$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa File: ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa (raw, json) Hash identifier: /35d7rTjJncXQJns1hDL55nT0Q40LtWd3Og6aaGmfxw= Subject key identifier: CA:91:9D:61:4A:3B:FC:A3:2D:BD:63:50:E1:10:2C:61:AD:87:1F:DE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AAC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa Signing time: Fri 01 Sep 2023 10:08:10 +0000 ROA not before: Fri 01 Sep 2023 10:08:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 211.76.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10924 (0x2aac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CA919D614A3BFCA32DBD6350E1102C61AD871FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:02:b7:6a:9b:c3:fd:da:b0:f0:36:c9:57: 7a:42:5c:8c:db:09:44:b1:7c:9a:e7:c0:6e:cb:68: fd:67:6a:a7:df:b6:81:95:e1:7e:23:7e:05:40:d7: de:73:92:e7:3d:fc:ff:3d:41:3b:eb:49:5d:f7:d6: 59:a5:d7:92:dd:aa:fc:b1:fb:5c:37:79:37:c2:17: 26:f1:fc:5f:87:ac:2f:cf:db:bf:d2:ed:38:ed:58: ad:ac:fd:eb:8e:08:a6:ae:45:3e:54:36:f1:3c:07: 9b:81:06:40:63:01:20:80:4f:27:85:a3:db:3f:f6: 77:67:ba:61:7f:57:12:83:a8:0e:a6:69:dc:04:8a: 9c:19:f2:d7:34:7c:2a:66:08:b4:a4:d1:c2:d0:fd: 6a:72:8b:f5:19:de:7c:ee:7d:d4:51:43:e7:6f:5c: 92:25:6e:ba:18:25:22:fe:45:9f:b2:9d:18:c2:2b: 17:36:23:fb:67:16:5a:c2:15:00:2c:e3:4f:6a:ee: 80:17:03:e3:19:6c:a2:20:86:f2:f3:69:30:19:e2: 2a:a2:47:bf:7c:c4:db:87:96:40:a6:2b:42:f3:7c: a2:3e:8e:26:76:57:b7:a8:9f:1b:1c:50:6d:b8:76: ae:3b:ae:d4:dc:b5:cc:10:9d:5d:07:5b:36:0a:d2: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:91:9D:61:4A:3B:FC:A3:2D:BD:63:50:E1:10:2C:61:AD:87:1F:DE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.119.0/24 Signature Algorithm: sha256WithRSAEncryption a3:a3:51:dd:85:22:6c:3f:0b:2a:e5:99:8d:43:dd:64:3b:25: ab:d1:04:1e:9f:86:c0:14:9d:b4:0e:2e:b3:01:3c:6d:7b:c9: a6:96:04:da:43:97:f4:b8:7f:b2:13:54:8e:fa:1d:a5:ed:66: 1e:b7:dd:c8:8b:b2:1c:5d:2b:4a:39:6b:1a:a4:7a:05:4c:a7: 3a:57:6d:4d:a6:d0:71:a4:c4:d7:f7:19:70:3d:93:33:47:f5: 43:fa:b2:80:bc:19:82:2f:37:16:f0:7e:01:83:16:57:09:08: da:27:1c:00:e7:ec:32:21:07:f5:0c:04:86:5b:1f:ac:54:63: 25:f5:02:6a:e9:c6:0a:00:ec:5b:35:2a:c8:11:37:bc:86:31: 9c:1e:3e:d6:65:20:50:da:e8:c3:19:1d:e7:fe:b6:be:35:a5: 8c:03:9d:6d:a8:6b:6d:f7:02:20:d7:30:32:74:6d:15:23:ce: da:b6:5a:e6:b1:9c:b6:86:a6:ce:5e:47:dd:4a:e2:35:36:df: ef:52:f1:67:6e:e5:d5:1f:70:2e:92:b2:16:75:01:2a:1b:a7: 5a:75:1f:b6:e6:15:f5:1f:2a:95:1e:dc:f9:c7:24:df:dc:81: 97:d3:6d:27:3d:ff:f1:ca:4e:0e:50:df:b3:20:bd:9a:ee:bd: 5b:fe:33:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENBOTE5RDYxNEEzQkZD QTMyREJENjM1MEUxMTAyQzYxQUQ4NzFGREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcrAK3apvD/dqw8DbJV3pCXIzbCUSxfJrnwG7LaP1naqfftoGV 4X4jfgVA195zkuc9/P89QTvrSV331lml15Ldqvyx+1w3eTfCFybx/F+HrC/P27/S 7TjtWK2s/euOCKauRT5UNvE8B5uBBkBjASCATyeFo9s/9ndnumF/VxKDqA6madwE ipwZ8tc0fCpmCLSk0cLQ/Wpyi/UZ3nzufdRRQ+dvXJIlbroYJSL+RZ+ynRjCKxc2 I/tnFlrCFQAs409q7oAXA+MZbKIghvLzaTAZ4iqiR798xNuHlkCmK0LzfKI+jiZ2 V7eonxscUG24dq47rtTctcwQnV0HWzYK0l6TAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUypGdYUo7/KMtvWNQ4RAsYa2HH94wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lwR2RZVW83X0tNdHZXTlE0 UkFzWWEySEg5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THcwDQYJKoZIhvcNAQELBQADggEBAKOjUd2FImw/CyrlmY1D3WQ7JavRBB6fhsAU nbQOLrMBPG17yaaWBNpDl/S4f7ITVI76HaXtZh633ciLshxdK0o5axqkegVMpzpX bU2m0HGkxNf3GXA9kzNH9UP6soC8GYIvNxbwfgGDFlcJCNonHADn7DIhB/UMBIZb H6xUYyX1AmrpxgoA7Fs1KsgRN7yGMZwePtZlIFDa6MMZHef+tr41pYwDnW2oa233 AiDXMDJ0bRUjztq2WuaxnLaGps5eR91K4jU23+9S8Wdu5dUfcC6SshZ1ASobp1p1 H7bmFfUfKpUe3PnHJN/cgZfTbSc9//HKTg5Q37MgvZruvVv+M8M= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org