$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-a7QoL-esdOF6u3_Agnyaz5Y4To.roa File: -a7QoL-esdOF6u3_Agnyaz5Y4To.roa (raw, json) Hash identifier: 4LZJDLSbJicMoQyiRfDlAJCok/iwh+4Qp+qI4qid6Os= Subject key identifier: F9:AE:D0:A0:BF:9E:B1:D3:85:EA:ED:FF:02:09:F2:6B:3E:58:E1:3A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2823 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-a7QoL-esdOF6u3_Agnyaz5Y4To.roa Signing time: Fri 01 Sep 2023 10:04:59 +0000 ROA not before: Fri 01 Sep 2023 10:04:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10275 (0x2823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F9AED0A0BF9EB1D385EAEDFF0209F26B3E58E13A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:cd:a1:db:e1:1c:f5:4f:36:a8:b6:5d:91: 40:b9:a5:40:22:4b:44:c5:d4:4a:d5:4e:fa:b4:e0: 2c:bf:31:ef:c5:d3:cb:3b:31:64:c7:a0:3a:3f:c5: 55:83:15:de:07:f1:a1:92:d9:1c:36:d9:db:99:34: f5:2c:cb:d3:9e:61:61:af:bf:85:b8:31:55:4a:ef: eb:59:8c:6a:a2:95:47:db:1d:3f:e4:b3:e0:86:24: 5b:99:bd:c6:9d:0d:57:4d:5b:4a:b0:45:6c:c9:93: 48:4b:fa:96:49:67:98:a2:0d:7b:8c:b5:6c:69:3a: cf:66:62:83:f0:24:42:41:b6:10:60:3a:e4:10:01: 58:b6:d8:b6:8d:c8:3d:0f:78:ef:ce:ff:31:a7:48: 84:70:9a:87:43:54:41:56:18:d1:ba:4b:0a:23:96: ac:bd:1c:d2:22:38:b3:26:22:03:6b:88:73:41:66: 0c:76:1d:7b:d0:16:64:6e:34:7e:80:d6:74:2c:9b: 93:12:bd:da:90:c7:20:f1:e0:35:f5:5c:c4:a3:fb: df:78:ab:e5:5d:3d:2d:81:90:88:a0:21:51:a8:fe: b4:6d:3d:38:28:30:e2:f7:8f:9b:d3:aa:d2:b9:71: a6:78:b3:de:b8:e3:ce:4f:55:21:71:da:fd:51:78: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:D0:A0:BF:9E:B1:D3:85:EA:ED:FF:02:09:F2:6B:3E:58:E1:3A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-a7QoL-esdOF6u3_Agnyaz5Y4To.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.216.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:80:25:d5:33:41:a7:80:6a:e5:81:e6:90:1d:06:95:32:10: 30:f1:32:77:25:51:9e:f8:f1:38:3e:8e:e4:6f:37:52:40:34: 8b:09:0e:63:ef:43:71:75:da:24:bf:c2:02:6f:cd:62:5d:a0: ca:3d:45:2a:41:53:3d:f3:cf:47:10:c8:77:39:10:20:9f:91: 39:f5:05:0f:b7:f7:23:38:35:f9:c6:6b:e2:05:b5:b6:8a:60: 1f:c7:de:a6:b7:d7:97:b3:b0:bb:f4:1c:b7:78:e1:7e:1d:1e: 93:68:da:05:24:9e:8f:ef:4f:c0:f1:d3:19:6a:5c:d5:26:79: 1b:9b:a5:31:82:55:0d:3f:f5:f2:c3:26:8e:18:e1:1d:be:79: 5c:44:ee:b1:d1:dc:06:5f:5e:03:d3:ca:6a:e2:de:d3:ae:80: 99:36:23:fc:13:02:f7:fb:27:eb:40:4f:63:74:8a:6a:ce:84: 56:39:20:a0:8e:ed:c6:c6:3f:31:52:11:7a:32:31:97:0b:c7: 18:be:2e:5c:b8:6a:e1:0d:74:88:6f:23:c6:a4:4c:2d:7a:11: a0:94:e5:5b:9c:46:7d:1a:d8:58:bb:8a:48:85:ab:d8:7f:6d: fb:dd:64:13:db:1a:3b:e8:02:98:de:9c:80:4c:95:a4:93:57: 86:2e:1c:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5QUVEMEEwQkY5RUIx RDM4NUVBRURGRjAyMDlGMjZCM0U1OEUxM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw3M2h2+Ec9U82qLZdkUC5pUAiS0TF1ErVTvq04Cy/Me/F08s7 MWTHoDo/xVWDFd4H8aGS2Rw22duZNPUsy9OeYWGvv4W4MVVK7+tZjGqilUfbHT/k s+CGJFuZvcadDVdNW0qwRWzJk0hL+pZJZ5iiDXuMtWxpOs9mYoPwJEJBthBgOuQQ AVi22LaNyD0PeO/O/zGnSIRwmodDVEFWGNG6Swojlqy9HNIiOLMmIgNriHNBZgx2 HXvQFmRuNH6A1nQsm5MSvdqQxyDx4DX1XMSj+994q+VdPS2BkIigIVGo/rRtPTgo MOL3j5vTqtK5caZ4s964485PVSFx2v1ReEqBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+a7QoL+esdOF6u3/Agnyaz5Y4TowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1hN1FvTC1lc2RPRjZ1M19B Z255YXo1WTRUby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wdgwDQYJKoZIhvcNAQELBQADggEBAD+AJdUzQaeAauWB5pAdBpUyEDDxMnclUZ74 8Tg+juRvN1JANIsJDmPvQ3F12iS/wgJvzWJdoMo9RSpBUz3zz0cQyHc5ECCfkTn1 BQ+39yM4NfnGa+IFtbaKYB/H3qa315ezsLv0HLd44X4dHpNo2gUkno/vT8Dx0xlq XNUmeRubpTGCVQ0/9fLDJo4Y4R2+eVxE7rHR3AZfXgPTymri3tOugJk2I/wTAvf7 J+tAT2N0imrOhFY5IKCO7cbGPzFSEXoyMZcLxxi+Lly4auENdIhvI8akTC16EaCU 5VucRn0a2Fi7ikiFq9h/bfvdZBPbGjvoApjenIBMlaSTV4YuHAs= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org