$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/huyccdmvfRVvusDpw7OwyCxJHtk.roa File: huyccdmvfRVvusDpw7OwyCxJHtk.roa (raw, json) Hash identifier: blKzRn0jSuxP/pDq5uKR82Aj0r4eA2eYa9/PReBntaM= Subject key identifier: 86:EC:9C:71:D9:AF:7D:15:6F:BA:C0:E9:C3:B3:B0:C8:2C:49:1E:D9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29A1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/huyccdmvfRVvusDpw7OwyCxJHtk.roa Signing time: Fri 01 Sep 2023 10:06:52 +0000 ROA not before: Fri 01 Sep 2023 10:06:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10657 (0x29a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=86EC9C71D9AF7D156FBAC0E9C3B3B0C82C491ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:a2:36:08:2e:fd:43:4e:01:bd:b7:e5:61: 12:9e:89:8f:c4:41:94:ec:21:9c:b2:9d:9b:d1:50: 02:02:83:27:f8:82:e8:39:41:ec:4e:d1:91:d1:01: db:b4:8a:2e:92:6f:ad:b4:e6:0e:81:bd:b5:9d:a9: e2:6d:c5:23:e6:57:1e:93:aa:61:7b:b3:90:a9:71: c5:4b:d0:6c:c7:68:c6:e0:12:d0:89:01:9d:8a:22: ae:d3:ae:e9:5b:7f:70:60:a5:98:aa:cd:a6:20:16: 02:ba:52:0e:80:af:08:71:f2:da:8e:4c:98:73:97: e6:b9:d3:cc:ac:08:38:2f:03:df:7d:01:e6:18:fe: 9d:ea:67:20:94:e3:6c:53:6f:86:68:24:aa:32:a8: 8c:ac:68:f9:3b:bc:4f:e6:21:26:dd:60:83:11:23: 40:8d:fb:f8:48:5f:c4:14:e7:32:47:bc:b1:2e:da: 11:35:d6:a5:64:cd:d5:e0:ec:00:a5:33:1f:b5:d7: c8:a9:a3:e7:e9:b6:4c:b4:f7:1e:e0:4d:43:75:e2: d2:c7:2d:9c:ad:c2:e6:1d:be:4c:00:30:04:b5:3e: 2f:a5:1a:02:3f:5d:71:df:ec:d8:04:76:32:e1:48: 6d:03:25:03:9f:93:7d:78:f4:99:9c:63:17:e1:91: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EC:9C:71:D9:AF:7D:15:6F:BA:C0:E9:C3:B3:B0:C8:2C:49:1E:D9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/huyccdmvfRVvusDpw7OwyCxJHtk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.8.0/21 Signature Algorithm: sha256WithRSAEncryption a6:2c:37:68:7a:5f:65:82:f9:3f:20:c5:18:2d:9c:b5:fb:8a: 9b:08:d5:74:df:bc:06:02:a4:92:27:b1:10:73:bc:28:1f:b3: 2c:88:55:f1:03:ef:ae:3f:32:3d:9b:41:d4:e4:c6:2a:49:85: 10:16:c6:24:ba:a9:f0:d5:00:1a:9c:5b:4c:45:4d:fd:8f:f1: 4d:48:63:ca:f4:88:1e:5d:55:85:54:5f:c2:c0:5f:7b:e1:d8: 9a:e5:b8:10:fe:7e:49:0a:f7:f4:67:b1:fb:34:60:4d:f4:c0: 3a:a2:f7:18:78:c0:7d:54:57:44:14:37:ca:95:9e:07:1c:19: 7c:65:d2:1d:18:97:42:2f:65:92:74:6f:50:69:ec:56:83:11: 3b:1e:da:ca:88:c3:ae:7e:fa:6b:b1:9e:26:87:e7:4f:bc:14: de:dc:47:7f:a6:70:58:e6:c5:fe:c8:cd:9d:fd:c2:71:2b:d4: 7e:2a:5e:c2:96:ab:05:d1:33:86:54:9a:fb:ca:f6:00:3a:79: 20:f9:32:59:09:fd:dc:27:17:87:6a:33:15:cb:98:c0:4f:1b: db:47:25:a9:0a:eb:54:74:24:ac:a4:f0:3d:af:f5:b9:fc:c4: d4:e5:48:3e:f8:1e:e1:85:9c:5d:50:a4:af:5b:cc:21:2f:b8: 82:60:6d:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg2RUM5QzcxRDlBRjdE MTU2RkJBQzBFOUMzQjNCMEM4MkM0OTFFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9fqI2CC79Q04BvbflYRKeiY/EQZTsIZyynZvRUAICgyf4gug5 QexO0ZHRAdu0ii6Sb6205g6BvbWdqeJtxSPmVx6TqmF7s5CpccVL0GzHaMbgEtCJ AZ2KIq7Trulbf3BgpZiqzaYgFgK6Ug6Arwhx8tqOTJhzl+a508ysCDgvA999AeYY /p3qZyCU42xTb4ZoJKoyqIysaPk7vE/mISbdYIMRI0CN+/hIX8QU5zJHvLEu2hE1 1qVkzdXg7AClMx+118ipo+fptky09x7gTUN14tLHLZytwuYdvkwAMAS1Pi+lGgI/ XXHf7NgEdjLhSG0DJQOfk3149JmcYxfhkedXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhuyccdmvfRVvusDpw7OwyCxJHtkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2h1eWNjZG12ZlJWdnVzRHB3 N093eUN4Skh0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6QgwDQYJKoZIhvcNAQELBQADggEBAKYsN2h6X2WC+T8gxRgtnLX7ipsI1XTfvAYC pJInsRBzvCgfsyyIVfED764/Mj2bQdTkxipJhRAWxiS6qfDVABqcW0xFTf2P8U1I Y8r0iB5dVYVUX8LAX3vh2JrluBD+fkkK9/Rnsfs0YE30wDqi9xh4wH1UV0QUN8qV ngccGXxl0h0Yl0IvZZJ0b1Bp7FaDETse2sqIw65++muxniaH50+8FN7cR3+mcFjm xf7IzZ39wnEr1H4qXsKWqwXRM4ZUmvvK9gA6eSD5MlkJ/dwnF4dqMxXLmMBPG9tH JakK61R0JKyk8D2v9bn8xNTlSD74HuGFnF1QpK9bzCEvuIJgbQI= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org