$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ogO0tnw2p_KfNOe_MA3q4nnkjr8.roa File: ogO0tnw2p_KfNOe_MA3q4nnkjr8.roa (raw, json) Hash identifier: QY8jGzm934asWRbI/rSks8aoMBf1NqGd18Gu/PsjvdE= Subject key identifier: A2:03:B4:B6:7C:36:A7:F2:9F:34:E7:BF:30:0D:EA:E2:79:E4:8E:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AE3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ogO0tnw2p_KfNOe_MA3q4nnkjr8.roa Signing time: Fri 01 Sep 2023 10:08:24 +0000 ROA not before: Fri 01 Sep 2023 10:08:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10979 (0x2ae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A203B4B67C36A7F29F34E7BF300DEAE279E48EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:9b:16:45:92:b5:57:10:4e:d2:29:f7:c3: 12:05:12:6c:5c:a6:8c:c0:52:20:88:22:fb:f4:15: 5d:99:00:69:42:d7:81:82:f6:f4:9f:9a:0e:29:f9: c8:30:a5:93:54:57:5e:1f:84:4c:29:9b:1d:ba:b3: d1:e8:f6:e5:1b:3d:8f:e2:49:67:8f:28:76:30:db: d7:67:1a:56:a9:ff:6f:4c:47:3c:7c:f6:78:20:c4: 3a:cd:e2:20:ea:60:68:27:6a:43:e4:22:fa:d5:e3: 59:88:43:fb:eb:e3:12:14:97:01:02:ab:86:f0:b5: d5:2f:d2:94:28:fe:fb:fe:11:40:4d:a1:0e:48:77: 71:44:be:70:05:10:d2:55:58:3e:1f:20:4d:1b:32: e2:56:6c:ae:65:cf:b6:5b:af:00:7d:76:33:3c:31: ea:e1:c2:e4:81:12:c7:15:b3:58:b7:73:29:2e:eb: 5c:9a:8b:e4:57:49:fb:af:89:9a:39:74:fc:bc:a9: 3a:3a:20:3b:c2:0f:a4:74:65:a0:ae:31:37:df:4d: 5d:51:af:d1:5a:0d:97:06:d1:c4:48:85:cd:4a:bd: 19:30:25:f1:b2:82:64:2d:87:11:b2:5b:26:81:99: 00:86:84:59:1c:51:41:5e:c6:b0:9b:06:ca:c0:57: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:B4:B6:7C:36:A7:F2:9F:34:E7:BF:30:0D:EA:E2:79:E4:8E:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ogO0tnw2p_KfNOe_MA3q4nnkjr8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.224.0/21 Signature Algorithm: sha256WithRSAEncryption 33:37:9a:6a:01:f9:c3:41:82:91:a7:0e:b4:e5:e9:16:10:e3: e6:f3:6a:45:00:36:a8:74:29:5a:48:9a:1b:78:2f:5c:d2:b2: 2f:36:49:e6:b6:3f:6d:41:63:c5:9b:47:64:17:ee:ed:b6:bf: bb:1a:6c:94:19:d4:71:5f:be:90:98:02:d7:45:fc:b7:9e:81: e8:04:fa:8a:e4:81:e5:54:f7:7f:35:14:8c:53:88:be:bd:e5: a0:dc:32:95:12:51:53:e1:44:1d:02:61:97:04:89:49:98:0a: 2c:1e:49:8e:5d:7f:6a:20:94:53:3c:8f:1b:38:5f:55:bf:1f: a1:65:f5:df:45:6c:2f:ac:7e:5d:f3:b3:40:9a:f7:f6:37:a7: 4a:dc:18:d1:f9:81:07:67:d5:27:d9:54:56:0d:17:1a:f3:7e: 14:95:a8:82:22:bb:ed:7b:54:b3:9a:62:82:08:77:2f:27:60: ce:56:4d:f3:2f:33:92:a0:95:6c:fd:5b:62:5f:93:f8:1e:93: 27:3d:d7:9d:8b:bc:cf:e2:5d:52:41:25:31:df:f3:06:9d:22: 4a:ba:8e:af:86:d5:67:f9:3b:c0:d2:12:d2:9e:68:73:99:8a: 55:91:d4:64:3f:8c:ad:63:5e:a9:5b:05:97:ce:c8:ce:a5:2d: 17:f8:1b:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEyMDNCNEI2N0MzNkE3 RjI5RjM0RTdCRjMwMERFQUUyNzlFNDhFQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4LpsWRZK1VxBO0in3wxIFEmxcpozAUiCIIvv0FV2ZAGlC14GC 9vSfmg4p+cgwpZNUV14fhEwpmx26s9Ho9uUbPY/iSWePKHYw29dnGlap/29MRzx8 9nggxDrN4iDqYGgnakPkIvrV41mIQ/vr4xIUlwECq4bwtdUv0pQo/vv+EUBNoQ5I d3FEvnAFENJVWD4fIE0bMuJWbK5lz7ZbrwB9djM8MerhwuSBEscVs1i3cyku61ya i+RXSfuviZo5dPy8qTo6IDvCD6R0ZaCuMTffTV1Rr9FaDZcG0cRIhc1KvRkwJfGy gmQthxGyWyaBmQCGhFkcUUFexrCbBsrAV2WXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUogO0tnw2p/KfNOe/MA3q4nnkjr8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29nTzB0bncycF9LZk5PZV9N QTNxNG5ua2pyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AeAwDQYJKoZIhvcNAQELBQADggEBADM3mmoB+cNBgpGnDrTl6RYQ4+bzakUANqh0 KVpImht4L1zSsi82Sea2P21BY8WbR2QX7u22v7sabJQZ1HFfvpCYAtdF/LeegegE +orkgeVU9381FIxTiL695aDcMpUSUVPhRB0CYZcEiUmYCiweSY5df2oglFM8jxs4 X1W/H6Fl9d9FbC+sfl3zs0Ca9/Y3p0rcGNH5gQdn1SfZVFYNFxrzfhSVqIIiu+17 VLOaYoIIdy8nYM5WTfMvM5KglWz9W2Jfk/gekyc9152LvM/iXVJBJTHf8wadIkq6 jq+G1Wf5O8DSEtKeaHOZilWR1GQ/jK1jXqlbBZfOyM6lLRf4GzE= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org