$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uJFNgnPccjQnaa9IhkmhlRuVR8c.roa File: uJFNgnPccjQnaa9IhkmhlRuVR8c.roa (raw, json) Hash identifier: cseBuK4pOSshvUxSP0nWRZsnOM+HeOpkaIgwcfnnVx0= Subject key identifier: B8:91:4D:82:73:DC:72:34:27:69:AF:48:86:49:A1:95:1B:95:47:C7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27DE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uJFNgnPccjQnaa9IhkmhlRuVR8c.roa Signing time: Fri 01 Sep 2023 10:04:39 +0000 ROA not before: Fri 01 Sep 2023 10:04:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 211.76.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10206 (0x27de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B8914D8273DC72342769AF488649A1951B9547C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:f5:9b:f3:04:40:c6:42:be:ea:89:d3:b8: 0c:be:f2:a5:4c:28:e9:3d:57:f3:6d:6b:65:82:27: 53:34:ba:70:57:56:86:23:ef:8d:74:a0:a2:46:7d: 56:07:1f:8a:27:e2:16:0b:36:70:a7:13:f9:7b:4c: 47:56:9e:23:c8:57:5c:89:da:bb:ce:22:e0:ed:44: 6e:59:8f:fd:27:cd:80:0a:5a:1c:66:fa:c0:f4:06: fb:e6:02:57:9c:73:cc:61:e9:aa:18:98:4c:bd:52: cd:d2:a8:50:f8:ed:ea:6b:0a:3b:71:f0:fe:cf:6d: 11:cb:12:0c:c2:6e:c5:e3:7c:3a:bc:37:b0:49:a9: 9e:c2:97:1b:27:04:73:d3:a1:10:75:83:72:31:0b: 1c:ed:5d:d9:3c:ef:65:88:6d:44:68:51:ac:bd:b4: 5e:5d:45:f8:4f:b7:d1:9a:fb:7e:a1:a1:38:4d:ca: 63:c5:f9:8e:e1:48:27:78:7b:2d:8c:11:45:1b:0a: 00:a7:f5:70:f2:f1:48:68:6d:83:64:df:b7:e0:3e: ba:72:b2:97:3f:55:22:63:a2:81:32:cd:e0:7d:78: eb:36:19:5c:d4:cf:3a:de:b1:09:ec:5d:7e:8b:78: 35:e6:dc:31:85:b1:96:fe:b7:08:49:0e:36:6d:61: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:91:4D:82:73:DC:72:34:27:69:AF:48:86:49:A1:95:1B:95:47:C7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uJFNgnPccjQnaa9IhkmhlRuVR8c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.113.0/24 Signature Algorithm: sha256WithRSAEncryption 83:93:d8:94:81:71:63:c8:f4:44:f9:fa:3a:40:6f:34:ff:9c: e6:37:3a:e5:8b:0d:ec:50:bb:2c:fa:d5:40:8d:5b:59:72:cc: 12:0d:95:75:da:f5:fb:61:91:a8:59:35:26:df:77:28:19:9b: bf:f4:ea:c7:ac:43:4e:b3:47:15:f8:6f:86:d2:6b:00:02:cf: 02:63:11:ee:ed:c8:54:9a:9b:a1:33:45:a7:26:29:7f:14:91: 5b:d9:22:9d:32:25:f2:7c:e5:51:01:83:60:48:e6:19:12:af: 1d:d4:6a:2b:b2:0a:dc:88:19:a2:61:a8:0b:58:89:38:11:6c: e1:f3:ef:15:aa:a8:c2:aa:6e:77:55:14:c5:36:19:6b:3d:1b: 07:bb:47:05:08:46:fd:bb:ff:85:92:eb:d9:90:fd:6d:7a:2e: 9a:ab:36:4d:6b:59:16:c2:3b:11:1f:9b:a1:49:be:b8:a6:ee: 20:c1:4c:2e:e6:82:b7:1c:3b:cd:30:77:f6:d1:86:c8:47:7a: 58:40:d9:21:4c:73:df:06:fb:07:1b:5a:00:e1:79:ac:48:a5: 4a:d7:4c:bd:1b:8e:32:9b:1f:4f:9c:7e:ba:bb:23:3c:08:97: b9:2f:47:59:8b:1e:37:7e:10:c8:34:b8:4c:48:f6:8f:98:54: 6b:d9:fd:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI4OTE0RDgyNzNEQzcy MzQyNzY5QUY0ODg2NDlBMTk1MUI5NTQ3QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJyPWb8wRAxkK+6onTuAy+8qVMKOk9V/Nta2WCJ1M0unBXVoYj 7410oKJGfVYHH4on4hYLNnCnE/l7TEdWniPIV1yJ2rvOIuDtRG5Zj/0nzYAKWhxm +sD0BvvmAlecc8xh6aoYmEy9Us3SqFD47eprCjtx8P7PbRHLEgzCbsXjfDq8N7BJ qZ7ClxsnBHPToRB1g3IxCxztXdk872WIbURoUay9tF5dRfhPt9Ga+36hoThNymPF +Y7hSCd4ey2MEUUbCgCn9XDy8UhobYNk37fgPrpyspc/VSJjooEyzeB9eOs2GVzU zzresQnsXX6LeDXm3DGFsZb+twhJDjZtYX6lAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuJFNgnPccjQnaa9IhkmhlRuVR8cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VKRk5nblBjY2pRbmFhOUlo a21obFJ1VlI4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THEwDQYJKoZIhvcNAQELBQADggEBAIOT2JSBcWPI9ET5+jpAbzT/nOY3OuWLDexQ uyz61UCNW1lyzBINlXXa9fthkahZNSbfdygZm7/06sesQ06zRxX4b4bSawACzwJj Ee7tyFSam6EzRacmKX8UkVvZIp0yJfJ85VEBg2BI5hkSrx3UaiuyCtyIGaJhqAtY iTgRbOHz7xWqqMKqbndVFMU2GWs9Gwe7RwUIRv27/4WS69mQ/W16LpqrNk1rWRbC OxEfm6FJvrim7iDBTC7mgrccO80wd/bRhshHelhA2SFMc98G+wcbWgDheaxIpUrX TL0bjjKbH0+cfrq7IzwIl7kvR1mLHjd+EMg0uExI9o+YVGvZ/SA= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:32 2024 by rpki-client on console-fra.rpki-client.org