$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa File: 0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa (raw, json) Hash identifier: Fq/8Xin5CNP5ChMCTRDbLiIqYMVk53nwtky2DIJQh9Q= Subject key identifier: D1:34:D5:08:A0:F8:AF:D8:9D:BD:2B:19:47:0B:89:33:A2:1B:71:DE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27D3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa Signing time: Fri 01 Sep 2023 10:04:35 +0000 ROA not before: Fri 01 Sep 2023 10:04:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10195 (0x27d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D134D508A0F8AFD89DBD2B19470B8933A21B71DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:39:91:48:a5:68:01:66:10:48:48:0d:a8: 63:b1:74:04:72:7c:ad:57:d6:f3:3e:76:1e:3d:70: 1e:01:0d:fe:42:8b:d2:1f:0d:b8:05:37:d2:52:ac: 1d:cd:5b:dd:bf:9d:3e:2e:ea:14:21:40:4a:69:dd: d0:f9:4e:3c:d2:0f:dc:54:db:e4:a3:15:66:18:77: 84:d0:8d:95:ab:32:29:e9:c5:af:96:f0:18:dc:34: f2:29:85:09:91:62:d1:29:f3:f2:8c:cf:19:86:28: 9b:b0:7e:0f:4e:1a:1e:36:b0:95:78:f5:ce:6a:6d: b0:f6:c2:80:bd:04:88:fc:44:40:23:4a:33:a5:24: a7:fc:7b:66:08:84:68:16:6e:63:e4:16:bd:d2:80: 23:7f:e5:90:b8:57:68:22:96:97:07:02:67:87:cc: 04:e0:0a:f8:77:42:02:35:60:d9:34:01:52:3e:b5: 75:ee:79:da:a1:4f:3a:9e:70:59:f8:02:31:30:f7: cd:73:5b:0f:ce:3e:02:52:f9:2e:09:59:2a:24:2c: 8b:ba:b2:82:e1:3a:d5:df:3d:53:5c:ed:cd:38:4f: 8a:30:1b:b2:c9:52:ac:5f:c3:4c:4d:62:50:0e:a6: 60:c4:30:6f:fa:79:69:1c:4e:9e:47:fc:f0:47:a0: 45:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:34:D5:08:A0:F8:AF:D8:9D:BD:2B:19:47:0B:89:33:A2:1B:71:DE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.244.0/23 Signature Algorithm: sha256WithRSAEncryption a7:46:4f:d9:e9:d2:43:f1:dc:3d:2a:01:3d:a9:b2:69:1f:81: 48:31:0f:5d:a9:35:40:e5:96:ab:9d:3f:2b:ab:9e:ef:cf:ca: 3e:ca:0b:36:74:61:38:cd:86:b2:25:cd:46:3f:08:77:6b:04: f2:b2:6d:29:16:24:a3:19:79:b1:0d:17:26:6d:7e:d8:0c:5e: c7:ab:42:8a:62:6b:ed:7c:21:6f:a1:40:93:97:dd:28:2e:5a: e9:f6:b3:c1:ca:a7:ab:ab:9e:d0:2a:2c:97:80:69:4f:6c:d3: ff:27:7f:60:e8:3a:12:5d:b6:af:35:60:b5:89:ba:86:92:d6: ab:17:37:7a:37:a3:8a:86:e5:b9:31:10:70:ec:fd:51:50:3c: c1:b7:1a:56:62:86:7e:78:c4:f0:e7:fa:f6:ca:06:70:d1:20: 65:c7:5e:84:c1:09:8d:a8:5b:28:25:da:31:c5:3d:9b:56:1b: 9b:97:97:ec:7f:26:a9:6b:7d:09:09:9a:35:ff:7b:d1:f8:a5: 38:5c:6d:a5:76:97:af:53:45:a0:10:0e:e1:8f:d5:18:3d:79: 19:82:8d:f1:cc:6c:64:47:10:a6:b4:9f:e3:ab:26:ef:ed:bd: 92:b4:5d:62:8f:36:f0:d9:c4:45:fe:9f:3a:41:99:19:05:6b: 80:9c:dd:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ9MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQxMzRENTA4QTBGOEFG RDg5REJEMkIxOTQ3MEI4OTMzQTIxQjcxREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPiTmRSKVoAWYQSEgNqGOxdARyfK1X1vM+dh49cB4BDf5Ci9If DbgFN9JSrB3NW92/nT4u6hQhQEpp3dD5TjzSD9xU2+SjFWYYd4TQjZWrMinpxa+W 8BjcNPIphQmRYtEp8/KMzxmGKJuwfg9OGh42sJV49c5qbbD2woC9BIj8REAjSjOl JKf8e2YIhGgWbmPkFr3SgCN/5ZC4V2gilpcHAmeHzATgCvh3QgI1YNk0AVI+tXXu edqhTzqecFn4AjEw981zWw/OPgJS+S4JWSokLIu6soLhOtXfPVNc7c04T4owG7LJ Uqxfw0xNYlAOpmDEMG/6eWkcTp5H/PBHoEVDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0TTVCKD4r9idvSsZRwuJM6Ibcd4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBUVFZDS0Q0cjlpZHZTc1pS d3VKTTZJYmNkNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wfQwDQYJKoZIhvcNAQELBQADggEBAKdGT9np0kPx3D0qAT2psmkfgUgxD12pNUDl lqudPyurnu/Pyj7KCzZ0YTjNhrIlzUY/CHdrBPKybSkWJKMZebENFyZtftgMXser Qopia+18IW+hQJOX3SguWun2s8HKp6urntAqLJeAaU9s0/8nf2DoOhJdtq81YLWJ uoaS1qsXN3o3o4qG5bkxEHDs/VFQPMG3GlZihn54xPDn+vbKBnDRIGXHXoTBCY2o Wygl2jHFPZtWG5uXl+x/JqlrfQkJmjX/e9H4pThcbaV2l69TRaAQDuGP1Rg9eRmC jfHMbGRHEKa0n+OrJu/tvZK0XWKPNvDZxEX+nzpBmRkFa4Cc3Vk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org