$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa File: pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa (raw, json) Hash identifier: FeYJcjb1CV+vY/A5lH12q+79khw80u0z47iBYmlaiKE= Subject key identifier: A6:39:82:8B:4C:1B:48:C7:C0:D6:A8:8C:61:91:B7:88:1E:6D:20:17 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A80 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa Signing time: Fri 01 Sep 2023 10:07:58 +0000 ROA not before: Fri 01 Sep 2023 10:07:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10880 (0x2a80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A639828B4C1B48C7C0D6A88C6191B7881E6D2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:c6:a4:ad:95:c5:fa:de:5c:c4:5f:99:6b: d3:84:44:66:e0:9e:32:3c:4f:f7:3d:63:db:30:05: 70:6b:b0:4b:02:b5:e8:2c:8c:1e:34:33:c4:07:eb: 46:bf:e2:11:f0:34:7c:4b:63:68:46:02:28:7b:1e: 28:ab:10:75:e4:10:96:a6:b7:3a:fc:b5:e0:97:c4: ea:2a:6e:d5:0d:83:f0:77:f8:44:0c:d8:07:34:2f: 7d:1a:4b:33:8c:d3:35:f4:c7:80:ca:0b:6f:50:10: 1a:a6:13:80:f8:67:0d:e6:98:78:27:ef:1e:97:06: 1c:02:80:fd:e2:11:40:8c:02:16:60:99:3e:03:47: f3:e1:1a:e5:1d:5f:c4:a6:8a:31:33:ea:e3:73:cb: ff:f3:1c:ae:fb:cb:60:de:58:8a:ce:6a:78:35:bc: fc:be:63:15:d6:99:04:02:4b:35:6b:c8:f4:e5:9e: 02:a7:9f:f7:94:e8:34:26:01:87:0f:5d:81:09:09: de:57:08:81:cd:9d:c7:1e:1c:d9:9b:92:af:24:a1: 31:a2:60:26:e9:e9:7e:f0:e1:df:44:0c:2b:47:57: 70:40:f1:3b:b6:91:52:79:ed:e7:19:4f:60:58:a5: 28:e3:7f:d2:a5:2c:ae:00:7c:f7:5e:95:00:68:05: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:39:82:8B:4C:1B:48:C7:C0:D6:A8:8C:61:91:B7:88:1E:6D:20:17 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.244.0/22 Signature Algorithm: sha256WithRSAEncryption 24:5b:a7:a0:78:29:17:28:2e:ff:25:67:f5:29:10:ef:3b:03: 0d:5f:08:b3:55:50:2e:b3:77:d7:ad:cc:d6:cd:25:c3:54:6c: d0:c7:db:ec:71:fc:4f:f0:ed:42:83:35:5c:93:ba:78:5f:e9: e4:28:e2:af:c8:30:ac:e8:eb:f7:3e:1a:d0:ed:0b:af:9a:04: 83:c4:9c:f5:31:ad:90:f1:09:c8:98:f7:48:ad:97:08:6c:5d: 45:93:7a:47:2b:f7:f2:e8:95:2a:49:8c:d2:fc:0a:31:0d:63: 44:bf:1e:9f:45:7c:fd:26:0e:cb:34:33:86:1d:61:14:7d:2d: 33:39:cc:64:b6:12:59:e8:c6:15:74:17:39:7c:5d:76:45:3b: 71:6a:cd:36:c2:fa:28:60:2e:fd:9d:41:aa:5e:c2:ee:eb:4a: 96:17:73:c7:02:ea:cf:8e:54:18:1e:2f:48:68:75:93:4a:07: ae:f0:6b:79:e2:34:7a:30:3c:55:9f:49:c2:57:ee:08:fb:ef: 5e:5f:7d:f8:b1:a7:3a:61:c7:a6:d2:03:8f:c3:9e:3f:0d:19: 55:df:37:7c:12:e4:ad:e4:41:41:4e:ae:34:45:31:dd:4f:c5: 5f:bb:10:3b:ed:84:86:c8:57:69:0a:22:1c:1d:18:82:fd:ea: 34:30:e8:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2Mzk4MjhCNEMxQjQ4 QzdDMEQ2QTg4QzYxOTFCNzg4MUU2RDIwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyz8akrZXF+t5cxF+Za9OERGbgnjI8T/c9Y9swBXBrsEsCtegs jB40M8QH60a/4hHwNHxLY2hGAih7HiirEHXkEJamtzr8teCXxOoqbtUNg/B3+EQM 2Ac0L30aSzOM0zX0x4DKC29QEBqmE4D4Zw3mmHgn7x6XBhwCgP3iEUCMAhZgmT4D R/PhGuUdX8SmijEz6uNzy//zHK77y2DeWIrOang1vPy+YxXWmQQCSzVryPTlngKn n/eU6DQmAYcPXYEJCd5XCIHNncceHNmbkq8koTGiYCbp6X7w4d9EDCtHV3BA8Tu2 kVJ57ecZT2BYpSjjf9KlLK4AfPdelQBoBYClAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpjmCi0wbSMfA1qiMYZG3iB5tIBcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BqbUNpMHdiU01mQTFxaU1Z WkczaUI1dElCYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6PQwDQYJKoZIhvcNAQELBQADggEBACRbp6B4KRcoLv8lZ/UpEO87Aw1fCLNVUC6z d9etzNbNJcNUbNDH2+xx/E/w7UKDNVyTunhf6eQo4q/IMKzo6/c+GtDtC6+aBIPE nPUxrZDxCciY90itlwhsXUWTekcr9/LolSpJjNL8CjENY0S/Hp9FfP0mDss0M4Yd YRR9LTM5zGS2ElnoxhV0Fzl8XXZFO3FqzTbC+ihgLv2dQapewu7rSpYXc8cC6s+O VBgeL0hodZNKB67wa3niNHowPFWfScJX7gj7715fffixpzphx6bSA4/Dnj8NGVXf N3wS5K3kQUFOrjRFMd1PxV+7EDvthIbIV2kKIhwdGIL96jQw6LM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org