:27:1e:fd:ab: a1:6f:3c:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczMDc0QjAyQjg2MTQy MTMxMkQ0MDYxOEM1Rjk4QkREOUQxNTI4MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCX7qFDF4oCO50bVKVyYVAXLndkEPOX7JsXG961XWjw0vJ+388 npQkvcVTn65BivQ4etT0ThMe2OI5f1mIO7ZjM6JJDPojqM45X7+j/R5EF8mtsnyj Jr++AzEgh1GDePeBN/aE3lC5426IDlRvqLZy7RNSVP7uErlTQATxC61Z+ZNgzD4F aQD//WX06NLZ9/SYsghgvnRpOLDWT209r4cCv/FCa1Nkz/o7GDhJKWek+lz8YE/c Z5ITfS1xGTqn3h+BHp21o8qdeKF5Wa0YvnZ7XJ/oToCfUWo1laSpLvdroqs8hHCH DmqUEDGbANlbWFyM9JeJ/Qu8Lp07+15H+gk1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcwdLArhhQhMS1AYYxfmL3Z0VKA8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N3ZExBcmhoUWhNUzFBWVl4 Zm1MM1owVktBOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6dgwDQYJKoZIhvcNAQELBQADggEBAApfG0H/Xg5CMzH0diaIUdkD6axDtI2kreGd 630mG85ETx1oOgA98gOHAbnTJFWGc2Vc2M/JHYAe4zb+Gm2a1GVIPf4SCShO7j6K WSBJjbJkB7Kcx3B99tkuZqSXJ9ZXm/FGAem2VSaNgrAecniTfw/SIXES2ys7ckAs nEwUxC9WDKBlrcvNMBAEH3ZlnOXevW7CWzqyx3siW+S7U9R4GSk50kQY4G866wRh PyJIsHG43qlxWFmYEFev0JC2uI70PY2iSJc8jHdrkT+VH/wpLVvALSINQ6F1cOrj 2fKjpunKdKv7eWntumPnvpqIAG63Cfd/IvLgZ0DNJx79q6FvPII= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org