$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8ni4gRwklosltEN1u3x-zCVLwA.roa File: w8ni4gRwklosltEN1u3x-zCVLwA.roa (raw, json) Hash identifier: 4piNTnyrg7l2mgy+UqrKdwQWmuvbQKOhICCWpZAf6q0= Subject key identifier: C3:C9:E2:E2:04:70:92:5A:2C:96:D1:0D:D6:ED:F1:FB:30:95:2F:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B26 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8ni4gRwklosltEN1u3x-zCVLwA.roa Signing time: Fri 01 Sep 2023 10:09:54 +0000 ROA not before: Fri 01 Sep 2023 10:09:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11046 (0x2b26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C3C9E2E20470925A2C96D10DD6EDF1FB30952F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:36:79:3a:e6:72:af:64:a1:04:94:4a:10: 66:fb:e0:56:93:50:be:d8:a1:66:36:9a:71:05:fc: 7b:3f:f0:c8:34:4e:ac:38:2e:70:c1:45:9a:8b:39: af:7e:6d:93:1c:5f:a4:5e:77:0e:5b:11:48:c8:a7: 0f:0a:34:eb:da:ae:ca:55:1b:07:54:fa:59:11:7d: 4d:ad:c1:a5:bd:4b:14:08:2a:5e:ba:82:ce:35:84: b5:b0:f8:39:70:c4:e6:4c:02:c8:82:ea:3f:66:04: d4:ae:e8:f3:fd:34:a9:1c:80:b3:11:9b:09:7e:a5: c5:71:54:9a:41:23:2f:ed:6d:34:38:d1:f0:9b:5f: d8:e1:6d:61:7e:58:da:62:52:eb:16:80:a2:a8:09: af:19:50:11:c5:5a:22:ef:dc:59:12:88:b7:4f:d9: de:ed:0d:0d:0d:53:aa:50:a2:a0:98:7f:23:b8:66: 90:1d:8b:7a:75:81:6a:4b:6f:21:28:26:81:6d:57: d3:ea:ca:ed:9c:e2:91:31:ef:f2:c9:70:98:65:81: ae:be:16:ff:a3:3d:35:28:70:ac:e2:b5:23:40:65: ff:50:c8:d3:a1:63:c0:55:52:11:1c:93:69:a2:31: d6:88:c8:7d:18:a5:e4:76:a5:24:8c:65:7d:a6:4a: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C9:E2:E2:04:70:92:5A:2C:96:D1:0D:D6:ED:F1:FB:30:95:2F:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8ni4gRwklosltEN1u3x-zCVLwA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.222.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:55:e3:e8:b3:70:8e:84:32:d6:26:4a:31:84:05:5b:90:c4: 12:cc:e3:43:2a:03:77:bf:2c:1c:3b:99:d4:02:5d:9f:40:82: df:de:e2:5a:d2:7b:e0:bf:05:fc:43:5d:24:ab:2c:03:f3:ee: 63:58:ee:b6:53:60:c2:30:30:54:b3:57:b6:d5:12:97:8e:4b: d8:e6:61:9a:ae:80:de:1a:ad:f0:69:dd:d2:83:13:33:dd:ad: 62:76:38:df:86:11:75:c8:1d:81:ed:a1:81:72:31:c4:01:81: 69:ae:da:6b:a1:a4:53:e3:29:7a:fa:31:9c:a0:07:0b:80:5f: 5a:37:8c:cb:0f:4d:51:30:e3:f5:12:b4:3e:9f:44:4d:2a:08: c4:05:ff:c5:a2:b5:8c:0e:f3:45:54:0b:d1:01:8a:8d:45:ed: 5d:83:08:ce:9f:4f:a9:c8:a3:8d:b5:f2:22:3c:37:80:ab:85: db:6b:cb:fc:db:dc:70:c7:99:51:7a:f1:93:1c:d4:38:f7:ba: 9d:4e:ec:95:e4:47:d1:d2:8a:c1:48:80:52:bd:85:8d:b6:61: a8:d3:79:71:25:9e:7f:08:1d:bf:cb:d5:ae:b0:1c:f5:d8:4d: d0:2d:73:35:5a:3a:4b:3c:03:58:a0:ba:42:64:b5:dc:8d:2c: 12:c7:62:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMzQzlFMkUyMDQ3MDky NUEyQzk2RDEwREQ2RURGMUZCMzA5NTJGMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ADZ5OuZyr2ShBJRKEGb74FaTUL7YoWY2mnEF/Hs/8Mg0Tqw4 LnDBRZqLOa9+bZMcX6Redw5bEUjIpw8KNOvarspVGwdU+lkRfU2twaW9SxQIKl66 gs41hLWw+DlwxOZMAsiC6j9mBNSu6PP9NKkcgLMRmwl+pcVxVJpBIy/tbTQ40fCb X9jhbWF+WNpiUusWgKKoCa8ZUBHFWiLv3FkSiLdP2d7tDQ0NU6pQoqCYfyO4ZpAd i3p1gWpLbyEoJoFtV9Pqyu2c4pEx7/LJcJhlga6+Fv+jPTUocKzitSNAZf9QyNOh Y8BVUhEck2miMdaIyH0YpeR2pSSMZX2mSh4lAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUw8ni4gRwklosltEN1u3x+zCVLwAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3c4bmk0Z1J3a2xvc2x0RU4x dTN4LXpDVkx3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq Ad4wDQYJKoZIhvcNAQELBQADggEBADtV4+izcI6EMtYmSjGEBVuQxBLM40MqA3e/ LBw7mdQCXZ9Agt/e4lrSe+C/BfxDXSSrLAPz7mNY7rZTYMIwMFSzV7bVEpeOS9jm YZqugN4arfBp3dKDEzPdrWJ2ON+GEXXIHYHtoYFyMcQBgWmu2muhpFPjKXr6MZyg BwuAX1o3jMsPTVEw4/UStD6fRE0qCMQF/8WitYwO80VUC9EBio1F7V2DCM6fT6nI o4218iI8N4Crhdtry/zb3HDHmVF68ZMc1Dj3up1O7JXkR9HSisFIgFK9hY22YajT eXElnn8IHb/L1a6wHPXYTdAtczVaOks8A1igukJktdyNLBLHYv8= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org