$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa File: gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa (raw, json) Hash identifier: SStcrd4KDQOfTDzFMa826KcBJpv9uj0ifffLgQNZXQo= Subject key identifier: 80:B9:DB:8B:7D:D1:B2:75:09:A6:C3:F4:51:0E:4B:6C:73:51:34:CE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A4F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa Signing time: Fri 01 Sep 2023 10:07:44 +0000 ROA not before: Fri 01 Sep 2023 10:07:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10831 (0x2a4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:44 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=80B9DB8B7DD1B27509A6C3F4510E4B6C735134CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:08:42:26:2c:0e:f4:4f:3f:49:18:89:b2: d3:2e:29:13:5c:c1:7d:a5:26:b2:c6:1c:0e:6f:01: f1:c9:67:46:0c:66:18:ca:0c:52:6c:a1:85:a8:95: ca:6b:fd:43:17:ff:66:12:68:94:63:bc:bb:25:98: f0:61:4e:9d:11:3d:9f:b6:29:c1:dd:82:37:4c:b8: 29:4e:4f:95:26:2d:52:33:ec:a2:66:9e:35:ca:90: f3:7f:df:ea:89:77:12:f9:c1:18:99:1f:4c:7f:9f: 22:65:09:9a:d5:c2:f2:91:27:05:6d:16:59:60:0f: 0f:d7:a7:c7:85:23:5a:ee:8c:fc:25:32:94:21:40: 8d:73:27:23:40:5e:fc:9b:c6:7b:4a:b4:fd:3e:e2: c6:8e:59:b9:5a:35:64:7b:ab:1a:5a:2c:ed:28:8d: 67:06:7b:6c:5b:98:38:dd:8f:42:97:24:06:ef:2e: 80:82:af:e6:5e:ff:86:8e:b0:28:73:38:f7:df:5c: fb:84:ec:26:64:d0:d4:39:20:df:7c:54:fd:57:f5: 5c:ac:bd:d8:7c:ed:77:f8:48:f5:ee:8e:f0:7b:60: b8:b8:c5:e4:80:1f:07:45:8a:cf:d1:73:c3:9c:e6: 4d:a3:8b:77:89:98:33:9f:d1:e2:9e:0b:9a:18:8f: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B9:DB:8B:7D:D1:B2:75:09:A6:C3:F4:51:0E:4B:6C:73:51:34:CE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.102.0/24 Signature Algorithm: sha256WithRSAEncryption a4:80:aa:b6:d3:b8:e7:37:9a:cb:be:1c:3c:27:cc:e8:8f:d9: 64:a7:65:81:72:1d:a9:a5:5b:35:7f:02:f4:90:96:0b:dc:e7: 9d:0e:e3:c7:1b:98:16:66:15:ac:a7:04:f7:b2:ce:5f:89:ce: b2:8b:f6:b0:d5:44:58:1a:f9:60:cf:ad:ff:09:f4:a3:b2:3a: 4b:e9:a9:eb:96:ac:69:da:17:f1:42:a7:71:e6:81:51:5b:b2: d5:19:71:bd:31:b8:25:bb:e4:a6:df:ee:19:cf:b7:a8:d7:5a: 46:fc:3d:35:d3:ca:0a:e2:3d:7e:36:68:2c:e5:44:e8:ef:d5: 34:87:47:9b:4f:f6:f3:b7:be:89:1a:76:f1:3a:2c:49:3e:00: c3:30:53:0b:3c:e0:cf:19:3f:2e:30:ad:d8:19:7d:99:f5:b9: 72:a1:96:d6:78:b8:43:cd:b0:a0:39:9a:43:ec:2f:25:9a:3e: 87:79:56:32:ae:ee:ff:12:e9:ea:fc:a1:f4:f2:dd:d6:3d:23: 49:20:6d:be:88:a2:97:9f:c5:e0:2f:0c:1d:73:09:44:bc:60: 8b:9d:e1:d1:b4:36:4d:8a:10:d7:00:39:50:b6:70:39:82:6d: 90:52:5d:ab:3c:b4:aa:7a:e7:fa:90:0c:17:ba:33:3a:05:c6: ca:ff:eb:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgwQjlEQjhCN0REMUIy NzUwOUE2QzNGNDUxMEU0QjZDNzM1MTM0Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGOghCJiwO9E8/SRiJstMuKRNcwX2lJrLGHA5vAfHJZ0YMZhjK DFJsoYWolcpr/UMX/2YSaJRjvLslmPBhTp0RPZ+2KcHdgjdMuClOT5UmLVIz7KJm njXKkPN/3+qJdxL5wRiZH0x/nyJlCZrVwvKRJwVtFllgDw/Xp8eFI1rujPwlMpQh QI1zJyNAXvybxntKtP0+4saOWblaNWR7qxpaLO0ojWcGe2xbmDjdj0KXJAbvLoCC r+Ze/4aOsChzOPffXPuE7CZk0NQ5IN98VP1X9Vysvdh87Xf4SPXujvB7YLi4xeSA HwdFis/Rc8Oc5k2ji3eJmDOf0eKeC5oYj2JlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgLnbi33RsnUJpsP0UQ5LbHNRNM4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dMbmJpMzNSc25VSnBzUDBV UTVMYkhOUk5NNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AWYwDQYJKoZIhvcNAQELBQADggEBAKSAqrbTuOc3msu+HDwnzOiP2WSnZYFyHaml WzV/AvSQlgvc550O48cbmBZmFaynBPeyzl+JzrKL9rDVRFga+WDPrf8J9KOyOkvp qeuWrGnaF/FCp3HmgVFbstUZcb0xuCW75Kbf7hnPt6jXWkb8PTXTygriPX42aCzl ROjv1TSHR5tP9vO3vokadvE6LEk+AMMwUws84M8ZPy4wrdgZfZn1uXKhltZ4uEPN sKA5mkPsLyWaPod5VjKu7v8S6er8ofTy3dY9I0kgbb6IopefxeAvDB1zCUS8YIud 4dG0Nk2KENcAOVC2cDmCbZBSXas8tKp65/qQDBe6MzoFxsr/67s= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org