$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa File: i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa (raw, json) Hash identifier: Yxue4WIB9zF17JjQKKUkUhQXqTGsJNjWqBltkhuBvhY= Subject key identifier: 8B:52:5C:31:8B:0E:CC:05:C9:C2:E5:E2:FD:BF:03:09:1B:1B:3B:C9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AC0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa Signing time: Fri 01 Sep 2023 10:08:15 +0000 ROA not before: Fri 01 Sep 2023 10:08:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10944 (0x2ac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8B525C318B0ECC05C9C2E5E2FDBF03091B1B3BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:ab:ef:36:93:ca:b7:a8:ea:9b:3a:40:9b: 60:86:83:2d:ba:ee:a3:23:3e:9f:cb:44:6f:ca:6a: ce:eb:e4:0a:b6:2a:17:1d:a0:9e:03:d0:e9:e6:60: 45:22:c5:95:87:8a:60:75:be:5b:f3:88:18:6b:89: 81:23:44:18:4d:8c:7f:e8:db:87:0d:0c:a7:f3:52: 78:1e:81:12:7d:62:0c:58:7e:dc:79:c3:db:ea:7c: 22:bf:3f:40:96:d5:53:25:48:76:72:7a:71:45:25: bb:a9:98:78:e5:1c:49:f0:ea:b9:99:5d:9d:03:8a: ec:df:bf:29:35:5d:0a:22:21:40:f2:eb:42:75:39: 48:3b:ca:b5:78:57:a5:15:a8:3e:dd:72:b5:06:95: 5f:cd:94:6b:2d:a0:d1:9a:ed:95:17:58:ea:cf:7c: e9:a7:3a:04:11:7d:99:aa:19:0e:fc:fc:4b:06:fd: b7:f8:71:0f:e6:2a:6e:ec:90:66:01:b9:35:f3:a6: 31:55:a7:7c:92:15:fe:ee:34:6e:4a:ad:ce:c1:e5: 2a:7b:92:2a:f2:1e:ea:82:01:11:e5:eb:09:55:b8: 04:8f:19:cd:c2:55:96:37:a2:0f:72:54:9b:47:15: 51:2e:e0:f8:25:5d:e8:14:63:4d:18:fd:a1:39:65: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:5C:31:8B:0E:CC:05:C9:C2:E5:E2:FD:BF:03:09:1B:1B:3B:C9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.232.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:bc:a8:68:c2:31:d9:ea:78:bf:a8:31:c3:59:e4:47:8f:83: 8c:2e:e5:2b:a3:ea:28:15:ee:7f:eb:24:72:6b:21:3b:57:8e: e6:07:2a:f3:70:a8:e9:76:54:46:78:36:d0:8c:5f:15:ee:1e: 18:ee:7d:25:dd:c2:b5:ba:03:14:9e:e5:d9:d0:80:d5:42:36: a6:47:95:bb:1e:0c:6d:aa:e7:a0:12:45:e7:a8:77:a7:46:c8: 2b:17:7b:43:12:6c:f9:0e:7b:62:94:6e:68:52:23:b1:4e:34: 1c:88:1d:28:16:6f:2d:5f:85:7f:b3:09:c7:b9:49:41:85:bf: 8a:a6:a2:87:bc:24:83:ef:b3:f0:f1:09:d8:f4:7b:04:c5:1c: ce:78:c6:56:a7:15:da:96:80:a7:f0:d0:47:9c:2a:00:4c:46: 78:96:97:29:20:cd:bb:7b:19:c5:6d:ab:01:aa:41:1d:51:ac: cf:52:19:4b:15:8d:f6:d2:bd:78:96:06:43:9d:22:7f:4f:33: 63:68:73:9e:9d:6d:a6:68:fb:fe:da:94:04:e6:53:a5:30:d7: a1:ca:a0:ea:8e:a1:36:a3:c2:91:aa:a9:11:2e:af:95:94:84: c2:bf:32:40:6a:26:18:58:9e:fd:d8:be:58:dd:58:c0:0e:6c: 24:77:d2:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCNTI1QzMxOEIwRUND MDVDOUMyRTVFMkZEQkYwMzA5MUIxQjNCQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBwKvvNpPKt6jqmzpAm2CGgy267qMjPp/LRG/Kas7r5Aq2Khcd oJ4D0OnmYEUixZWHimB1vlvziBhriYEjRBhNjH/o24cNDKfzUngegRJ9YgxYftx5 w9vqfCK/P0CW1VMlSHZyenFFJbupmHjlHEnw6rmZXZ0Diuzfvyk1XQoiIUDy60J1 OUg7yrV4V6UVqD7dcrUGlV/NlGstoNGa7ZUXWOrPfOmnOgQRfZmqGQ78/EsG/bf4 cQ/mKm7skGYBuTXzpjFVp3ySFf7uNG5Krc7B5Sp7kiryHuqCARHl6wlVuASPGc3C VZY3og9yVJtHFVEu4PglXegUY00Y/aE5ZcUvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUi1JcMYsOzAXJwuXi/b8DCRsbO8kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2kxSmNNWXNPekFYSnd1WGlf YjhEQ1JzYk84ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AegwDQYJKoZIhvcNAQELBQADggEBAEq8qGjCMdnqeL+oMcNZ5EePg4wu5Suj6igV 7n/rJHJrITtXjuYHKvNwqOl2VEZ4NtCMXxXuHhjufSXdwrW6AxSe5dnQgNVCNqZH lbseDG2q56ASReeod6dGyCsXe0MSbPkOe2KUbmhSI7FONByIHSgWby1fhX+zCce5 SUGFv4qmooe8JIPvs/DxCdj0ewTFHM54xlanFdqWgKfw0EecKgBMRniWlykgzbt7 GcVtqwGqQR1RrM9SGUsVjfbSvXiWBkOdIn9PM2Noc56dbaZo+/7alATmU6Uw16HK oOqOoTajwpGqqREur5WUhMK/MkBqJhhYnv3YvljdWMAObCR30oc= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org