$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lB91e_AsO86wIEFX_qTFxtG2UaU.roa File: lB91e_AsO86wIEFX_qTFxtG2UaU.roa (raw, json) Hash identifier: ZYpaoIeLjrVm+YA4Zp/K06dUzGSfCAYR2LY0S4J9zuw= Subject key identifier: 94:1F:75:7B:F0:2C:3B:CE:B0:20:41:57:FE:A4:C5:C6:D1:B6:51:A5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 295D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lB91e_AsO86wIEFX_qTFxtG2UaU.roa Signing time: Fri 01 Sep 2023 10:06:26 +0000 ROA not before: Fri 01 Sep 2023 10:06:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 118.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10589 (0x295d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=941F757BF02C3BCEB0204157FEA4C5C6D1B651A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:81:d8:0e:09:70:4d:31:fe:36:87:be:f0: 55:dd:76:c2:80:f0:37:bd:ba:3c:6f:dc:c1:4a:f2: 6a:1a:e0:76:b3:23:75:0d:75:38:32:85:f8:d5:87: 5e:0c:11:06:5f:b0:0f:6c:ea:1f:92:8a:c4:59:db: d3:e8:cd:68:33:d7:eb:41:49:83:bd:06:20:e0:ed: 27:b5:88:11:a2:a0:92:d6:89:27:fd:94:94:82:a1: eb:0a:fb:28:57:ee:88:74:e9:ef:6b:a7:55:1b:90: 21:c7:06:20:49:5e:2e:e2:f1:60:55:d9:f3:0f:1e: f9:98:72:14:59:7f:18:82:80:e4:90:94:5c:59:8f: 27:8e:ed:b7:86:b2:e4:3d:47:10:e3:d3:48:06:45: 09:b0:7b:72:b0:36:ce:5c:bb:e3:3f:4e:91:5b:85: a6:4b:69:4f:05:ec:a5:fb:cc:bc:99:84:b1:01:14: a0:a2:f3:ac:38:bd:75:6f:dd:c8:ca:37:e7:29:0d: 5b:7e:d1:fc:30:40:b2:f4:b0:40:8d:46:5e:f6:51: 0a:05:0d:fb:bb:74:b9:4e:ce:9c:ba:aa:4c:9b:11: 58:e2:29:45:d2:55:96:11:c3:33:89:05:3b:6c:84: 1c:3d:61:3f:29:7f:f4:90:ea:6d:12:0c:c1:ec:68: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:75:7B:F0:2C:3B:CE:B0:20:41:57:FE:A4:C5:C6:D1:B6:51:A5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lB91e_AsO86wIEFX_qTFxtG2UaU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.128.0/17 Signature Algorithm: sha256WithRSAEncryption 34:8b:a9:ff:8c:21:af:d3:35:ef:41:de:b9:56:3c:13:ff:24: 55:fd:ea:0d:95:bc:7f:4a:f0:83:d2:36:6f:42:53:69:3a:ce: 99:ff:77:e5:d2:ff:20:45:41:2f:e9:15:69:9d:c4:01:ca:30: 4e:59:88:d1:c9:77:a9:24:cb:93:a3:33:ee:6c:b9:60:29:10: c9:63:5b:b9:af:ed:44:5a:bc:85:2d:e7:64:fd:93:53:46:ab: 7e:cf:45:43:0a:10:39:73:a7:40:ee:04:21:5e:b7:b1:29:e2: f8:33:85:27:d2:45:f4:91:90:ed:c4:8f:75:12:d2:3e:20:47: ee:d3:d7:c9:e5:42:8e:d2:44:8e:48:1b:64:24:b3:6c:ec:a2: 6f:89:99:aa:52:9a:2a:1a:31:86:7e:72:e0:d3:5b:eb:4d:5d: 99:39:d2:84:33:9f:e2:53:c9:37:67:27:ff:9e:3f:a5:c6:c3: 35:e2:a9:e8:43:6a:67:6d:72:78:4c:b5:ad:77:15:c3:d9:ff: 5b:fc:25:51:83:ed:e1:be:24:66:0c:66:75:f5:71:f3:9b:0c: 51:96:88:43:04:72:e6:92:0a:72:d0:e7:8d:cd:48:55:8c:fc: ea:ea:28:40:25:f2:4b:73:f9:9e:d9:4c:fc:1f:0e:23:b5:0c: 07:c0:fd:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk0MUY3NTdCRjAyQzNC Q0VCMDIwNDE1N0ZFQTRDNUM2RDFCNjUxQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3toHYDglwTTH+Noe+8FXddsKA8De9ujxv3MFK8moa4HazI3UN dTgyhfjVh14MEQZfsA9s6h+SisRZ29PozWgz1+tBSYO9BiDg7Se1iBGioJLWiSf9 lJSCoesK+yhX7oh06e9rp1UbkCHHBiBJXi7i8WBV2fMPHvmYchRZfxiCgOSQlFxZ jyeO7beGsuQ9RxDj00gGRQmwe3KwNs5cu+M/TpFbhaZLaU8F7KX7zLyZhLEBFKCi 86w4vXVv3cjKN+cpDVt+0fwwQLL0sECNRl72UQoFDfu7dLlOzpy6qkybEVjiKUXS VZYRwzOJBTtshBw9YT8pf/SQ6m0SDMHsaPBhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlB91e/AsO86wIEFX/qTFxtG2UaUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xCOTFlX0FzTzg2d0lFRlhf cVRGeHRHMlVhVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd2 6YAwDQYJKoZIhvcNAQELBQADggEBADSLqf+MIa/TNe9B3rlWPBP/JFX96g2VvH9K 8IPSNm9CU2k6zpn/d+XS/yBFQS/pFWmdxAHKME5ZiNHJd6kky5OjM+5suWApEMlj W7mv7URavIUt52T9k1NGq37PRUMKEDlzp0DuBCFet7Ep4vgzhSfSRfSRkO3Ej3US 0j4gR+7T18nlQo7SRI5IG2Qks2zsom+JmapSmioaMYZ+cuDTW+tNXZk50oQzn+JT yTdnJ/+eP6XGwzXiqehDamdtcnhMta13FcPZ/1v8JVGD7eG+JGYMZnX1cfObDFGW iEMEcuaSCnLQ543NSFWM/OrqKEAl8ktz+Z7ZTPwfDiO1DAfA/UE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org