$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h6Pry65eOqm603vXshsyx5JVjnY.roa File: h6Pry65eOqm603vXshsyx5JVjnY.roa (raw, json) Hash identifier: sjG9YdzAta0b4fV+mEw7X5l0VTxlz7+/ADbjyDyjkMA= Subject key identifier: 87:A3:EB:CB:AE:5E:3A:A9:BA:D3:7B:D7:B2:1B:32:C7:92:55:8E:76 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28AF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h6Pry65eOqm603vXshsyx5JVjnY.roa Signing time: Fri 01 Sep 2023 10:05:39 +0000 ROA not before: Fri 01 Sep 2023 10:05:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10415 (0x28af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=87A3EBCBAE5E3AA9BAD37BD7B21B32C792558E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:3d:86:ea:f6:90:14:4c:6f:41:ac:ae:f8: c0:41:a9:8c:0d:02:a8:7c:3f:b0:56:0d:1c:c2:ed: 63:aa:40:6f:55:41:c1:59:75:89:2b:cf:6d:9e:04: 26:fe:53:f5:0b:97:b6:81:d1:4d:2b:55:83:71:0a: 66:79:e2:be:de:7d:09:0d:d3:cf:94:cb:cf:58:9f: c4:9d:52:82:07:2f:36:3e:77:50:ec:49:e0:a0:17: d7:a2:46:13:e4:63:1a:b8:13:83:4a:df:c2:ea:6e: 30:2f:0a:3d:a3:64:7b:86:5f:48:e1:a8:e0:7e:b2: 12:b2:59:c6:e8:a9:fe:eb:fa:79:2b:a4:5d:83:7c: 05:e6:10:5a:f1:f7:97:f9:5c:22:32:e0:83:6a:e1: 55:75:70:9a:80:a6:63:7f:af:74:c3:4d:7a:48:b2: 88:f6:5b:c7:da:31:a7:83:20:65:00:21:86:f1:6d: fc:4e:00:95:cb:c7:69:60:c0:60:70:07:38:71:52: 0f:5b:44:8a:02:3d:3f:ad:87:83:73:1f:52:13:a3: bc:4f:ac:d4:75:5a:bf:e6:42:bc:f8:f8:83:2e:5e: e4:9c:45:84:90:0c:58:4c:01:56:1a:3a:8e:98:d9: fe:47:75:08:da:15:f5:6a:cb:21:8e:8c:e3:11:fe: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A3:EB:CB:AE:5E:3A:A9:BA:D3:7B:D7:B2:1B:32:C7:92:55:8E:76 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h6Pry65eOqm603vXshsyx5JVjnY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.167.0/24 Signature Algorithm: sha256WithRSAEncryption 44:d3:f6:5f:0c:0e:7e:b3:2d:32:a2:08:31:66:05:ef:a1:aa: 43:a2:7c:db:59:07:a9:eb:fd:57:6b:f7:24:df:8d:0c:eb:8b: 22:cc:31:61:94:e0:f8:76:e9:fc:dd:3b:8f:e8:47:73:73:c2: d0:e4:93:c2:bf:1d:a1:0d:78:68:8d:e1:e7:4c:83:fd:67:2a: d0:e1:2f:76:60:9c:41:61:dd:47:fa:67:fd:cd:30:e1:97:e3: b9:35:84:03:f0:a8:4c:5b:fe:f9:a8:99:64:cd:d3:86:75:ff: 86:c8:77:97:dc:57:04:5a:89:54:f1:73:4d:2e:e8:f8:4b:f2: e0:35:6f:a8:13:8d:3c:df:9e:24:05:ee:0c:d5:94:0c:8f:be: d7:ff:7f:d8:67:c9:bd:6c:4a:54:0c:ec:12:3c:61:8b:a1:a0: 45:30:8c:2c:ef:37:ef:04:0d:4f:3e:cc:3e:b2:3e:05:ec:b2: c1:88:1b:3b:db:d4:06:f9:69:1f:14:1c:64:3d:47:4e:c9:f2: a9:cd:de:b6:20:25:60:13:13:b1:f2:6d:56:13:07:8a:b3:1e: 54:5d:c6:d6:87:5f:52:0e:ea:21:d2:7d:3a:57:43:70:bb:ef: 99:f9:25:72:e9:6b:ea:cd:81:04:d8:a8:b6:5d:87:8b:c5:14: f3:cf:f4:81 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg3QTNFQkNCQUU1RTNB QTlCQUQzN0JEN0IyMUIzMkM3OTI1NThFNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgmz2G6vaQFExvQayu+MBBqYwNAqh8P7BWDRzC7WOqQG9VQcFZ dYkrz22eBCb+U/ULl7aB0U0rVYNxCmZ54r7efQkN08+Uy89Yn8SdUoIHLzY+d1Ds SeCgF9eiRhPkYxq4E4NK38LqbjAvCj2jZHuGX0jhqOB+shKyWcboqf7r+nkrpF2D fAXmEFrx95f5XCIy4INq4VV1cJqApmN/r3TDTXpIsoj2W8faMaeDIGUAIYbxbfxO AJXLx2lgwGBwBzhxUg9bRIoCPT+th4NzH1ITo7xPrNR1Wr/mQrz4+IMuXuScRYSQ DFhMAVYaOo6Y2f5HdQjaFfVqyyGOjOMR/tvBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUh6Pry65eOqm603vXshsyx5JVjnYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2g2UHJ5NjVlT3FtNjAzdlhz aHN5eDVKVmpuWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AacwDQYJKoZIhvcNAQELBQADggEBAETT9l8MDn6zLTKiCDFmBe+hqkOifNtZB6nr /Vdr9yTfjQzriyLMMWGU4Ph26fzdO4/oR3NzwtDkk8K/HaENeGiN4edMg/1nKtDh L3ZgnEFh3Uf6Z/3NMOGX47k1hAPwqExb/vmomWTN04Z1/4bId5fcVwRaiVTxc00u 6PhL8uA1b6gTjTzfniQF7gzVlAyPvtf/f9hnyb1sSlQM7BI8YYuhoEUwjCzvN+8E DU8+zD6yPgXsssGIGzvb1Ab5aR8UHGQ9R07J8qnN3rYgJWATE7HybVYTB4qzHlRd xtaHX1IO6iHSfTpXQ3C775n5JXLpa+rNgQTYqLZdh4vFFPPP9IE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org