$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dlnYO2oJWO2R9Fms_H_I0NcBvpU.roa File: dlnYO2oJWO2R9Fms_H_I0NcBvpU.roa (raw, json) Hash identifier: 620h6zQzqdNY3y1dVYlLj1koPMCNJyoY97oPbeVRD2w= Subject key identifier: 76:59:D8:3B:6A:09:58:ED:91:F4:59:AC:FC:7F:C8:D0:D7:01:BE:95 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28A8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dlnYO2oJWO2R9Fms_H_I0NcBvpU.roa Signing time: Fri 01 Sep 2023 10:05:37 +0000 ROA not before: Fri 01 Sep 2023 10:05:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 45.64.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10408 (0x28a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7659D83B6A0958ED91F459ACFC7FC8D0D701BE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:3b:41:1b:a4:62:c4:ce:0e:0a:f3:90:71: 2c:e6:e5:1e:22:d0:10:5e:dc:f3:3d:8c:7d:c5:65: 50:76:bc:c9:d3:45:63:73:64:fb:d7:ac:09:f5:94: f2:30:38:8d:09:ae:cd:ef:a9:75:b6:02:08:9c:1c: 53:2d:45:fd:6e:85:49:ad:fd:fc:be:f4:c3:db:23: 89:dc:29:99:89:bc:18:27:8d:75:91:da:d5:0a:a1: 36:72:ab:79:ee:4d:5b:44:fb:05:7a:2d:ee:b8:22: e9:d7:1f:d5:cd:3f:d6:66:64:36:d5:0e:5f:c3:ba: f0:b2:68:d7:08:22:36:7c:f9:20:e1:7a:4b:a3:65: 56:08:b2:b7:54:02:a9:31:d2:74:b3:b2:d4:88:1a: 0e:b2:9b:fd:dd:59:08:4a:de:a4:b3:da:6e:f5:af: ea:5b:e1:86:46:af:cd:9f:ad:69:6d:c8:f7:43:5c: a2:6e:7e:7c:0a:ea:00:aa:b7:7d:b7:33:86:9b:8e: 0a:7a:b1:a8:4d:96:76:63:a3:2d:02:23:66:6c:08: da:f9:b9:3f:e9:30:4a:f2:03:82:47:26:d4:66:a6: e1:05:a7:e7:18:ef:b2:66:bc:5d:82:e6:4c:07:52: 55:94:6e:d9:68:b1:15:4a:dc:ac:f9:99:e5:be:50: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:59:D8:3B:6A:09:58:ED:91:F4:59:AC:FC:7F:C8:D0:D7:01:BE:95 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dlnYO2oJWO2R9Fms_H_I0NcBvpU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.31.0/24 Signature Algorithm: sha256WithRSAEncryption 26:1e:45:81:3a:d5:e5:fb:92:f3:c8:3e:78:1f:d8:7b:11:72: 6b:99:23:ea:3d:79:d7:65:8c:fb:aa:72:1f:9b:ae:37:79:66: 20:7c:39:33:1a:0f:fb:3c:55:e9:64:e0:8c:ba:c4:62:30:33: 65:46:91:ce:3a:c0:7a:33:5f:95:fd:7e:26:3d:8c:c5:43:77: 7b:10:05:0d:b6:c0:7a:0c:53:f1:9d:3d:4b:4c:cd:1d:cb:09: f2:4c:33:d6:51:e4:37:79:36:4e:d1:be:57:a3:a7:8e:e7:33: 46:f5:09:d9:40:08:c8:f5:0b:cc:f5:f4:00:a2:07:94:6b:7f: af:bc:99:75:d6:7a:cc:39:aa:86:19:08:24:d1:e1:84:5f:93: a3:30:60:8f:e3:c8:09:3d:3f:47:d2:95:68:fc:c6:c7:15:06: 00:c6:9d:31:bc:2f:28:af:9c:44:bf:36:5c:b2:44:02:79:19: e0:b9:19:78:18:8c:7a:f8:ef:1f:95:18:c8:2e:4a:d7:e9:b0: 83:61:06:1d:6a:39:f9:e3:bf:6c:9b:7b:98:29:7b:ce:87:8b: af:d8:ab:30:65:aa:55:e1:fe:1c:cd:f6:da:f9:62:9a:a1:c7: d1:28:ad:a4:a6:d5:cd:03:1a:4b:4d:ba:68:82:b0:41:ca:07: b2:ab:2e:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2NTlEODNCNkEwOTU4 RUQ5MUY0NTlBQ0ZDN0ZDOEQwRDcwMUJFOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDELTtBG6RixM4OCvOQcSzm5R4i0BBe3PM9jH3FZVB2vMnTRWNz ZPvXrAn1lPIwOI0Jrs3vqXW2AgicHFMtRf1uhUmt/fy+9MPbI4ncKZmJvBgnjXWR 2tUKoTZyq3nuTVtE+wV6Le64IunXH9XNP9ZmZDbVDl/DuvCyaNcIIjZ8+SDhekuj ZVYIsrdUAqkx0nSzstSIGg6ym/3dWQhK3qSz2m71r+pb4YZGr82frWltyPdDXKJu fnwK6gCqt323M4abjgp6sahNlnZjoy0CI2ZsCNr5uT/pMEryA4JHJtRmpuEFp+cY 77JmvF2C5kwHUlWUbtlosRVK3Kz5meW+UNVJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdlnYO2oJWO2R9Fms/H/I0NcBvpUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RsbllPMm9KV08yUjlGbXNf SF9JME5jQnZwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QB8wDQYJKoZIhvcNAQELBQADggEBACYeRYE61eX7kvPIPngf2HsRcmuZI+o9eddl jPuqch+brjd5ZiB8OTMaD/s8Velk4Iy6xGIwM2VGkc46wHozX5X9fiY9jMVDd3sQ BQ22wHoMU/GdPUtMzR3LCfJMM9ZR5Dd5Nk7Rvlejp47nM0b1CdlACMj1C8z19ACi B5Rrf6+8mXXWesw5qoYZCCTR4YRfk6MwYI/jyAk9P0fSlWj8xscVBgDGnTG8Lyiv nES/NlyyRAJ5GeC5GXgYjHr47x+VGMguStfpsINhBh1qOfnjv2ybe5gpe86Hi6/Y qzBlqlXh/hzN9tr5Ypqhx9EoraSm1c0DGktNumiCsEHKB7KrLgY= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org