$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa File: vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa (raw, json) Hash identifier: J6hSQNeDIm0Z9iq1Jf149MdtR6SlrhoFzxHMy9cr5eY= Subject key identifier: BE:9D:71:61:C5:C9:C8:F3:F2:43:8F:87:56:BB:22:F9:C3:E0:65:0E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 285C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa Signing time: Fri 01 Sep 2023 10:05:15 +0000 ROA not before: Fri 01 Sep 2023 10:05:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 118.232.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10332 (0x285c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BE9D7161C5C9C8F3F2438F8756BB22F9C3E0650E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:91:53:96:72:f4:16:c2:ac:0f:f4:45:f0: 03:ec:0d:db:f0:bd:82:4e:38:71:99:55:dc:5a:6b: d0:cf:79:82:79:77:ad:fe:44:aa:d2:d5:66:e8:55: 77:d7:29:3f:d0:77:a9:48:b8:fb:98:86:f8:92:a6: 6b:69:6b:91:64:33:96:60:be:2e:f0:68:a1:df:9e: 49:26:63:4a:bc:69:98:73:56:06:b9:93:4e:28:c9: cf:1e:da:f2:58:d3:f4:37:72:d6:0b:70:2c:9b:21: fc:0d:c1:99:27:10:85:c6:01:62:d6:33:3e:17:93: 0d:9c:ed:c3:b1:ad:0e:6d:54:a9:bf:60:bd:d4:df: 08:73:ac:16:01:2d:08:2e:4a:e3:05:ff:5c:db:02: 07:81:cf:09:c9:c7:ea:97:9a:e0:59:77:e6:5e:29: 98:45:e0:eb:bb:3c:91:19:70:97:ef:6f:3b:e4:7b: db:e8:e5:62:3f:64:af:90:ad:51:4c:1d:a9:1d:9c: f4:9a:4f:99:4c:df:4a:be:7b:f4:9a:d0:12:bb:01: 87:2e:2f:cb:1f:24:25:d0:33:6a:5c:31:a5:c4:ad: 83:ab:c8:1e:aa:95:76:a9:ab:9b:77:40:0d:7e:d3: 21:b3:1b:ca:26:70:2e:df:15:8c:2d:94:7a:7a:0d: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:71:61:C5:C9:C8:F3:F2:43:8F:87:56:BB:22:F9:C3:E0:65:0E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/19 Signature Algorithm: sha256WithRSAEncryption 1a:4d:e3:db:52:18:b0:3e:5a:0f:6d:6f:98:05:39:bc:c4:0d: 52:94:80:db:b8:73:7d:20:0e:c5:a3:97:d2:9f:1c:da:08:b4: 76:df:f3:ee:be:1b:62:07:28:bf:1c:0e:f5:28:4b:a0:ba:4f: 4a:af:b9:c2:dc:51:0a:66:c2:a3:4c:96:a1:e3:61:c6:31:f6: da:7b:b7:8c:ce:88:b4:da:ff:d8:62:5a:1e:52:8d:c8:34:95: 2c:86:a2:a5:89:86:5d:69:c5:54:22:5b:fc:17:33:76:88:22: ba:2a:ce:d9:74:dc:d1:b0:85:11:38:6d:91:73:9e:99:7f:17: ff:fd:dc:ba:b4:b0:fc:b7:2b:de:ed:e6:1c:c8:46:90:88:eb: fb:79:9b:b3:a2:fb:7e:c3:ad:dd:9b:b7:57:61:94:19:93:f5: e1:92:94:0c:29:a4:a1:20:aa:34:79:3e:64:44:5b:91:2c:27: c0:de:d1:75:26:ba:49:01:a8:6a:e8:01:d6:da:b7:41:6c:b4: b0:8f:7c:4b:30:2f:eb:5a:73:05:eb:e1:14:c8:85:93:cb:d4: 74:2b:1e:ff:98:30:d5:b0:33:4e:aa:b7:ca:eb:53:45:76:6e: 94:65:a7:3a:30:56:ad:6b:6d:d8:9b:fa:3a:94:e9:0f:c5:0e: ef:ba:45:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJFOUQ3MTYxQzVDOUM4 RjNGMjQzOEY4NzU2QkIyMkY5QzNFMDY1MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8x5FTlnL0FsKsD/RF8APsDdvwvYJOOHGZVdxaa9DPeYJ5d63+ RKrS1WboVXfXKT/Qd6lIuPuYhviSpmtpa5FkM5Zgvi7waKHfnkkmY0q8aZhzVga5 k04oyc8e2vJY0/Q3ctYLcCybIfwNwZknEIXGAWLWMz4Xkw2c7cOxrQ5tVKm/YL3U 3whzrBYBLQguSuMF/1zbAgeBzwnJx+qXmuBZd+ZeKZhF4Ou7PJEZcJfvbzvke9vo 5WI/ZK+QrVFMHakdnPSaT5lM30q+e/Sa0BK7AYcuL8sfJCXQM2pcMaXErYOryB6q lXapq5t3QA1+0yGzG8omcC7fFYwtlHp6DXGbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvp1xYcXJyPPyQ4+HVrsi+cPgZQ4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZwMXhZY1hKeVBQeVE0LUhW cnNpLWNQZ1pRNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6MAwDQYJKoZIhvcNAQELBQADggEBABpN49tSGLA+Wg9tb5gFObzEDVKUgNu4c30g DsWjl9KfHNoItHbf8+6+G2IHKL8cDvUoS6C6T0qvucLcUQpmwqNMlqHjYcYx9tp7 t4zOiLTa/9hiWh5Sjcg0lSyGoqWJhl1pxVQiW/wXM3aIIroqztl03NGwhRE4bZFz npl/F//93Lq0sPy3K97t5hzIRpCI6/t5m7Oi+37Drd2bt1dhlBmT9eGSlAwppKEg qjR5PmREW5EsJ8De0XUmukkBqGroAdbat0FstLCPfEswL+tacwXr4RTIhZPL1HQr Hv+YMNWwM06qt8rrU0V2bpRlpzowVq1rbdib+jqU6Q/FDu+6RXQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org