$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wMgpRXunbvIIO8sr0hggqXiLPig.roa File: wMgpRXunbvIIO8sr0hggqXiLPig.roa (raw, json) Hash identifier: fB5KLjY7G7uEPC0WwGoyNLVdnyv+shE8ulUp/LjXqfc= Subject key identifier: C0:C8:29:45:7B:A7:6E:F2:08:3B:CB:2B:D2:18:20:A9:78:8B:3E:28 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29AE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wMgpRXunbvIIO8sr0hggqXiLPig.roa Signing time: Fri 01 Sep 2023 10:06:55 +0000 ROA not before: Fri 01 Sep 2023 10:06:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10670 (0x29ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C0C829457BA76EF2083BCB2BD21820A9788B3E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:a0:71:f3:6a:e9:f1:ee:7c:1f:cc:44:41: 16:7d:78:d3:f3:1e:07:32:ac:e2:5f:e3:a4:79:5d: 4b:99:00:c2:e7:f2:36:54:43:f4:5d:cb:1f:d2:44: 19:db:d5:f2:d7:96:6a:2d:64:1e:25:e4:64:da:1c: e2:be:d9:6e:d9:98:91:d6:73:2c:a6:a2:24:4c:27: 6c:7c:86:4a:29:c2:96:9d:b3:73:d1:94:ae:31:c3: 70:e5:b1:5c:6e:97:9a:e4:6e:bc:3d:b1:b0:d3:44: 45:ea:f1:9d:ec:03:05:b0:e3:8c:2c:6b:13:a4:f3: de:5b:a6:f8:05:28:41:50:d3:9e:f5:1e:b8:40:cd: b8:0a:ad:d0:28:af:b3:34:df:e7:df:38:e1:4b:7a: 3c:ec:5a:18:ff:57:cd:4e:88:21:a8:c2:69:d3:af: eb:f5:22:55:b5:da:00:c1:0d:4a:bb:c5:9f:58:4a: bc:1c:3a:b6:f5:ae:f5:b7:5b:4b:c1:ca:90:83:be: fe:53:43:f8:e5:bc:6a:b2:0a:c2:d0:69:b0:21:d5: 44:23:8b:f0:16:b4:ce:22:4a:8a:f7:d8:8a:0b:1e: e6:e6:b6:7a:3c:09:25:9b:fa:6d:3c:85:c7:ab:4c: 16:97:b0:c9:17:f7:b9:75:ed:5d:b9:f7:22:fc:68: e9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C8:29:45:7B:A7:6E:F2:08:3B:CB:2B:D2:18:20:A9:78:8B:3E:28 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wMgpRXunbvIIO8sr0hggqXiLPig.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.13.0/24 Signature Algorithm: sha256WithRSAEncryption 40:41:04:0e:55:bb:b7:87:40:8b:d2:eb:4d:47:0f:09:be:ff: a6:1e:bd:08:c5:00:53:87:97:4b:23:1f:d1:d0:0c:db:ba:dd: 94:1a:2c:e9:3c:fa:4d:2d:40:8f:7a:d6:4a:87:02:51:80:fc: a7:7e:e3:d3:21:73:1b:78:fa:75:6a:73:92:df:d5:13:5d:e9: a7:44:de:6e:2e:e8:84:bf:32:d9:9c:14:05:da:0b:cd:8b:14: ec:bc:c1:03:45:f8:63:35:6f:d1:62:23:6d:ca:22:fe:5f:9d: a4:dd:72:fc:59:87:ad:4d:fc:63:0b:d5:5c:2a:11:b0:32:b7: df:c4:a0:b2:62:e7:e9:e1:39:f5:fb:5a:33:a3:b5:5a:bd:38: de:dc:07:e2:43:83:69:86:8b:14:76:9f:62:6d:b6:be:5d:aa: c6:8a:81:f6:ab:9b:e7:ba:03:04:6e:83:6e:15:c0:ee:15:f7: bd:12:72:dc:60:c5:8f:b1:b7:6b:d3:b0:3c:b8:bb:d6:d4:a9: 5c:6c:e3:06:af:97:7d:a5:be:a3:d1:6f:46:3f:eb:92:de:13: eb:59:a2:30:78:5f:83:83:d8:d1:78:56:ce:8e:5d:ea:8d:d8: cc:e7:93:8e:b8:f7:83:b3:87:01:8e:30:55:8c:ea:17:21:38: ce:89:99:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMwQzgyOTQ1N0JBNzZF RjIwODNCQ0IyQkQyMTgyMEE5Nzg4QjNFMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA76Bx82rp8e58H8xEQRZ9eNPzHgcyrOJf46R5XUuZAMLn8jZU Q/Rdyx/SRBnb1fLXlmotZB4l5GTaHOK+2W7ZmJHWcyymoiRMJ2x8hkopwpads3PR lK4xw3DlsVxul5rkbrw9sbDTREXq8Z3sAwWw44wsaxOk895bpvgFKEFQ0571HrhA zbgKrdAor7M03+ffOOFLejzsWhj/V81OiCGowmnTr+v1IlW12gDBDUq7xZ9YSrwc Orb1rvW3W0vBypCDvv5TQ/jlvGqyCsLQabAh1UQji/AWtM4iSor32IoLHubmtno8 CSWb+m08hcerTBaXsMkX97l17V259yL8aOnLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwMgpRXunbvIIO8sr0hggqXiLPigwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dNZ3BSWHVuYnZJSU84c3Iw aGdncVhpTFBpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AQ0wDQYJKoZIhvcNAQELBQADggEBAEBBBA5Vu7eHQIvS601HDwm+/6YevQjFAFOH l0sjH9HQDNu63ZQaLOk8+k0tQI961kqHAlGA/Kd+49Mhcxt4+nVqc5Lf1RNd6adE 3m4u6IS/MtmcFAXaC82LFOy8wQNF+GM1b9FiI23KIv5fnaTdcvxZh61N/GML1Vwq EbAyt9/EoLJi5+nhOfX7WjOjtVq9ON7cB+JDg2mGixR2n2Jttr5dqsaKgfarm+e6 AwRug24VwO4V970SctxgxY+xt2vTsDy4u9bUqVxs4wavl32lvqPRb0Y/65LeE+tZ ojB4X4OD2NF4Vs6OXeqN2Mznk46494OzhwGOMFWM6hchOM6JmXE= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:32 2024 by rpki-client on console-fra.rpki-client.org