$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa File: tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa (raw, json) Hash identifier: krDHRJRWIMBU+oiGdivzbV++nH1M4kJUIUp2ZLwraZo= Subject key identifier: B7:29:37:4F:35:22:D4:BA:E4:C1:4B:C0:24:32:4E:2B:FD:13:5F:D1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2885 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa Signing time: Fri 01 Sep 2023 10:05:26 +0000 ROA not before: Fri 01 Sep 2023 10:05:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 118.232.200.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10373 (0x2885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B729374F3522D4BAE4C14BC024324E2BFD135FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:fb:8a:1c:45:47:a3:15:aa:95:5e:b7:93: 4a:1e:21:5f:35:4c:fd:98:74:ec:d6:f8:7b:68:d7: fe:02:84:b0:2e:0a:84:b5:f6:e6:ee:ee:f6:70:a4: 34:9e:a7:5e:e4:8f:8c:38:ff:62:b2:ef:90:f7:4f: a2:06:b5:04:93:97:5e:e1:36:59:76:7b:ae:e4:2d: 2d:f1:e9:29:b5:cf:b4:d6:44:3b:bb:48:67:a9:68: 7f:86:50:5a:f7:5b:9b:fd:a2:54:f2:59:b5:90:3d: 70:41:7a:e6:03:62:bd:a5:88:09:64:f3:91:d0:f0: 1c:75:05:87:5e:05:86:7d:d0:49:67:d7:f6:29:d7: 4c:8c:d7:d4:dd:02:0f:a2:a3:22:ed:a3:0a:25:17: 6a:d6:80:bf:9e:15:a4:06:c3:ad:13:91:49:21:5e: d8:2b:01:46:00:a3:1c:3e:c2:49:63:52:55:17:49: 12:6e:b9:c8:e9:ca:8c:32:13:ec:a4:6f:52:3c:7d: 67:d9:67:d3:60:0d:49:0d:4e:cf:04:4c:df:f9:43: a5:2a:34:65:f2:cd:86:bd:f5:d4:7b:33:3c:ef:9d: 9d:41:b3:fd:32:60:6e:26:59:3f:cb:82:7e:ec:69: 08:ff:23:33:31:56:11:97:ae:26:f4:61:2a:75:d0: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:29:37:4F:35:22:D4:BA:E4:C1:4B:C0:24:32:4E:2B:FD:13:5F:D1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.200.0/25 Signature Algorithm: sha256WithRSAEncryption 9b:42:fb:5d:97:f8:6b:d2:3c:15:5a:8f:1d:a5:10:b1:81:f0: d9:a4:83:7f:13:54:bc:76:03:06:ca:2a:28:33:aa:5f:68:92: a0:18:d5:1a:b7:d8:5b:97:cd:15:a4:f0:17:f2:02:7f:9d:ba: 5d:8a:59:21:87:ac:20:32:2f:d9:c2:91:b0:b5:64:ed:83:08: 17:bb:cc:bd:29:21:ba:04:eb:7c:5d:76:3a:53:60:0c:db:a6: ec:16:df:b0:50:dc:4d:8a:7a:dc:6a:e4:5b:61:91:7d:0c:09: 6c:b0:91:9f:46:6e:30:ce:28:36:6a:c5:6a:d4:e2:df:96:3c: 17:0d:53:a6:39:53:f7:01:ee:79:00:a8:10:c1:72:b3:d4:3d: 10:de:74:01:b0:59:87:3d:4f:57:8e:2e:87:f5:8e:9a:29:57: 25:f0:c4:7c:c0:6f:d0:59:5e:36:ad:68:12:b3:6c:bb:5e:94: c4:63:28:71:72:27:01:82:79:3c:b9:cb:29:b6:82:06:8c:6a: 55:14:61:6a:03:33:f9:d5:04:3b:ad:50:1a:c4:15:da:5a:dc: bd:e3:9f:e3:17:28:db:08:e1:30:c5:e5:4d:a3:73:e3:e6:6f: 41:b8:fe:20:78:f2:1b:0e:9e:53:94:38:19:97:5e:65:11:c8: 45:44:59:0c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3MjkzNzRGMzUyMkQ0 QkFFNEMxNEJDMDI0MzI0RTJCRkQxMzVGRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm6fuKHEVHoxWqlV63k0oeIV81TP2YdOzW+Hto1/4ChLAuCoS1 9ubu7vZwpDSep17kj4w4/2Ky75D3T6IGtQSTl17hNll2e67kLS3x6Sm1z7TWRDu7 SGepaH+GUFr3W5v9olTyWbWQPXBBeuYDYr2liAlk85HQ8Bx1BYdeBYZ90Eln1/Yp 10yM19TdAg+ioyLtowolF2rWgL+eFaQGw60TkUkhXtgrAUYAoxw+wkljUlUXSRJu ucjpyowyE+ykb1I8fWfZZ9NgDUkNTs8ETN/5Q6UqNGXyzYa99dR7MzzvnZ1Bs/0y YG4mWT/Lgn7saQj/IzMxVhGXrib0YSp10G+lAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUtyk3TzUi1LrkwUvAJDJOK/0TX9EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R5azNUelVpMUxya3dVdkFK REpPS18wVFg5RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd2 6MgAMA0GCSqGSIb3DQEBCwUAA4IBAQCbQvtdl/hr0jwVWo8dpRCxgfDZpIN/E1S8 dgMGyiooM6pfaJKgGNUat9hbl80VpPAX8gJ/nbpdilkhh6wgMi/ZwpGwtWTtgwgX u8y9KSG6BOt8XXY6U2AM26bsFt+wUNxNinrcauRbYZF9DAlssJGfRm4wzig2asVq 1OLfljwXDVOmOVP3Ae55AKgQwXKz1D0Q3nQBsFmHPU9Xji6H9Y6aKVcl8MR8wG/Q WV42rWgSs2y7XpTEYyhxcicBgnk8ucsptoIGjGpVFGFqAzP51QQ7rVAaxBXaWty9 45/jFyjbCOEwxeVNo3Pj5m9BuP4gePIbDp5TlDgZl15lEchFRFkM -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:32 2024 by rpki-client on console-fra.rpki-client.org