$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-PilGVi1O-GhzkO-uwYhkIHssCw.roa File: -PilGVi1O-GhzkO-uwYhkIHssCw.roa (raw, json) Hash identifier: KLMagv4q4VDahEDNZSfvhcnCRnYxSqVAKmsM0wx3mLA= Subject key identifier: F8:F8:A5:19:58:B5:3B:E1:A1:CE:43:BE:BB:06:21:90:81:EC:B0:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28CB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-PilGVi1O-GhzkO-uwYhkIHssCw.roa Signing time: Fri 01 Sep 2023 10:05:46 +0000 ROA not before: Fri 01 Sep 2023 10:05:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10443 (0x28cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F8F8A51958B53BE1A1CE43BEBB06219081ECB02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:49:fa:bf:49:dc:3c:bf:3b:be:dd:7f:6f:4f: 7d:68:a2:7d:c1:71:8f:1a:01:ad:b9:2b:ed:d5:e2: c9:9c:7b:b2:06:c1:49:40:bc:eb:cc:04:64:6b:1e: 31:44:40:fe:b8:0f:36:25:1f:2b:17:68:08:89:8c: 59:d3:f7:70:60:32:ef:1e:cc:36:3d:51:0e:69:53: cb:dd:ca:16:17:14:e0:47:0f:c1:46:79:53:b9:e4: f5:05:c0:3c:d6:36:c7:43:1f:0f:f7:26:2f:b9:c6: 50:5a:d2:47:54:cd:93:f2:3d:93:a8:75:bb:3e:50: a2:27:3d:07:ce:aa:7c:dd:fd:37:89:b3:c1:f2:2f: 08:0a:e5:6c:27:26:7f:65:90:6b:20:37:c9:2c:8e: 25:63:8b:db:4f:9e:10:ab:ac:a9:7d:e9:e1:c6:92: d0:de:99:c9:a7:51:00:29:87:77:a5:7c:ce:35:f6: 7f:e3:3b:a2:4c:d6:ab:bc:01:07:fb:c6:20:87:52: 18:8e:c9:1f:be:5d:b5:70:53:42:aa:f1:1b:b2:42: 7e:94:33:52:91:6e:55:86:9f:4b:f3:59:5b:7b:c1: d9:54:5d:22:94:8f:88:e2:4f:f5:a0:cc:39:cf:b1: 7a:4d:8a:47:7d:3c:18:94:b0:97:f9:42:53:9d:75: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F8:A5:19:58:B5:3B:E1:A1:CE:43:BE:BB:06:21:90:81:EC:B0:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-PilGVi1O-GhzkO-uwYhkIHssCw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.136.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:77:c8:4e:93:5b:ab:a5:8a:81:d7:0a:53:02:1d:e9:05:a9: c7:ce:80:f4:f4:9c:73:4b:6d:80:95:f6:d8:74:71:18:34:58: ef:eb:5a:b9:ee:6c:d2:5b:48:c2:d9:17:68:3c:34:a4:18:54: f9:39:f0:cb:83:39:14:2d:27:74:9d:3e:ff:20:3a:ca:86:e7: b5:00:99:a0:2a:68:b9:f4:bf:d8:13:da:2a:6d:cf:97:d6:9f: 98:56:60:93:91:64:11:d7:78:83:b1:f2:e0:44:03:0d:64:25: 13:be:8b:54:be:73:5e:1f:fc:6b:4b:1d:19:58:df:30:2d:fb: 40:66:80:88:f3:85:73:15:d9:a1:c0:4a:ec:0d:28:04:f1:66: 44:bb:e0:78:ce:5b:52:ef:5d:39:89:cc:38:da:9c:ca:70:c1: a9:e4:2b:b4:72:41:fb:0b:d2:b2:c3:da:50:69:c9:ef:c4:cd: ab:b3:fe:8f:8f:7b:d6:d6:49:ff:9b:0c:e3:9b:d6:0b:60:25: 57:a2:81:08:40:4e:b5:12:3f:e3:2f:5a:99:83:c9:7c:38:48: 44:b1:49:eb:63:3e:29:50:77:92:74:68:5c:d4:9b:2b:7a:ac: 8a:96:8a:f2:5f:df:3c:cd:86:d9:20:fe:ac:33:c4:91:a8:a3: 73:80:a7:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY4RjhBNTE5NThCNTNC RTFBMUNFNDNCRUJCMDYyMTkwODFFQ0IwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoSfq/Sdw8vzu+3X9vT31oon3BcY8aAa25K+3V4smce7IGwUlA vOvMBGRrHjFEQP64DzYlHysXaAiJjFnT93BgMu8ezDY9UQ5pU8vdyhYXFOBHD8FG eVO55PUFwDzWNsdDHw/3Ji+5xlBa0kdUzZPyPZOodbs+UKInPQfOqnzd/TeJs8Hy LwgK5WwnJn9lkGsgN8ksjiVji9tPnhCrrKl96eHGktDemcmnUQAph3elfM419n/j O6JM1qu8AQf7xiCHUhiOyR++XbVwU0Kq8RuyQn6UM1KRblWGn0vzWVt7wdlUXSKU j4jiT/WgzDnPsXpNikd9PBiUsJf5QlOddTzTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+PilGVi1O+GhzkO+uwYhkIHssCwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1QaWxHVmkxTy1HaHprTy11 d1loa0lIc3NDdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wYgwDQYJKoZIhvcNAQELBQADggEBAHx3yE6TW6ulioHXClMCHekFqcfOgPT0nHNL bYCV9th0cRg0WO/rWrnubNJbSMLZF2g8NKQYVPk58MuDORQtJ3SdPv8gOsqG57UA maAqaLn0v9gT2iptz5fWn5hWYJORZBHXeIOx8uBEAw1kJRO+i1S+c14f/GtLHRlY 3zAt+0BmgIjzhXMV2aHASuwNKATxZkS74HjOW1LvXTmJzDjanMpwwankK7RyQfsL 0rLD2lBpye/Ezauz/o+Pe9bWSf+bDOOb1gtgJVeigQhATrUSP+MvWpmDyXw4SESx SetjPilQd5J0aFzUmyt6rIqWivJf3zzNhtkg/qwzxJGoo3OApxk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org