$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kY2BnhWGZ1VN--hSrP5kenTLZX4.roa File: kY2BnhWGZ1VN--hSrP5kenTLZX4.roa (raw, json) Hash identifier: 6MHFHLbpMW+iRRdZT5ddYlOCeh5NrEKKy7qBsgahoEE= Subject key identifier: 91:8D:81:9E:15:86:67:55:4D:FB:E8:52:AC:FE:64:7A:74:CB:65:7E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B0C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kY2BnhWGZ1VN--hSrP5kenTLZX4.roa Signing time: Fri 01 Sep 2023 10:09:48 +0000 ROA not before: Fri 01 Sep 2023 10:09:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11020 (0x2b0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=918D819E158667554DFBE852ACFE647A74CB657E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:84:c0:62:d2:b6:d8:b1:dc:dd:56:02:90:d2: d6:8a:77:79:30:d7:ba:6b:99:19:fc:46:1f:f7:49: 70:0b:e7:3d:f4:20:91:96:43:af:db:b3:d7:55:32: de:54:75:b1:f3:6f:3b:1e:c9:9e:6b:94:ec:ff:7d: 41:64:ad:e2:1a:2e:97:25:52:ea:82:3c:e7:d3:06: 7c:c1:11:55:df:8b:ed:ab:81:fc:d6:ae:01:8c:5c: f0:5a:6e:f7:a8:a8:b8:d7:d6:0f:8f:77:58:f2:8e: f9:c4:1e:24:ed:39:9b:54:62:d8:63:2d:81:8a:d5: 03:dd:93:b1:7f:84:12:a4:bd:cc:1e:cd:ad:fd:88: df:84:93:2d:b8:94:2c:1d:95:78:d2:f5:02:18:b8: 07:f9:04:53:d3:5d:bd:08:ea:98:d6:cc:e0:a6:72: 49:69:11:b4:ab:af:9e:51:d8:c8:7f:98:a4:5e:c5: 45:2f:91:66:82:f9:e9:d7:38:00:cf:0c:16:c0:4d: ca:10:74:31:9c:bb:05:cb:e9:06:f7:cb:7a:53:79: 97:05:2a:a9:4d:70:3e:05:e6:8d:8d:c9:b8:2e:67: 6e:2a:0d:91:b4:35:e9:8d:12:45:33:f3:31:d2:2b: 41:c5:88:0d:cd:90:aa:e5:5f:ef:8c:c5:ed:ca:c7: 69:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8D:81:9E:15:86:67:55:4D:FB:E8:52:AC:FE:64:7A:74:CB:65:7E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kY2BnhWGZ1VN--hSrP5kenTLZX4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.108.0/22 Signature Algorithm: sha256WithRSAEncryption 55:29:3e:81:8f:f7:18:a3:db:75:18:e8:d7:fb:b8:0c:25:4e: 6b:02:2a:69:6d:fa:e1:06:02:c8:6c:2f:f1:e5:f6:3d:04:cb: 47:92:c0:28:1c:68:db:74:02:9e:6a:1a:e0:50:f8:7d:ae:22: c2:fc:23:b5:8d:b5:27:d6:12:ca:9d:57:d7:45:e9:1c:dc:fb: 74:26:b0:e8:42:9f:b3:64:9c:47:e4:35:7b:a5:6a:71:05:b6: ee:33:16:50:52:7a:71:11:4c:08:f8:bd:75:dc:3b:66:6b:15: 80:fe:df:98:03:26:54:1f:a9:48:3d:c5:4b:bd:c1:aa:30:e4: f3:46:b2:e2:bd:8b:6c:3f:fb:15:91:7d:58:90:9d:81:1c:f7: e0:11:de:7f:4d:1a:7f:3d:12:2f:f8:12:e9:e8:f4:ea:22:12: 09:21:ae:3a:2d:51:8f:26:5d:b2:f8:51:76:9c:7d:f2:37:2a: ed:ca:70:f3:22:8d:1e:a2:16:80:96:e5:a6:2a:d6:3d:c5:2a: a9:81:4e:11:64:2b:7d:b3:8b:a1:38:47:14:fa:4a:77:58:84: 5f:86:cc:61:88:cf:9b:8d:04:9e:45:4f:2e:0b:22:fc:31:38: 4a:02:b5:91:40:57:d7:a0:8c:fd:ec:57:ee:fe:b0:be:eb:61: b4:a7:15:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkxOEQ4MTlFMTU4NjY3 NTU0REZCRTg1MkFDRkU2NDdBNzRDQjY1N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbhMBi0rbYsdzdVgKQ0taKd3kw17prmRn8Rh/3SXAL5z30IJGW Q6/bs9dVMt5UdbHzbzseyZ5rlOz/fUFkreIaLpclUuqCPOfTBnzBEVXfi+2rgfzW rgGMXPBabveoqLjX1g+Pd1jyjvnEHiTtOZtUYthjLYGK1QPdk7F/hBKkvcweza39 iN+Eky24lCwdlXjS9QIYuAf5BFPTXb0I6pjWzOCmcklpEbSrr55R2Mh/mKRexUUv kWaC+enXOADPDBbATcoQdDGcuwXL6Qb3y3pTeZcFKqlNcD4F5o2NybguZ24qDZG0 NemNEkUz8zHSK0HFiA3NkKrlX++Mxe3Kx2mtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkY2BnhWGZ1VN++hSrP5kenTLZX4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tZMkJuaFdHWjFWTi0taFNy UDVrZW5UTFpYNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6WwwDQYJKoZIhvcNAQELBQADggEBAFUpPoGP9xij23UY6Nf7uAwlTmsCKmlt+uEG AshsL/Hl9j0Ey0eSwCgcaNt0Ap5qGuBQ+H2uIsL8I7WNtSfWEsqdV9dF6Rzc+3Qm sOhCn7NknEfkNXulanEFtu4zFlBSenERTAj4vXXcO2ZrFYD+35gDJlQfqUg9xUu9 waow5PNGsuK9i2w/+xWRfViQnYEc9+AR3n9NGn89Ei/4Euno9OoiEgkhrjotUY8m XbL4UXacffI3Ku3KcPMijR6iFoCW5aYq1j3FKqmBThFkK32zi6E4RxT6SndYhF+G zGGIz5uNBJ5FTy4LIvwxOEoCtZFAV9egjP3sV+7+sL7rYbSnFdI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org