$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tYjwm7uImfrZN2eCWi6n7TV6IGM.roa File: tYjwm7uImfrZN2eCWi6n7TV6IGM.roa (raw, json) Hash identifier: B7JGOImdBcLr+8S3EATY8zPL99N+qOrGFHozkz8AvT0= Subject key identifier: B5:88:F0:9B:BB:88:99:FA:D9:37:67:82:5A:2E:A7:ED:35:7A:20:63 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2917 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tYjwm7uImfrZN2eCWi6n7TV6IGM.roa Signing time: Fri 01 Sep 2023 10:06:08 +0000 ROA not before: Fri 01 Sep 2023 10:06:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.196.0/22 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10519 (0x2917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B588F09BBB8899FAD93767825A2EA7ED357A2063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:69:e8:01:27:d8:d8:60:b2:57:da:dd:88: 4a:66:ba:98:cb:34:f8:5a:03:93:62:39:e0:7a:df: 9c:48:02:31:67:26:15:80:c0:26:09:56:3e:34:f2: 14:ee:1b:c4:66:73:a9:11:43:e3:67:13:1a:09:d4: 42:fd:fc:59:43:6d:38:20:6c:5f:ea:24:2e:ad:65: 3e:b4:3c:ff:55:15:cd:22:a9:38:5e:61:75:f3:a4: 58:8a:c2:60:bd:9e:59:23:44:6f:7a:17:81:64:0b: 77:7a:3c:db:f7:2f:09:46:06:c3:99:81:8a:59:7b: 87:d1:f1:e7:d1:fb:5f:c8:9b:45:1a:a3:11:99:c4: ea:4b:4e:c0:98:82:73:a1:1d:4f:1b:22:7d:33:41: 3b:bc:10:2b:dd:87:8c:c2:13:f2:6c:07:4a:5f:4a: df:6c:c8:a6:d4:37:c8:9a:0e:b3:fd:ac:9a:17:12: 40:56:ad:07:40:53:ef:74:22:11:4a:64:77:97:5a: a4:a2:86:00:d1:3e:17:44:15:71:3b:9d:90:98:93: e4:6d:28:3d:48:f9:04:d0:b7:f7:e2:dd:40:ea:3b: a2:6b:68:73:65:01:23:3c:9f:6d:49:51:ba:88:b6: 7d:85:c0:0d:e7:22:00:35:e8:2e:88:23:51:84:49: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:F0:9B:BB:88:99:FA:D9:37:67:82:5A:2E:A7:ED:35:7A:20:63 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tYjwm7uImfrZN2eCWi6n7TV6IGM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.196.0/22 Signature Algorithm: sha256WithRSAEncryption ad:5d:6c:92:b0:98:5d:fc:2f:2b:80:b6:76:0a:7c:df:76:49: a2:49:10:d9:70:4b:83:97:41:2e:c1:aa:be:2a:24:e4:53:0b: 77:03:f4:03:ca:a9:a5:24:fc:93:8f:29:f3:19:ac:56:08:ba: 7a:25:73:04:24:e1:87:a9:6c:90:57:a7:2e:f3:c4:ad:4f:4a: 84:5d:c4:25:29:d6:36:65:bc:f1:f9:3a:71:0f:ca:b3:66:3a: 05:59:36:9d:15:b0:30:9b:bb:03:b5:42:c8:62:e1:60:5b:6d: a5:b9:d2:b2:50:d9:3b:6e:a1:50:6f:be:2c:8e:93:40:31:44: 2f:8c:57:dd:5f:54:16:18:1e:9c:a6:4d:ac:50:ac:59:3a:ad: e9:cb:41:e7:91:be:a4:63:79:c1:be:36:5e:bc:55:ea:94:82: 5d:12:87:cf:d9:3c:10:b1:8a:a5:72:78:a4:f6:c6:3d:83:ef: 95:52:46:aa:25:a4:fe:07:e4:f7:a7:7d:d4:68:b2:0e:ba:70: a7:15:f9:53:4b:02:bb:ae:16:a2:05:54:ea:de:ee:0a:7b:8b: d0:8f:99:c5:d5:12:bf:3c:65:b7:55:12:c9:68:e9:74:e7:58: 4b:13:fe:9b:a2:d7:67:57:77:ee:9d:88:a6:e7:7e:c4:99:c6: 5b:42:ef:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI1ODhGMDlCQkI4ODk5 RkFEOTM3Njc4MjVBMkVBN0VEMzU3QTIwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuxGnoASfY2GCyV9rdiEpmupjLNPhaA5NiOeB635xIAjFnJhWA wCYJVj408hTuG8Rmc6kRQ+NnExoJ1EL9/FlDbTggbF/qJC6tZT60PP9VFc0iqThe YXXzpFiKwmC9nlkjRG96F4FkC3d6PNv3LwlGBsOZgYpZe4fR8efR+1/Im0UaoxGZ xOpLTsCYgnOhHU8bIn0zQTu8ECvdh4zCE/JsB0pfSt9syKbUN8iaDrP9rJoXEkBW rQdAU+90IhFKZHeXWqSihgDRPhdEFXE7nZCYk+RtKD1I+QTQt/fi3UDqO6JraHNl ASM8n21JUbqItn2FwA3nIgA16C6II1GESctZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtYjwm7uImfrZN2eCWi6n7TV6IGMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RZandtN3VJbWZyWk4yZUNX aTZuN1RWNklHTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6MQwDQYJKoZIhvcNAQELBQADggEBAK1dbJKwmF38LyuAtnYKfN92SaJJENlwS4OX QS7Bqr4qJORTC3cD9APKqaUk/JOPKfMZrFYIunolcwQk4YepbJBXpy7zxK1PSoRd xCUp1jZlvPH5OnEPyrNmOgVZNp0VsDCbuwO1Qshi4WBbbaW50rJQ2TtuoVBvviyO k0AxRC+MV91fVBYYHpymTaxQrFk6renLQeeRvqRjecG+Nl68VeqUgl0Sh8/ZPBCx iqVyeKT2xj2D75VSRqolpP4H5PenfdRosg66cKcV+VNLAruuFqIFVOre7gp7i9CP mcXVEr88ZbdVEslo6XTnWEsT/pui12dXd+6diKbnfsSZxltC71E= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:00 2024 by rpki-client on console-ams.rpki-client.org