$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa File: dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa (raw, json) Hash identifier: d8QIQjFrdhBp++3oU4aVJ048ncska+o8rEk/1aLikg4= Subject key identifier: 77:2F:84:47:F8:54:D1:AD:3E:6F:A0:F7:2C:9E:A5:1D:85:5A:C7:FC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AB8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa Signing time: Fri 01 Sep 2023 10:08:13 +0000 ROA not before: Fri 01 Sep 2023 10:08:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 45.64.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10936 (0x2ab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=772F8447F854D1AD3E6FA0F72C9EA51D855AC7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:9d:d9:db:ae:84:38:b0:51:0d:96:26:cd: 21:90:34:f9:a1:62:2e:25:6b:a4:92:f3:1c:db:a8: fb:a5:c6:63:0d:63:41:0a:6e:c2:34:05:57:27:58: 73:7a:a6:f6:78:f5:09:70:c6:bd:b7:82:9d:60:cd: 81:84:ef:2d:e1:30:d3:e2:fd:cd:a3:be:7a:64:97: a6:dc:f5:bc:33:b9:df:a8:c9:7b:7c:6c:ff:d9:11: f8:f0:9f:23:da:a0:e4:6c:5d:9d:76:63:5e:68:6a: 0e:d6:d3:18:7e:91:36:2d:9c:31:55:e1:e1:ec:69: 2c:a8:6d:d4:72:58:23:fc:89:f7:2d:b0:e8:0d:8c: 97:c5:0c:f3:f3:0b:df:22:ad:33:48:43:e7:38:03: 12:51:7e:23:73:f0:a8:8f:f4:5e:1b:e6:06:a3:1d: 9c:f5:33:62:4d:83:e6:dd:07:20:81:2c:d7:af:1c: 73:5a:ef:46:21:26:84:df:53:c6:2a:11:58:28:4c: 45:47:29:c0:1e:cb:0e:b2:65:32:ae:8f:46:ed:9e: 71:18:d7:d9:e3:d7:06:4d:34:6b:be:8a:5e:59:79: cd:37:48:6e:4d:97:7b:3d:9d:e8:32:c1:f6:bc:41: b2:57:c5:d7:e7:f7:46:22:cd:a2:c5:13:ef:9c:e7: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2F:84:47:F8:54:D1:AD:3E:6F:A0:F7:2C:9E:A5:1D:85:5A:C7:FC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.30.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e8:b4:a3:14:64:6e:5e:b8:8c:ef:a1:d4:51:35:30:0a:d0: 5e:53:9d:e7:de:44:ea:c4:ed:91:2f:3f:93:21:99:4a:40:55: 33:a9:88:c3:1d:bb:2b:6c:c7:ef:c5:6e:c5:d6:c7:28:7e:d2: 78:82:92:b0:1a:5c:32:60:11:22:05:5d:31:8f:ec:9b:9e:9e: 33:87:a5:fe:0c:b6:1b:95:af:32:aa:02:4e:4f:b9:d8:0f:7c: 10:5f:e5:cc:6a:c9:a4:18:67:43:16:04:c0:dc:25:52:1b:90: fe:d1:83:39:8d:1f:da:00:5d:67:27:e3:c4:fd:07:59:a8:26: 7c:aa:b8:ca:34:34:c1:66:d0:06:d4:1d:4e:7c:aa:46:ed:95: 5c:75:ae:7f:c1:97:3b:09:2c:c9:2a:86:9e:cb:6f:85:87:76: 5b:67:c3:9b:30:50:9d:d9:5d:f9:9d:d3:7a:f5:7b:a3:27:dc: 2c:27:b3:94:ae:44:48:41:32:b9:a3:3c:67:2d:b8:53:5a:42: 0b:83:c1:25:e2:2a:4b:af:fb:38:9b:4f:89:e7:93:0c:33:96: 47:8b:62:d6:34:ba:b1:0b:4e:1b:5a:fd:18:7b:80:a3:c4:1c: 64:63:bd:a3:a8:ce:f6:4a:4c:e6:cb:cf:1f:bc:8c:f0:b6:4b: 32:01:7f:57 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3MkY4NDQ3Rjg1NEQx QUQzRTZGQTBGNzJDOUVBNTFEODU1QUM3RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa/p3Z266EOLBRDZYmzSGQNPmhYi4la6SS8xzbqPulxmMNY0EK bsI0BVcnWHN6pvZ49Qlwxr23gp1gzYGE7y3hMNPi/c2jvnpkl6bc9bwzud+oyXt8 bP/ZEfjwnyPaoORsXZ12Y15oag7W0xh+kTYtnDFV4eHsaSyobdRyWCP8ifctsOgN jJfFDPPzC98irTNIQ+c4AxJRfiNz8KiP9F4b5gajHZz1M2JNg+bdByCBLNevHHNa 70YhJoTfU8YqEVgoTEVHKcAeyw6yZTKuj0btnnEY19nj1wZNNGu+il5Zec03SG5N l3s9negywfa8QbJXxdfn90YizaLFE++c55eNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdy+ER/hU0a0+b6D3LJ6lHYVax/wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2R5LUVSX2hVMGEwLWI2RDNM SjZsSFlWYXhfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QB4wDQYJKoZIhvcNAQELBQADggEBAI7otKMUZG5euIzvodRRNTAK0F5TnefeROrE 7ZEvP5MhmUpAVTOpiMMduytsx+/FbsXWxyh+0niCkrAaXDJgESIFXTGP7JuenjOH pf4MthuVrzKqAk5PudgPfBBf5cxqyaQYZ0MWBMDcJVIbkP7RgzmNH9oAXWcn48T9 B1moJnyquMo0NMFm0AbUHU58qkbtlVx1rn/BlzsJLMkqhp7Lb4WHdltnw5swUJ3Z Xfmd03r1e6Mn3Cwns5SuREhBMrmjPGctuFNaQguDwSXiKkuv+zibT4nnkwwzlkeL YtY0urELThta/Rh7gKPEHGRjvaOozvZKTObLzx+8jPC2SzIBf1c= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org