$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nUzIq9pDjgDDH_J7r2xfXcpQWXs.roa File: nUzIq9pDjgDDH_J7r2xfXcpQWXs.roa (raw, json) Hash identifier: LsvYAaZ00S0qcxBoN2airgdy3wyplK1dqgZ7q7KumN8= Subject key identifier: 9D:4C:C8:AB:DA:43:8E:00:C3:1F:F2:7B:AF:6C:5F:5D:CA:50:59:7B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29D2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nUzIq9pDjgDDH_J7r2xfXcpQWXs.roa Signing time: Fri 01 Sep 2023 10:07:07 +0000 ROA not before: Fri 01 Sep 2023 10:07:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00:ff00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10706 (0x29d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9D4CC8ABDA438E00C31FF27BAF6C5F5DCA50597B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:cb:ff:e2:26:2e:d4:7c:44:3c:20:12:94: 65:76:8e:78:d5:c4:ff:3f:23:1a:18:ec:f3:cb:8d: ed:8f:56:13:60:33:8a:26:bc:e3:c4:f3:4b:68:44: 5c:d5:05:0d:d1:19:d1:d5:6e:a3:58:2a:2b:e0:52: 9b:55:79:b1:96:70:36:78:4e:97:84:8a:f9:e6:ce: 61:d4:f6:9a:aa:6d:f1:99:f0:71:d5:ab:9a:00:c0: 9e:b7:92:e2:54:ba:66:27:fd:22:ff:85:9e:61:d5: f4:85:5e:50:5f:42:d1:52:1d:a8:d4:fa:1a:06:d0: 59:78:72:62:73:fb:98:30:19:02:99:57:e6:8e:e7: 15:c8:1d:8f:1b:aa:75:cb:db:b8:a5:6e:d6:c3:ca: 70:63:34:0d:9e:0f:ff:bf:f2:a5:e4:6c:51:87:87: 01:39:39:db:57:97:72:42:a6:8c:94:f0:8d:17:2a: 87:84:53:ed:39:aa:01:f5:5e:69:d3:41:41:aa:d3: 6d:c5:3f:03:29:84:0d:c0:e4:a8:a9:77:16:86:7a: d2:cd:63:1a:dd:85:1a:f4:3f:b4:42:85:6b:9c:f0: a1:19:85:93:dc:1d:8d:37:6e:d0:7d:73:23:ae:f6: f9:4c:85:a7:2f:7a:dd:7a:3d:80:a2:58:a4:cd:e6: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4C:C8:AB:DA:43:8E:00:C3:1F:F2:7B:AF:6C:5F:5D:CA:50:59:7B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nUzIq9pDjgDDH_J7r2xfXcpQWXs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff00::/44 Signature Algorithm: sha256WithRSAEncryption 61:64:29:7d:c1:f8:e8:52:d5:b4:68:d7:5d:06:d9:72:c3:e1: 9b:aa:58:b3:5b:59:f6:56:24:5d:c3:7e:00:c4:0c:7b:aa:53: 7f:d1:58:6a:72:11:7f:9f:5c:db:16:7b:d5:4e:ca:3a:39:ef: 86:84:65:ae:fb:2c:a7:75:23:1d:35:56:70:c1:6a:9d:82:e1: 43:73:2c:96:e4:bf:03:0f:d7:36:aa:d9:e6:b1:cd:3d:91:35: 29:b5:1a:6f:b3:fb:07:5d:3d:ad:06:74:03:e7:f5:19:90:de: e1:e1:6f:84:d3:a5:2a:08:f4:ac:f1:98:69:83:4a:14:a4:91: 86:7a:2f:08:57:8c:1a:cb:63:72:0a:f1:1f:05:fd:2e:a1:f2: f3:38:5b:ac:84:1f:a3:02:12:93:0f:d1:90:d7:ee:f1:0d:20: 11:9d:d1:6b:8a:34:5d:fe:61:09:0b:b0:c8:8d:74:41:ad:fc: 44:93:ef:ae:d7:0f:2c:01:66:87:3a:9e:00:65:9c:ee:1b:ce: d1:e9:6f:bf:7d:15:e0:37:c8:0c:55:1a:0d:ed:5d:90:d7:7c: 86:14:35:7e:58:f7:26:f6:d8:ed:73:34:e0:b1:4c:77:b3:78: a2:d6:53:f0:1e:fe:c7:dc:5d:61:18:5c:81:2f:90:bc:93:75: bc:28:d6:b7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICKdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlENENDOEFCREE0MzhF MDBDMzFGRjI3QkFGNkM1RjVEQ0E1MDU5N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGDsv/4iYu1HxEPCASlGV2jnjVxP8/IxoY7PPLje2PVhNgM4om vOPE80toRFzVBQ3RGdHVbqNYKivgUptVebGWcDZ4TpeEivnmzmHU9pqqbfGZ8HHV q5oAwJ63kuJUumYn/SL/hZ5h1fSFXlBfQtFSHajU+hoG0Fl4cmJz+5gwGQKZV+aO 5xXIHY8bqnXL27ilbtbDynBjNA2eD/+/8qXkbFGHhwE5OdtXl3JCpoyU8I0XKoeE U+05qgH1XmnTQUGq023FPwMphA3A5KipdxaGetLNYxrdhRr0P7RChWuc8KEZhZPc HY03btB9cyOu9vlMhacvet16PYCiWKTN5rGhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnUzIq9pDjgDDH/J7r2xfXcpQWXswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25VeklxOXBEamdEREhfSjdy MnhmWGNwUVdYcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk B00A/wAwDQYJKoZIhvcNAQELBQADggEBAGFkKX3B+OhS1bRo110G2XLD4ZuqWLNb WfZWJF3DfgDEDHuqU3/RWGpyEX+fXNsWe9VOyjo574aEZa77LKd1Ix01VnDBap2C 4UNzLJbkvwMP1zaq2eaxzT2RNSm1Gm+z+wddPa0GdAPn9RmQ3uHhb4TTpSoI9Kzx mGmDShSkkYZ6LwhXjBrLY3IK8R8F/S6h8vM4W6yEH6MCEpMP0ZDX7vENIBGd0WuK NF3+YQkLsMiNdEGt/EST767XDywBZoc6ngBlnO4bztHpb799FeA3yAxVGg3tXZDX fIYUNX5Y9yb22O1zNOCxTHezeKLWU/Ae/sfcXWEYXIEvkLyTdbwo1rc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org