$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa File: mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa (raw, json) Hash identifier: /WXZ4ubUiKHU27SCZuP6t6fDUjQ9udCurz3HHN64G4c= Subject key identifier: 98:86:5C:06:C8:12:24:AF:1A:46:DD:F3:55:32:61:DB:E6:15:E5:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A81 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa Signing time: Fri 01 Sep 2023 10:07:58 +0000 ROA not before: Fri 01 Sep 2023 10:07:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00:ff04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10881 (0x2a81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=98865C06C81224AF1A46DDF3553261DBE615E5B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:56:27:0a:1e:a0:07:a8:91:62:75:13:be: a7:17:4a:f0:72:d1:96:7e:6c:38:24:ee:02:60:17: 0a:7e:31:8e:fc:01:e3:e3:8e:7a:8d:e5:24:04:9f: ae:64:7d:32:02:a9:68:03:90:e4:a6:c3:e2:98:19: 58:ea:e3:d4:b0:db:07:9a:d1:f3:d4:b8:df:b0:b0: f0:22:a9:3a:0c:70:f0:c7:5a:51:35:d3:5d:5b:5d: b5:42:17:c3:a8:6c:b1:09:c2:15:92:c9:90:c5:1f: 31:8a:fb:d3:c0:67:63:cf:29:02:67:37:a7:b6:f2: db:fb:bd:86:05:01:c9:ab:ab:41:77:93:c3:c3:2f: 69:c0:11:c9:4c:4e:24:f0:8d:a6:ef:97:d9:37:89: fd:63:01:f9:b7:bb:1d:ba:7f:3e:4f:0d:d6:23:85: c6:ab:85:00:d9:fe:f6:2d:f5:ea:83:6e:46:73:ec: a0:9c:2e:54:7f:e9:77:16:17:22:a6:6b:24:34:d1: 88:85:1b:ad:bc:94:87:7c:2f:1d:bb:9e:3f:39:07: eb:0d:f6:c8:7c:3d:ad:33:9e:09:7e:87:1c:f0:03: 87:ef:45:0c:52:bd:3e:c6:97:c3:d8:c1:78:01:66: 9c:6c:96:42:4f:80:aa:a1:9c:67:db:2a:43:51:db: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:86:5C:06:C8:12:24:AF:1A:46:DD:F3:55:32:61:DB:E6:15:E5:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff04::/48 Signature Algorithm: sha256WithRSAEncryption 59:ae:9f:df:4a:b4:ea:bc:ac:56:8b:fc:58:e8:f7:fd:11:21: 92:88:8e:c3:d6:14:fc:50:38:8a:97:2d:e3:8f:35:8d:1b:8c: e7:8d:fa:a6:e8:81:ca:f9:0a:38:e4:ab:87:dc:5f:53:fd:29: e9:ed:87:51:a4:f3:72:c3:25:ac:76:6a:b0:06:37:03:c5:72: 5f:8d:b8:00:3d:af:0b:68:a7:df:e1:f5:47:a3:33:7e:8d:84: 6e:9a:a8:10:fd:c7:46:5b:3f:cd:eb:54:f5:c9:28:5c:77:d6: fc:af:2c:5b:f9:46:0e:ab:6e:05:68:a3:f7:7f:29:47:d5:d6: 94:fa:0d:c9:5c:f9:71:d4:57:7a:fc:a7:e0:c4:c6:06:de:b8: 07:08:33:6a:bd:e6:ed:a8:09:1f:f5:b6:89:25:e0:3e:e1:4d: 6a:98:ff:b7:58:8e:6e:76:7d:a7:97:28:f1:82:18:28:4c:bc: f4:bd:04:71:7d:58:1e:9f:bc:a4:71:20:87:d8:1c:e1:c4:3b: b8:65:08:2f:a8:dc:58:b4:58:63:cb:26:3d:95:ee:d9:5f:c9: 30:bc:01:4e:4d:7a:6b:cd:07:e2:40:1f:79:5f:68:dd:21:31: 8a:55:30:d2:73:a4:8e:eb:10:04:62:4f:23:de:1c:8d:d7:45: 78:b4:61:43 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICKoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk4ODY1QzA2QzgxMjI0 QUYxQTQ2RERGMzU1MzI2MURCRTYxNUU1QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvUVYnCh6gB6iRYnUTvqcXSvBy0ZZ+bDgk7gJgFwp+MY78AePj jnqN5SQEn65kfTICqWgDkOSmw+KYGVjq49Sw2wea0fPUuN+wsPAiqToMcPDHWlE1 011bXbVCF8OobLEJwhWSyZDFHzGK+9PAZ2PPKQJnN6e28tv7vYYFAcmrq0F3k8PD L2nAEclMTiTwjabvl9k3if1jAfm3ux26fz5PDdYjhcarhQDZ/vYt9eqDbkZz7KCc LlR/6XcWFyKmayQ00YiFG628lId8Lx27nj85B+sN9sh8Pa0zngl+hxzwA4fvRQxS vT7Gl8PYwXgBZpxslkJPgKqhnGfbKkNR2yoNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmIZcBsgSJK8aRt3zVTJh2+YV5bkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21JWmNCc2dTSks4YVJ0M3pW VEpoMi1ZVjViay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wQwDQYJKoZIhvcNAQELBQADggEBAFmun99KtOq8rFaL/Fjo9/0RIZKIjsPW FPxQOIqXLeOPNY0bjOeN+qbogcr5Cjjkq4fcX1P9Kenth1Gk83LDJax2arAGNwPF cl+NuAA9rwtop9/h9UejM36NhG6aqBD9x0ZbP83rVPXJKFx31vyvLFv5Rg6rbgVo o/d/KUfV1pT6Dclc+XHUV3r8p+DExgbeuAcIM2q95u2oCR/1tokl4D7hTWqY/7dY jm52faeXKPGCGChMvPS9BHF9WB6fvKRxIIfYHOHEO7hlCC+o3Fi0WGPLJj2V7tlf yTC8AU5NemvNB+JAH3lfaN0hMYpVMNJzpI7rEARiTyPeHI3XRXi0YUM= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:00 2024 by rpki-client on console-ams.rpki-client.org