$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa File: cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa (raw, json) Hash identifier: bhqv6FuVIsxfpHcCiwioKmWflxyg6aTojkEyNBf3RL4= Subject key identifier: 73:0C:B1:BC:0F:A1:C9:87:F6:CE:DA:20:B0:9D:33:42:22:19:0F:34 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27C2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa Signing time: Fri 01 Sep 2023 10:04:30 +0000 ROA not before: Fri 01 Sep 2023 10:04:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10178 (0x27c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=730CB1BC0FA1C987F6CEDA20B09D334222190F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:ca:12:8c:bb:e2:41:51:30:4a:d9:97:6d: 0b:9e:ff:4b:26:99:a1:c1:f9:69:fe:3b:a1:c2:fc: 52:8f:f0:42:a3:90:f3:d1:1f:36:24:b5:60:9f:c2: 19:55:3e:8f:d4:48:55:be:42:4f:97:5e:f5:05:19: 31:0f:f3:97:52:9a:34:ed:0d:58:c9:04:56:ce:42: 19:fa:de:31:55:56:87:63:6e:e5:12:6c:6d:73:df: 5a:b2:ba:b6:20:de:c4:ea:79:45:07:55:ec:c1:83: ca:ec:e2:d9:2c:b0:5e:2d:ee:23:31:2c:a4:4e:f2: e1:7f:04:e3:64:8e:26:8f:77:15:dc:b6:9d:82:f9: ba:ad:4c:ab:b2:f3:ae:1b:16:78:cf:31:80:78:4a: d2:b1:c4:33:f2:e8:7d:61:56:4e:5c:7f:29:cf:32: 99:6e:9a:d2:77:ea:fc:f5:9b:85:f5:56:d4:5f:0c: de:e5:61:fd:75:74:8e:8d:8b:d0:9d:85:1c:e0:24: e3:69:5e:56:f1:56:1e:b7:e2:a9:91:8f:eb:ad:ed: 2f:90:3a:40:4f:5b:07:5b:38:47:2c:b2:57:7e:36: a1:76:09:ab:cc:a3:e2:b8:ce:3e:36:cc:3b:a6:02: 5f:0e:c2:95:22:a3:b5:f5:eb:01:3c:e9:7d:c7:87: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0C:B1:BC:0F:A1:C9:87:F6:CE:DA:20:B0:9D:33:42:22:19:0F:34 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.148.0/23 Signature Algorithm: sha256WithRSAEncryption a3:40:e6:f0:47:54:19:ca:56:b6:54:6b:63:e6:c9:bd:12:94: e5:36:49:bf:39:53:00:19:4d:8f:3b:0d:c5:06:80:7e:02:8f: 3f:da:b6:52:d2:ea:d0:c1:76:23:2d:c9:5a:b7:0a:b0:f6:4a: fa:43:88:67:e4:aa:d8:01:86:79:49:c2:14:ac:18:a7:a2:74: 8e:67:b3:55:c5:92:6f:3d:9b:6f:b9:31:56:37:a2:00:e2:a1: ed:5e:00:9e:da:4b:62:95:92:f2:ad:79:f3:4c:a1:5b:e4:3c: 7d:3f:84:73:9d:80:b3:ac:4d:fd:79:09:fa:ab:56:87:8e:76: 17:16:44:3f:6b:88:7c:bd:50:c2:13:4b:f2:74:5c:fd:1c:34: 2f:81:5c:64:fc:fe:4c:93:3a:3d:78:73:20:4a:51:35:53:1a: 92:f8:72:e4:d3:90:93:67:2a:33:94:18:02:0b:8d:c4:21:2b: 64:cb:c5:f9:35:b0:af:d9:5b:4a:a6:2e:48:f7:0e:ec:81:36: cb:3e:8e:5d:d5:21:11:39:96:01:88:2d:5f:ff:d0:c0:34:26: 1e:cf:5e:31:57:4d:3b:cf:03:80:f0:b7:8b:74:fe:9b:78:57: d1:f4:cb:d5:04:3e:c4:af:68:81:d5:ec:66:12:ab:14:3a:c9: a1:ac:23:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczMENCMUJDMEZBMUM5 ODdGNkNFREEyMEIwOUQzMzQyMjIxOTBGMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMlsoSjLviQVEwStmXbQue/0smmaHB+Wn+O6HC/FKP8EKjkPPR HzYktWCfwhlVPo/USFW+Qk+XXvUFGTEP85dSmjTtDVjJBFbOQhn63jFVVodjbuUS bG1z31qyurYg3sTqeUUHVezBg8rs4tkssF4t7iMxLKRO8uF/BONkjiaPdxXctp2C +bqtTKuy864bFnjPMYB4StKxxDPy6H1hVk5cfynPMplumtJ36vz1m4X1VtRfDN7l Yf11dI6Ni9CdhRzgJONpXlbxVh634qmRj+ut7S+QOkBPWwdbOEcssld+NqF2CavM o+K4zj42zDumAl8OwpUio7X16wE86X3Hh2WzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcwyxvA+hyYf2ztogsJ0zQiIZDzQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N3eXh2QS1oeVlmMnp0b2dz SjB6UWlJWkR6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq AZQwDQYJKoZIhvcNAQELBQADggEBAKNA5vBHVBnKVrZUa2Pmyb0SlOU2Sb85UwAZ TY87DcUGgH4Cjz/atlLS6tDBdiMtyVq3CrD2SvpDiGfkqtgBhnlJwhSsGKeidI5n s1XFkm89m2+5MVY3ogDioe1eAJ7aS2KVkvKtefNMoVvkPH0/hHOdgLOsTf15Cfqr VoeOdhcWRD9riHy9UMITS/J0XP0cNC+BXGT8/kyTOj14cyBKUTVTGpL4cuTTkJNn KjOUGAILjcQhK2TLxfk1sK/ZW0qmLkj3DuyBNss+jl3VIRE5lgGILV//0MA0Jh7P XjFXTTvPA4Dwt4t0/pt4V9H0y9UEPsSvaIHV7GYSqxQ6yaGsI3Y= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org