$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa File: kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa (raw, json) Hash identifier: iQeDFZnt6yUlfyjmTnq4MbaTbyyhX3rMM3/lrtnZb7s= Subject key identifier: 90:83:2F:E4:25:02:07:24:E3:D0:B1:44:B4:43:A9:10:9D:E1:10:13 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2987 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa Signing time: Fri 01 Sep 2023 10:06:43 +0000 ROA not before: Fri 01 Sep 2023 10:06:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10631 (0x2987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=90832FE425020724E3D0B144B443A9109DE11013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:b0:dc:34:24:dc:9d:06:e5:c0:27:56:8d: 34:19:1a:b6:e0:6e:b3:02:7b:81:69:0d:56:12:fc: 9e:06:15:05:9e:32:93:ea:5e:61:58:36:e9:59:6e: 7f:80:bf:38:c3:e6:34:33:d2:51:32:85:75:97:b1: 96:9e:e8:8d:f9:48:e2:6b:d3:e1:16:b9:e0:5a:15: 2b:fe:25:c1:ee:ee:3f:59:f9:3c:05:9d:1f:55:95: 98:92:17:2e:7b:05:55:39:97:d5:d2:2c:f1:79:05: ea:83:5f:38:b9:00:f6:f1:53:1e:0a:2d:d6:5f:45: a6:c5:f6:17:c8:6f:51:ec:29:e8:8a:15:c4:05:be: d8:7c:91:29:9f:dd:c8:77:bc:87:77:9f:7f:bd:2f: 69:e3:42:d5:cf:23:bf:ea:2a:a9:d5:79:03:3b:8b: f2:35:88:09:23:dd:7d:ae:34:aa:26:22:55:c4:50: bf:58:9c:50:45:02:4d:e9:59:09:a0:c4:51:cf:3f: f7:bb:0b:bd:9e:9f:7b:92:6b:ce:34:be:3b:29:cf: 62:58:7e:16:e7:0d:95:16:0c:4a:2a:fe:e5:d0:25: 3f:38:8b:75:33:04:d6:d5:02:5b:29:56:b2:35:ec: 3c:2c:23:b1:57:bc:0e:c7:33:23:26:80:6a:32:11: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:83:2F:E4:25:02:07:24:E3:D0:B1:44:B4:43:A9:10:9D:E1:10:13 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.44.0/22 Signature Algorithm: sha256WithRSAEncryption 03:0b:38:8f:ec:e7:40:16:fa:d6:de:55:60:38:3c:4d:4c:b9: 18:d0:b5:70:f1:ec:73:6c:7d:d7:e8:56:d4:d9:df:6e:c9:b7: 63:cf:1e:36:26:45:2a:da:55:cb:ca:94:fd:78:e6:da:d9:95: c2:7b:19:d7:11:21:cd:8f:5a:1e:33:d0:20:cd:68:61:c8:db: f9:9c:bb:2b:e7:f6:3f:80:1a:23:62:e9:c4:c5:0f:a2:e8:7e: a1:c2:9a:27:37:37:22:60:c3:01:aa:69:cf:c4:20:3b:ec:5d: f5:ab:7e:a9:3a:1d:50:da:4d:22:1e:1a:e7:9b:6b:72:a6:9a: 24:45:97:ee:06:01:98:7c:07:cd:48:ed:36:2e:82:4c:5d:d7: 2d:8d:f1:52:88:ed:68:6b:a7:6c:2f:b7:4a:32:80:a7:9d:6a: 61:80:f6:b8:33:7a:7e:b9:3d:d2:65:d0:fe:f3:b2:c7:c3:67: 41:21:12:78:83:3e:73:e3:a9:23:99:8f:de:58:e5:a0:89:02: 62:04:dd:50:e5:84:bf:95:b9:14:25:1a:96:17:ea:ce:37:ab: 05:fd:35:00:d7:66:3b:75:17:ef:b5:55:30:c7:cd:f5:94:cf: 1d:91:3a:28:98:ef:a9:f1:a7:c2:a7:23:e6:49:b0:e5:df:b1: 24:e2:3a:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkwODMyRkU0MjUwMjA3 MjRFM0QwQjE0NEI0NDNBOTEwOURFMTEwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIQbDcNCTcnQblwCdWjTQZGrbgbrMCe4FpDVYS/J4GFQWeMpPq XmFYNulZbn+AvzjD5jQz0lEyhXWXsZae6I35SOJr0+EWueBaFSv+JcHu7j9Z+TwF nR9VlZiSFy57BVU5l9XSLPF5BeqDXzi5APbxUx4KLdZfRabF9hfIb1HsKeiKFcQF vth8kSmf3ch3vId3n3+9L2njQtXPI7/qKqnVeQM7i/I1iAkj3X2uNKomIlXEUL9Y nFBFAk3pWQmgxFHPP/e7C72en3uSa840vjspz2JYfhbnDZUWDEoq/uXQJT84i3Uz BNbVAlspVrI17DwsI7FXvA7HMyMmgGoyEbf5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkIMv5CUCByTj0LFEtEOpEJ3hEBMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tJTXY1Q1VDQnlUajBMRkV0 RU9wRUozaEVCTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6CwwDQYJKoZIhvcNAQELBQADggEBAAMLOI/s50AW+tbeVWA4PE1MuRjQtXDx7HNs fdfoVtTZ327Jt2PPHjYmRSraVcvKlP145trZlcJ7GdcRIc2PWh4z0CDNaGHI2/mc uyvn9j+AGiNi6cTFD6LofqHCmic3NyJgwwGqac/EIDvsXfWrfqk6HVDaTSIeGueb a3KmmiRFl+4GAZh8B81I7TYugkxd1y2N8VKI7Whrp2wvt0oygKedamGA9rgzen65 PdJl0P7zssfDZ0EhEniDPnPjqSOZj95Y5aCJAmIE3VDlhL+VuRQlGpYX6s43qwX9 NQDXZjt1F++1VTDHzfWUzx2ROiiY76nxp8KnI+ZJsOXfsSTiOgY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org