$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vSD0BovZtEBXQvZ1POKflKU_XkE.roa File: vSD0BovZtEBXQvZ1POKflKU_XkE.roa (raw, json) Hash identifier: Vd3hg0wry+rHY22OsisE0OMZEBuBMvY7gxbe1/uy9eE= Subject key identifier: BD:20:F4:06:8B:D9:B4:40:57:42:F6:75:3C:E2:9F:94:A5:3F:5E:41 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2893 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vSD0BovZtEBXQvZ1POKflKU_XkE.roa Signing time: Fri 01 Sep 2023 10:05:31 +0000 ROA not before: Fri 01 Sep 2023 10:05:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10387 (0x2893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BD20F4068BD9B4405742F6753CE29F94A53F5E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:aa:e8:ac:fe:1a:84:c0:6a:65:a8:cb:f0: 6a:93:f2:a7:8f:c5:a3:1e:21:6b:12:e4:1a:a1:60: 7c:51:da:0a:b5:11:f9:68:50:7f:86:bc:d9:9c:dd: 34:14:17:86:18:0d:01:1b:86:49:ff:1d:cf:75:d5: c5:fa:0e:4d:88:80:13:d8:d5:66:d5:45:bd:9a:9e: e5:f4:85:d6:c8:56:e7:0c:cf:fa:09:63:e5:e8:5c: 08:88:ba:a3:72:b1:18:6c:59:b0:30:9d:4a:a1:b0: 52:8a:b4:d2:09:df:b0:73:2d:31:b4:84:f8:1c:62: 3f:17:6e:0c:ec:5c:54:9d:f5:40:f7:8b:1c:3a:d4: df:fe:11:1b:e8:47:1d:b8:42:73:a3:a3:b4:42:ab: a1:c6:bd:1c:68:a7:4a:bd:7a:51:8d:ca:6d:a6:c5: 1b:00:c7:a5:9e:4f:ea:66:b5:a0:48:9b:11:30:ac: c2:83:7d:ca:01:58:2e:74:1c:aa:59:a3:a9:7c:5d: e3:e5:18:08:a4:fe:40:a6:fa:41:96:d6:08:b7:a9: 33:d0:3a:14:d6:76:a0:e9:de:e1:98:cf:2a:2f:a0: fc:e2:41:5b:7c:94:d2:dd:de:bb:69:f6:10:0a:93: 33:09:9e:be:87:4c:e5:06:19:26:9e:d1:2a:5f:1d: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:20:F4:06:8B:D9:B4:40:57:42:F6:75:3C:E2:9F:94:A5:3F:5E:41 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vSD0BovZtEBXQvZ1POKflKU_XkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.32.0/22 Signature Algorithm: sha256WithRSAEncryption 11:74:ae:35:83:af:e4:61:52:4f:eb:77:a9:18:d1:16:a3:cc: e8:59:9f:08:72:e5:a5:a3:0f:35:35:14:c7:79:46:94:9c:c5: ae:01:20:2c:e5:9d:56:2b:40:7e:5a:cf:60:83:5c:d7:02:64: 7b:f6:6f:2e:7d:cf:25:00:46:6a:61:af:ef:6d:9b:51:b3:7a: f0:2d:7f:f6:81:cd:20:e1:2a:94:08:15:7a:e9:6c:eb:3d:93: ff:01:34:ad:89:7e:99:f1:f4:95:81:7f:aa:5e:77:a9:fb:a7: 8b:74:a7:9c:d1:48:3f:22:f1:ad:5e:52:b7:eb:72:8d:73:6a: 0f:02:e8:40:af:a3:94:73:4b:8c:f9:72:5b:33:ab:51:c3:5a: cb:15:55:69:c5:a2:66:10:20:75:e7:dd:09:e7:d1:6e:a9:46: 26:e0:14:48:00:ac:8d:42:2e:49:a9:2b:c3:e1:dd:35:83:28: 42:8f:c3:ed:0b:a2:75:03:59:90:62:1b:52:8e:1c:f6:69:c8: 6d:3d:b9:dd:2c:dc:ef:49:e0:13:4e:09:6d:d4:a7:04:1e:6a: 2f:cf:80:ad:97:ac:d2:f1:14:dc:6e:e6:90:d7:09:3f:d2:c5: c1:19:75:8b:bf:de:a9:18:eb:83:ae:97:10:e8:ca:d9:c3:d4: 84:8b:6f:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJEMjBGNDA2OEJEOUI0 NDA1NzQyRjY3NTNDRTI5Rjk0QTUzRjVFNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2i6rorP4ahMBqZajL8GqT8qePxaMeIWsS5BqhYHxR2gq1Eflo UH+GvNmc3TQUF4YYDQEbhkn/Hc911cX6Dk2IgBPY1WbVRb2anuX0hdbIVucMz/oJ Y+XoXAiIuqNysRhsWbAwnUqhsFKKtNIJ37BzLTG0hPgcYj8XbgzsXFSd9UD3ixw6 1N/+ERvoRx24QnOjo7RCq6HGvRxop0q9elGNym2mxRsAx6WeT+pmtaBImxEwrMKD fcoBWC50HKpZo6l8XePlGAik/kCm+kGW1gi3qTPQOhTWdqDp3uGYzyovoPziQVt8 lNLd3rtp9hAKkzMJnr6HTOUGGSae0SpfHSKzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvSD0BovZtEBXQvZ1POKflKU/XkEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZTRDBCb3ZadEVCWFF2WjFQ T0tmbEtVX1hrRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ASAwDQYJKoZIhvcNAQELBQADggEBABF0rjWDr+RhUk/rd6kY0RajzOhZnwhy5aWj DzU1FMd5RpScxa4BICzlnVYrQH5az2CDXNcCZHv2by59zyUARmphr+9tm1GzevAt f/aBzSDhKpQIFXrpbOs9k/8BNK2Jfpnx9JWBf6ped6n7p4t0p5zRSD8i8a1eUrfr co1zag8C6ECvo5RzS4z5clszq1HDWssVVWnFomYQIHXn3Qnn0W6pRibgFEgArI1C LkmpK8Ph3TWDKEKPw+0LonUDWZBiG1KOHPZpyG09ud0s3O9J4BNOCW3UpwQeai/P gK2XrNLxFNxu5pDXCT/SxcEZdYu/3qkY64OulxDoytnD1ISLb90= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org