$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vKb4d_2D4dirK1Kj99JYzJbMuQ0.roa File: vKb4d_2D4dirK1Kj99JYzJbMuQ0.roa (raw, json) Hash identifier: SrwUh76ZtfKA+32EzTOjXRdsuXecgjggHUHK8kGg/z4= Subject key identifier: BC:A6:F8:77:FD:83:E1:D8:AB:2B:52:A3:F7:D2:58:CC:96:CC:B9:0D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3172 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vKb4d_2D4dirK1Kj99JYzJbMuQ0.roa Signing time: Mon 26 Aug 2024 05:30:28 +0000 ROA not before: Mon 26 Aug 2024 05:30:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12658 (0x3172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BCA6F877FD83E1D8AB2B52A3F7D258CC96CCB90D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:9c:e0:c1:3f:1d:e5:2c:95:91:d7:65:02: 52:fd:b0:c1:7b:58:17:a5:18:d6:d9:ff:ba:7e:cf: da:67:e7:a9:49:65:5b:82:2a:6f:92:ef:d6:fa:a8: a9:f0:94:4a:dd:3c:c5:c2:cd:53:c8:91:d1:a6:fb: b9:b7:4f:de:e4:de:e6:c1:7c:de:07:68:55:a7:75: a7:cc:1a:e6:80:f5:65:0a:56:21:b4:9a:b4:a6:c3: 6b:2c:40:eb:cf:5c:6a:fa:cb:f9:f3:20:4b:d2:4a: 69:57:e4:86:75:8d:79:31:00:e4:48:3e:f2:2d:3a: 62:6a:ef:31:2f:27:9b:80:0d:8b:49:03:58:4c:ab: ab:a9:58:3b:d1:f1:2f:21:75:4b:ad:8e:c2:a3:82: 46:0f:d4:ff:9e:41:87:84:6b:41:d3:69:18:5a:e4: f9:eb:13:d1:25:b7:d6:23:67:4c:36:f5:12:d0:37: 64:5c:67:17:0d:c1:68:d9:b8:c7:e8:e7:df:40:6a: c8:2e:b3:fc:4b:69:46:55:90:fa:a8:f2:e9:70:60: 77:39:70:f6:34:89:d4:9c:fd:d4:7d:d9:b9:2e:35: 51:78:5c:31:18:6e:d9:f0:5e:40:39:fb:ce:e7:e3: 93:9f:2b:bc:80:66:1f:c8:af:1b:2c:ad:9b:f4:23: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A6:F8:77:FD:83:E1:D8:AB:2B:52:A3:F7:D2:58:CC:96:CC:B9:0D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vKb4d_2D4dirK1Kj99JYzJbMuQ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.50.0/23 Signature Algorithm: sha256WithRSAEncryption a3:d5:97:4e:0d:c4:2f:94:1b:5c:3a:2c:46:21:18:be:75:70: f2:e4:4c:4a:4b:26:21:c1:d9:c4:a7:d7:9e:8c:08:5c:48:85: 97:ad:9b:33:06:c9:5b:50:8a:6b:0f:6e:e9:e1:3d:48:2a:75: 70:41:f0:2f:59:0e:4d:e6:0a:16:40:6f:46:49:f3:b5:fc:8a: d3:e4:55:7e:7e:84:0a:af:71:b7:46:24:ca:43:a6:dc:b0:24: 67:b4:37:a8:80:ba:1c:7d:ba:9f:ac:5c:eb:8e:89:6c:9a:c9: e4:11:e2:7a:07:6f:e3:a5:0a:9b:ab:36:0a:8c:fd:ef:56:1d: da:86:3d:74:89:ae:32:60:c4:00:c8:ef:15:dd:6c:60:6a:98: 75:88:c8:eb:5f:34:02:d8:ed:98:47:55:67:b2:70:ac:20:5d: 8b:68:7d:c5:06:82:e2:cd:f3:1a:b0:6c:83:64:3d:3f:d7:1b: 1c:46:a0:e9:7a:ba:ed:3c:d1:40:4d:fe:d5:08:f0:f7:77:ec: 32:38:cf:5f:2c:82:a7:5d:8b:9c:94:89:e4:be:ab:f2:1a:62: 3a:33:fe:67:5c:9e:8a:01:f8:66:85:be:64:fb:9d:83:f7:77: e4:45:b1:01:fb:65:b7:d1:0e:c4:e5:22:87:c7:b1:7d:d9:89: 7b:cb:f2:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDQTZGODc3RkQ4M0Ux RDhBQjJCNTJBM0Y3RDI1OENDOTZDQ0I5MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4PZzgwT8d5SyVkddlAlL9sMF7WBelGNbZ/7p+z9pn56lJZVuC Km+S79b6qKnwlErdPMXCzVPIkdGm+7m3T97k3ubBfN4HaFWndafMGuaA9WUKViG0 mrSmw2ssQOvPXGr6y/nzIEvSSmlX5IZ1jXkxAORIPvItOmJq7zEvJ5uADYtJA1hM q6upWDvR8S8hdUutjsKjgkYP1P+eQYeEa0HTaRha5PnrE9Elt9YjZ0w29RLQN2Rc ZxcNwWjZuMfo599Aasgus/xLaUZVkPqo8ulwYHc5cPY0idSc/dR92bkuNVF4XDEY btnwXkA5+87n45OfK7yAZh/IrxssrZv0I48JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvKb4d/2D4dirK1Kj99JYzJbMuQ0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZLYjRkXzJENGRpcksxS2o5 OUpZekpiTXVRMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq ATIwDQYJKoZIhvcNAQELBQADggEBAKPVl04NxC+UG1w6LEYhGL51cPLkTEpLJiHB 2cSn156MCFxIhZetmzMGyVtQimsPbunhPUgqdXBB8C9ZDk3mChZAb0ZJ87X8itPk VX5+hAqvcbdGJMpDptywJGe0N6iAuhx9up+sXOuOiWyayeQR4noHb+OlCpurNgqM /e9WHdqGPXSJrjJgxADI7xXdbGBqmHWIyOtfNALY7ZhHVWeycKwgXYtofcUGguLN 8xqwbINkPT/XGxxGoOl6uu080UBN/tUI8Pd37DI4z18sgqddi5yUieS+q/IaYjoz /mdcnooB+GaFvmT7nYP3d+RFsQH7ZbfRDsTlIofHsX3ZiXvL8r8= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:53 2024 by rpki-client on console-fra.rpki-client.org