$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa File: kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa (raw, json) Hash identifier: wImgQsq0Afm8TjN86JWm9rVBpFK47T04FQpKP0idF9c= Subject key identifier: 90:9D:9A:FE:70:99:5D:3D:8B:B2:FE:31:E8:C4:58:3C:8B:E6:57:B3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2842 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa Signing time: Fri 01 Sep 2023 10:05:08 +0000 ROA not before: Fri 01 Sep 2023 10:05:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 118.232.96.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10306 (0x2842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=909D9AFE70995D3D8BB2FE31E8C4583C8BE657B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:bb:b1:fb:cd:06:d5:8a:ec:64:a5:14:0d: 8b:8e:f6:f1:7d:ca:d3:09:09:88:86:e2:77:99:7f: e3:60:32:17:83:2f:36:df:ce:31:3d:57:e5:30:aa: 93:e4:b7:ce:24:31:a4:29:79:7c:f8:51:5b:8f:f3: b8:3d:19:3d:fc:ff:80:e5:a0:79:f0:8a:a9:46:36: 14:8e:3b:38:53:69:82:68:ed:2a:9f:54:a8:b8:c4: 33:c2:70:a9:19:ed:ce:8e:83:29:6c:57:02:95:a2: de:93:c4:7a:a6:d1:52:d2:ec:54:2f:6c:cb:5e:8e: 6c:55:e2:c7:3b:6d:a1:c7:06:5d:7c:5d:be:e9:79: fc:a4:b3:9b:d7:2c:8b:13:72:9e:bb:fa:7a:6b:21: 8e:ca:49:c6:a4:f0:c1:53:6b:e1:c6:4e:8a:25:5b: 4f:61:04:a4:fa:d1:8e:20:27:9f:17:66:5b:f0:75: 17:54:9a:b0:45:ff:d6:69:10:14:bf:78:8c:2f:2f: c9:b3:b3:cf:b4:ff:17:e0:05:16:0e:9d:a9:bb:00: 32:67:57:83:64:a5:bb:a3:6a:fd:91:b2:cc:5a:62: d3:45:ee:cf:9c:26:da:2b:8a:5d:5b:c1:a5:ff:7c: df:18:c2:8b:65:af:65:16:7e:b6:6e:19:48:98:19: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9D:9A:FE:70:99:5D:3D:8B:B2:FE:31:E8:C4:58:3C:8B:E6:57:B3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.96.0/19 Signature Algorithm: sha256WithRSAEncryption 64:7d:32:e2:45:8a:8f:41:bc:a2:62:9d:9d:b7:cc:8b:73:c0: 12:ee:10:8f:4f:76:7a:8c:50:b7:ae:22:be:eb:cf:15:3e:15: 14:b6:81:4a:da:52:0d:24:c7:36:8a:2d:ac:29:96:18:5f:6e: fd:76:6f:0c:49:9e:18:76:6a:04:44:b7:59:2c:9e:04:b0:5c: f8:6b:af:47:66:73:22:45:bd:0e:63:bf:4f:e6:81:3d:3c:de: 52:e2:10:ba:d5:a2:5b:d1:ef:b9:a6:c9:26:fb:cc:d8:2d:6b: bb:26:ca:a1:c1:66:e6:26:93:9e:e5:05:3b:ff:9e:6a:9c:ef: 81:76:d3:17:32:47:ec:0d:f0:7d:4a:47:14:18:60:17:15:58: 81:7b:ab:91:50:f7:f3:45:6a:c9:3f:39:22:04:2e:c7:f3:a1: 52:9d:2b:f9:05:b0:c4:4b:69:c7:06:85:86:73:09:ff:12:a0: de:2f:b1:61:34:c3:c9:72:41:f7:d5:40:a7:9c:b6:e0:de:f4: 1a:9b:a5:e2:2a:e0:b9:fa:83:22:28:a3:91:58:1e:3d:6c:47: f6:d0:e8:93:e5:a8:61:d6:59:c9:63:91:2f:50:45:08:84:12: 7d:1e:49:72:46:1d:cd:ae:22:f6:bd:d3:ff:fa:60:20:eb:ae: fb:b5:98:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkwOUQ5QUZFNzA5OTVE M0Q4QkIyRkUzMUU4QzQ1ODNDOEJFNjU3QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8irux+80G1YrsZKUUDYuO9vF9ytMJCYiG4neZf+NgMheDLzbf zjE9V+UwqpPkt84kMaQpeXz4UVuP87g9GT38/4DloHnwiqlGNhSOOzhTaYJo7Sqf VKi4xDPCcKkZ7c6OgylsVwKVot6TxHqm0VLS7FQvbMtejmxV4sc7baHHBl18Xb7p efyks5vXLIsTcp67+nprIY7KScak8MFTa+HGToolW09hBKT60Y4gJ58XZlvwdRdU mrBF/9ZpEBS/eIwvL8mzs8+0/xfgBRYOnam7ADJnV4Nkpbujav2RssxaYtNF7s+c Jtoril1bwaX/fN8Ywotlr2UWfrZuGUiYGRk/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkJ2a/nCZXT2Lsv4x6MRYPIvmV7MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tKMmFfbkNaWFQyTHN2NHg2 TVJZUEl2bVY3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6GAwDQYJKoZIhvcNAQELBQADggEBAGR9MuJFio9BvKJinZ23zItzwBLuEI9PdnqM ULeuIr7rzxU+FRS2gUraUg0kxzaKLawplhhfbv12bwxJnhh2agREt1ksngSwXPhr r0dmcyJFvQ5jv0/mgT083lLiELrVolvR77mmySb7zNgta7smyqHBZuYmk57lBTv/ nmqc74F20xcyR+wN8H1KRxQYYBcVWIF7q5FQ9/NFask/OSIELsfzoVKdK/kFsMRL accGhYZzCf8SoN4vsWE0w8lyQffVQKectuDe9BqbpeIq4Ln6gyIoo5FYHj1sR/bQ 6JPlqGHWWcljkS9QRQiEEn0eSXJGHc2uIva90//6YCDrrvu1mAQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org