$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa File: f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa (raw, json) Hash identifier: pxVlnl5+MpYkTaaVzP4qAdXGazM6romp1LNPSKMhQPM= Subject key identifier: 7F:85:44:E8:DB:47:E1:43:DB:F0:21:F2:A7:62:6E:3B:22:A1:BE:B3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AA5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa Signing time: Fri 01 Sep 2023 10:08:08 +0000 ROA not before: Fri 01 Sep 2023 10:08:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10917 (0x2aa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7F8544E8DB47E143DBF021F2A7626E3B22A1BEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:4c:76:3b:31:96:d9:a9:ac:b4:42:5c:92: f3:a6:a7:03:9d:4d:81:9b:f2:46:4e:c6:a2:92:46: 32:ce:67:49:bc:2e:8b:66:40:20:61:c1:d5:8e:68: 55:c8:bf:51:1c:d6:3d:54:be:7e:0f:bf:fd:24:16: e5:7f:44:a5:43:1f:57:8d:84:84:99:b9:09:88:31: c8:59:01:49:e7:60:8f:da:81:3e:bf:43:e6:30:58: 20:8b:b2:fb:47:e0:e1:d5:54:c9:b2:22:60:ba:8d: 47:14:af:37:22:6b:00:d6:b1:ca:56:27:e6:8d:32: 15:07:de:7b:5a:55:3a:33:28:f6:c6:5e:bc:cc:80: 05:7a:a7:17:e5:cd:cd:e1:bd:cd:ad:b1:62:a5:c1: 4a:c5:d6:14:73:cb:e5:c7:d6:d8:2c:4e:b7:41:07: 2a:d3:bc:37:c6:e7:cc:34:6c:11:e5:27:66:5a:61: 07:d4:95:78:73:89:e6:26:53:7f:33:e9:7d:f1:03: 9c:20:b5:5d:d6:66:30:78:d7:16:e1:08:87:5d:4b: 15:98:ed:b5:87:9c:33:07:29:f7:33:ae:50:01:24: 72:b7:f9:0e:4a:0a:a4:9a:86:b7:83:86:20:25:f0: 43:f5:04:6c:5e:34:c5:98:9e:db:75:c6:6b:a0:75: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:85:44:E8:DB:47:E1:43:DB:F0:21:F2:A7:62:6E:3B:22:A1:BE:B3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.144.0/22 Signature Algorithm: sha256WithRSAEncryption 81:4c:96:aa:10:58:4d:c4:7b:0f:85:e7:e9:e2:a4:3b:0a:46: c8:31:5c:47:df:0f:8f:12:44:ec:64:3f:46:cf:f5:50:21:0b: e6:8b:ab:f7:d6:3f:85:2e:3c:cc:ac:66:93:30:0b:d5:3e:ae: c7:bc:9f:d7:b5:87:c4:2a:25:08:28:ea:d5:6c:c0:21:27:69: a2:87:b1:09:72:c5:dd:ca:07:52:ee:c4:f2:fa:37:5c:46:ca: 3a:c6:0a:a4:6e:6e:03:18:08:56:a7:8d:79:6f:92:dc:bd:2a: bb:62:4f:3a:05:1d:30:3b:88:b1:76:2a:5a:5c:45:c7:d7:92: 03:75:13:1c:06:fc:ab:82:09:24:38:e6:e8:9e:5f:79:e0:91: f3:9c:82:a6:04:f7:b7:c7:d6:38:95:7f:3d:56:1c:0d:ce:6b: c7:3e:22:a9:df:8e:2c:36:d1:7a:9d:75:ef:06:26:cc:fe:27: ab:83:25:88:6a:bf:e7:c2:c3:2e:ba:99:b3:55:df:ac:0e:58: 1e:c2:3f:70:28:cf:39:5d:fa:f5:23:6f:d4:35:ba:d3:df:0e: cd:c7:89:25:f6:df:60:a4:d0:d8:55:b0:04:23:a2:ff:a5:e9: f9:97:f9:9f:a3:a3:98:14:13:8f:f4:a3:cb:36:aa:89:dd:0c: 74:5b:b1:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdGODU0NEU4REI0N0Ux NDNEQkYwMjFGMkE3NjI2RTNCMjJBMUJFQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqokx2OzGW2amstEJckvOmpwOdTYGb8kZOxqKSRjLOZ0m8Lotm QCBhwdWOaFXIv1Ec1j1Uvn4Pv/0kFuV/RKVDH1eNhISZuQmIMchZAUnnYI/agT6/ Q+YwWCCLsvtH4OHVVMmyImC6jUcUrzciawDWscpWJ+aNMhUH3ntaVTozKPbGXrzM gAV6pxflzc3hvc2tsWKlwUrF1hRzy+XH1tgsTrdBByrTvDfG58w0bBHlJ2ZaYQfU lXhzieYmU38z6X3xA5wgtV3WZjB41xbhCIddSxWY7bWHnDMHKfczrlABJHK3+Q5K CqSahreDhiAl8EP1BGxeNMWYntt1xmugde7hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUf4VE6NtH4UPb8CHyp2JuOyKhvrMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Y0VkU2TnRINFVQYjhDSHlw Mkp1T3lLaHZyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AZAwDQYJKoZIhvcNAQELBQADggEBAIFMlqoQWE3Eew+F5+nipDsKRsgxXEffD48S ROxkP0bP9VAhC+aLq/fWP4UuPMysZpMwC9U+rse8n9e1h8QqJQgo6tVswCEnaaKH sQlyxd3KB1LuxPL6N1xGyjrGCqRubgMYCFanjXlvkty9KrtiTzoFHTA7iLF2Klpc RcfXkgN1ExwG/KuCCSQ45uieX3ngkfOcgqYE97fH1jiVfz1WHA3Oa8c+Iqnfjiw2 0Xqdde8GJsz+J6uDJYhqv+fCwy66mbNV36wOWB7CP3Aozzld+vUjb9Q1utPfDs3H iSX232Ck0NhVsAQjov+l6fmX+Z+jo5gUE4/0o8s2qondDHRbsSg= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org