$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dupupaLz_6MgzXqLdUmYwkcT5ug.roa File: dupupaLz_6MgzXqLdUmYwkcT5ug.roa (raw, json) Hash identifier: KNTUjzmMgfXA+HavZS5ZFzuDCO/pBw/b/x6B0UNRsaQ= Subject key identifier: 76:EA:6E:A5:A2:F3:FF:A3:20:CD:7A:8B:75:49:98:C2:47:13:E6:E8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29B2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dupupaLz_6MgzXqLdUmYwkcT5ug.roa Signing time: Fri 01 Sep 2023 10:06:56 +0000 ROA not before: Fri 01 Sep 2023 10:06:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10674 (0x29b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=76EA6EA5A2F3FFA320CD7A8B754998C24713E6E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2c:6c:75:1f:be:bd:1c:0b:95:df:9b:40:fa: 56:72:ed:a3:da:df:08:ab:3a:16:a7:b8:4e:fd:68: 8a:a0:f3:b5:2e:0f:a7:aa:fb:b6:c4:75:2d:ac:8d: 77:7c:16:f3:1e:75:8e:6a:01:f0:05:26:23:b8:29: cf:d5:65:b3:3a:98:0d:37:28:11:61:40:1c:17:e6: 5a:35:0b:7c:78:c0:e0:a5:ea:9b:19:1d:44:09:9a: 73:79:66:4d:22:66:89:26:b8:0c:90:30:be:26:63: 25:58:7f:38:27:8d:38:b2:a1:52:d0:41:6f:f7:06: b5:61:0c:6f:a4:9b:6e:36:c3:1d:2c:0e:55:37:c4: c8:44:6e:9e:24:72:c7:aa:0c:c2:bf:31:b3:3a:45: da:fa:f5:b6:05:b8:af:37:69:4c:c7:23:b4:f9:41: 58:8d:27:3f:5d:5f:65:1c:c2:37:89:9a:91:44:02: 7e:f8:da:6e:7c:fd:ae:0b:99:37:a1:91:ed:7e:2c: 16:4a:61:c0:fd:e5:38:10:61:3b:90:de:7d:24:6f: e7:b1:2d:d2:0d:cd:a4:bf:22:82:fa:e1:91:1d:e8: b8:23:ba:a0:6c:85:5b:61:75:55:c8:44:0c:2f:08: 20:54:f6:cb:2c:83:36:d9:8b:27:f6:90:b1:41:1b: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EA:6E:A5:A2:F3:FF:A3:20:CD:7A:8B:75:49:98:C2:47:13:E6:E8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dupupaLz_6MgzXqLdUmYwkcT5ug.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.152.0/22 Signature Algorithm: sha256WithRSAEncryption 16:9e:f4:d7:2b:6a:df:d3:e6:55:c8:bd:4a:3d:27:73:d5:67: e8:c0:e9:3a:69:a3:ab:38:3b:e2:b2:c3:65:f6:18:44:de:70: 9d:5f:3d:50:cf:51:a5:fe:0e:56:2b:4b:eb:99:d4:59:b1:e4: 83:69:5e:de:17:5c:01:7c:0f:bc:9a:bd:1a:dd:63:1b:2e:4c: 08:dd:38:73:49:82:24:b1:ad:b5:2e:34:40:ab:98:87:25:a5: 0e:0b:40:4f:ff:37:4c:e6:c4:13:86:a2:9f:e7:61:11:ba:80: f8:f5:b6:21:6d:4f:a5:ba:16:79:81:3a:95:f7:69:2e:c6:1d: 90:32:0a:df:5d:2f:08:61:67:49:d7:9d:12:51:b0:f1:3d:06: c6:17:5a:45:6d:9c:7b:89:21:2b:7f:60:d2:23:db:a6:71:48: 21:cb:a7:15:ac:93:ab:4d:dd:42:29:fe:1b:f4:75:50:1e:c2: 43:6d:84:6f:a5:09:82:90:d7:5f:de:52:61:ff:81:b9:68:57: cf:4d:74:72:b8:37:12:2c:e1:1a:e3:95:a8:c7:29:75:ce:5e: 4b:c0:df:b9:14:be:55:ef:1b:4b:d4:cb:aa:2d:fa:81:10:07: d3:30:e0:03:36:d6:68:75:9c:4c:75:70:bd:5b:4b:9d:ff:aa: ab:03:c5:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2RUE2RUE1QTJGM0ZG QTMyMENEN0E4Qjc1NDk5OEMyNDcxM0U2RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiLGx1H769HAuV35tA+lZy7aPa3wirOhanuE79aIqg87UuD6eq +7bEdS2sjXd8FvMedY5qAfAFJiO4Kc/VZbM6mA03KBFhQBwX5lo1C3x4wOCl6psZ HUQJmnN5Zk0iZokmuAyQML4mYyVYfzgnjTiyoVLQQW/3BrVhDG+km242wx0sDlU3 xMhEbp4kcseqDMK/MbM6Rdr69bYFuK83aUzHI7T5QViNJz9dX2UcwjeJmpFEAn74 2m58/a4LmTehke1+LBZKYcD95TgQYTuQ3n0kb+exLdINzaS/IoL64ZEd6LgjuqBs hVthdVXIRAwvCCBU9sssgzbZiyf2kLFBG2TzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdupupaLz/6MgzXqLdUmYwkcT5ugwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2R1cHVwYUx6XzZNZ3pYcUxk VW1Zd2tjVDV1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6ZgwDQYJKoZIhvcNAQELBQADggEBABae9Ncrat/T5lXIvUo9J3PVZ+jA6Tppo6s4 O+Kyw2X2GETecJ1fPVDPUaX+DlYrS+uZ1Fmx5INpXt4XXAF8D7yavRrdYxsuTAjd OHNJgiSxrbUuNECrmIclpQ4LQE//N0zmxBOGop/nYRG6gPj1tiFtT6W6FnmBOpX3 aS7GHZAyCt9dLwhhZ0nXnRJRsPE9BsYXWkVtnHuJISt/YNIj26ZxSCHLpxWsk6tN 3UIp/hv0dVAewkNthG+lCYKQ11/eUmH/gbloV89NdHK4NxIs4RrjlajHKXXOXkvA 37kUvlXvG0vUy6ot+oEQB9Mw4AM21mh1nEx1cL1bS53/qqsDxe4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org