$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ofBnLI1I-rasXpeurZfkAeqNwcM.roa File: ofBnLI1I-rasXpeurZfkAeqNwcM.roa (raw, json) Hash identifier: Sdz+mXRak+a4TNqvMSBEHmt/asQ/IvBppK8yZREVq2Y= Subject key identifier: A1:F0:67:2C:8D:48:FA:B6:AC:5E:97:AE:AD:97:E4:01:EA:8D:C1:C3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2859 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ofBnLI1I-rasXpeurZfkAeqNwcM.roa Signing time: Fri 01 Sep 2023 10:05:14 +0000 ROA not before: Fri 01 Sep 2023 10:05:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10329 (0x2859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A1F0672C8D48FAB6AC5E97AEAD97E401EA8DC1C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b1:0a:57:16:70:12:4d:5c:e1:ee:d4:42:d5: cb:dd:17:71:f0:13:0c:e5:fe:e0:06:b6:3e:bc:f9: 0c:c5:37:33:bb:9d:a2:f4:1c:62:a4:99:47:3b:1e: 4a:7c:85:65:23:76:9a:e3:31:1c:d8:3f:4d:37:20: 70:e3:28:29:34:84:02:fa:44:75:8a:bb:5f:ce:7d: bf:0b:d7:7b:42:57:49:c7:ad:e1:a6:a3:02:34:ba: 00:0f:1f:f8:c4:78:9f:ad:31:09:b0:d4:4c:be:41: 63:97:7a:f9:6b:1f:b0:8e:b7:fa:ed:d8:02:32:8a: 77:4d:e5:15:c3:b8:de:b3:86:ae:07:f0:94:b4:b4: 94:aa:6a:19:f5:a2:c2:86:21:f1:b3:b7:0c:96:1d: 4e:8d:fc:00:f5:5c:39:f4:ee:19:7b:ef:67:93:b5: d6:c9:a3:9d:bc:2d:1e:4b:72:f9:06:12:91:4a:8d: 53:2e:9f:f9:36:67:50:3d:d2:66:75:61:61:a3:05: 3e:26:8c:7f:4d:dc:93:86:39:88:cf:80:34:0e:b8: 85:ef:58:d3:2d:5e:8e:4f:a4:2b:cc:59:12:1b:02: 3a:29:02:d4:df:6c:94:dc:52:2d:c5:02:27:74:4d: 1c:a1:32:b9:32:a2:1d:28:b6:96:eb:9a:15:10:06: e3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F0:67:2C:8D:48:FA:B6:AC:5E:97:AE:AD:97:E4:01:EA:8D:C1:C3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ofBnLI1I-rasXpeurZfkAeqNwcM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.92.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:ac:98:39:9c:8f:8b:43:31:7b:26:d5:be:3c:19:53:39:90: 88:2b:d9:d4:6b:40:22:f3:d4:65:61:72:da:e7:06:db:93:14: 02:e2:ad:7b:69:e3:8d:a3:2e:07:96:4d:e2:f3:cf:b2:2e:8f: b0:37:1d:08:b8:54:cb:96:7d:b6:9d:99:d6:f1:a6:cf:08:ac: 4b:49:4d:b5:fb:bc:38:66:7c:a8:3e:e7:f9:65:9f:d8:67:45: 28:3b:8d:8f:08:6d:ce:06:99:8b:d2:ed:46:57:12:06:0c:ef: 72:19:1d:f9:a6:b2:28:be:87:6c:1a:34:b4:07:9a:5f:2e:ef: c2:3a:ac:4f:eb:a5:c4:f7:cb:3a:17:ea:eb:96:71:31:ff:51: 84:cc:7e:98:37:3e:8a:aa:e6:b8:26:c0:6a:7e:4b:e5:3d:6e: 8c:b8:01:47:4c:d8:61:f8:37:59:b9:2b:64:6b:e7:26:83:94: a6:f8:61:66:94:9a:82:ea:67:6c:2c:9c:e2:eb:db:57:c7:a0: f8:ce:24:cc:d7:d4:5c:08:2e:44:eb:0c:5f:fb:f3:e3:61:2a: 13:13:09:77:83:d2:32:12:eb:ca:fb:08:9f:a9:ac:fe:ce:c9: 66:3f:21:20:02:0b:ec:f6:6c:37:74:d3:b3:1a:f7:1b:2f:6f: c4:d5:34:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEExRjA2NzJDOEQ0OEZB QjZBQzVFOTdBRUFEOTdFNDAxRUE4REMxQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUsQpXFnASTVzh7tRC1cvdF3HwEwzl/uAGtj68+QzFNzO7naL0 HGKkmUc7Hkp8hWUjdprjMRzYP003IHDjKCk0hAL6RHWKu1/Ofb8L13tCV0nHreGm owI0ugAPH/jEeJ+tMQmw1Ey+QWOXevlrH7COt/rt2AIyindN5RXDuN6zhq4H8JS0 tJSqahn1osKGIfGztwyWHU6N/AD1XDn07hl772eTtdbJo528LR5LcvkGEpFKjVMu n/k2Z1A90mZ1YWGjBT4mjH9N3JOGOYjPgDQOuIXvWNMtXo5PpCvMWRIbAjopAtTf bJTcUi3FAid0TRyhMrkyoh0otpbrmhUQBuObAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUofBnLI1I+rasXpeurZfkAeqNwcMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29mQm5MSTFJLXJhc1hwZXVy WmZrQWVxTndjTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AVwwDQYJKoZIhvcNAQELBQADggEBAAusmDmcj4tDMXsm1b48GVM5kIgr2dRrQCLz 1GVhctrnBtuTFALirXtp442jLgeWTeLzz7Iuj7A3HQi4VMuWfbadmdbxps8IrEtJ TbX7vDhmfKg+5/lln9hnRSg7jY8Ibc4GmYvS7UZXEgYM73IZHfmmsii+h2waNLQH ml8u78I6rE/rpcT3yzoX6uuWcTH/UYTMfpg3Poqq5rgmwGp+S+U9boy4AUdM2GH4 N1m5K2Rr5yaDlKb4YWaUmoLqZ2wsnOLr21fHoPjOJMzX1FwILkTrDF/78+NhKhMT CXeD0jIS68r7CJ+prP7OyWY/ISACC+z2bDd007Ma9xsvb8TVNL0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org