$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WkrgrfACReLdo7HIi_jLokaUDs.roa File: 1WkrgrfACReLdo7HIi_jLokaUDs.roa (raw, json) Hash identifier: 4A4f4fON1J9vM5E8m5T0csWFT3PJuFSiNqEcDy0CgaA= Subject key identifier: D5:69:2B:82:B7:C0:09:17:8B:76:8E:C7:22:2F:E3:2E:89:1A:50:3B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AA0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WkrgrfACReLdo7HIi_jLokaUDs.roa Signing time: Fri 01 Sep 2023 10:08:06 +0000 ROA not before: Fri 01 Sep 2023 10:08:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.223.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10912 (0x2aa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D5692B82B7C009178B768EC7222FE32E891A503B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:a3:8e:26:d7:fc:8d:f4:32:13:11:13:f4: 31:f3:9b:7f:7a:4d:32:0a:82:a6:67:cd:50:7b:7b: f1:80:ba:e2:c5:42:d4:7b:6b:55:87:ad:87:39:d2: c6:5b:4c:1a:b3:ba:63:31:f0:75:49:f8:8f:61:53: cc:17:3b:75:fd:3c:6e:05:56:85:8f:ee:04:02:2b: 41:67:81:bf:da:6c:22:8e:4f:a0:96:31:4a:b6:7d: ac:21:c3:9b:88:ed:24:5a:61:fa:5c:5f:8c:5e:1d: 90:1e:a9:7c:6e:98:91:dc:0f:72:c2:56:cd:c9:76: 66:f0:f4:45:d4:52:83:3a:29:1f:12:34:5f:2a:76: c5:91:98:97:79:bd:d9:01:92:8d:35:94:32:95:b5: ad:58:57:b0:2c:15:27:c0:35:2d:c7:3f:7a:e6:6e: 65:57:99:74:0c:d0:6c:b3:35:a4:e4:5a:69:ce:cc: 1d:10:38:1d:c4:42:56:8e:8a:a0:98:e7:f1:17:d0: 45:eb:04:6c:c2:61:18:35:20:69:a5:f9:83:4c:ef: ac:76:df:d3:0d:68:ee:21:68:cb:4f:6a:18:9c:91: fa:87:e6:27:68:1f:a8:ab:8e:25:1c:ef:9b:f5:05: ed:0e:ee:87:84:85:05:a8:aa:0e:6d:68:a7:f2:b1: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:69:2B:82:B7:C0:09:17:8B:76:8E:C7:22:2F:E3:2E:89:1A:50:3B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WkrgrfACReLdo7HIi_jLokaUDs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.223.128/26 Signature Algorithm: sha256WithRSAEncryption 45:63:0e:7f:a1:14:1b:1e:0e:96:99:eb:39:a8:41:40:5c:44: 82:b5:53:c4:6a:0e:e9:23:b3:0d:22:65:15:33:68:46:d9:1b: b0:66:f6:d3:f8:6b:cc:8d:08:79:bd:d3:4d:1f:53:f5:f9:7e: 32:50:6f:e3:67:ce:3d:64:e2:f7:1b:40:0a:37:60:d2:59:89: 1f:b5:70:9e:e4:75:74:0b:1e:56:33:de:4e:aa:71:77:a7:c5: fe:0e:b8:07:63:04:a3:d9:83:78:73:44:78:c8:68:cf:e6:cb: 19:f5:98:80:80:e5:21:26:f7:eb:d8:d3:93:89:4c:fc:ba:33: d1:6b:b2:31:e0:e4:6d:18:97:73:87:3c:24:86:4b:d5:0c:b3: c8:fe:c2:9f:e6:74:d3:95:37:33:22:7c:a7:3d:f0:d6:5e:37: 8d:7f:15:37:90:dd:38:80:85:3d:fe:11:26:dd:b4:fb:00:33: 4d:ba:1c:76:77:2c:41:fd:d0:6f:9a:85:a1:27:05:db:70:8e: 36:e8:08:09:4d:f4:ce:a2:dc:3c:b8:42:d8:6d:9e:0e:fa:5a: f8:7b:9c:d6:27:5f:f7:96:b1:16:2b:63:a8:4f:59:20:b1:33: cf:23:25:17:bd:89:b2:9a:ba:34:b1:cd:ec:5c:10:5c:21:83: 1c:98:c0:f2 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ1NjkyQjgyQjdDMDA5 MTc4Qjc2OEVDNzIyMkZFMzJFODkxQTUwM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZfqOOJtf8jfQyExET9DHzm396TTIKgqZnzVB7e/GAuuLFQtR7 a1WHrYc50sZbTBqzumMx8HVJ+I9hU8wXO3X9PG4FVoWP7gQCK0Fngb/abCKOT6CW MUq2fawhw5uI7SRaYfpcX4xeHZAeqXxumJHcD3LCVs3Jdmbw9EXUUoM6KR8SNF8q dsWRmJd5vdkBko01lDKVta1YV7AsFSfANS3HP3rmbmVXmXQM0GyzNaTkWmnOzB0Q OB3EQlaOiqCY5/EX0EXrBGzCYRg1IGml+YNM76x239MNaO4haMtPahickfqH5ido H6irjiUc75v1Be0O7oeEhQWoqg5taKfysZbXAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU1WkrgrfACReLdo7HIi/jLokaUDswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFXa3JncmZBQ1JlTGRvN0hJ aV9qTG9rYVVEcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wd+AMA0GCSqGSIb3DQEBCwUAA4IBAQBFYw5/oRQbHg6Wmes5qEFAXESCtVPEag7p I7MNImUVM2hG2RuwZvbT+GvMjQh5vdNNH1P1+X4yUG/jZ849ZOL3G0AKN2DSWYkf tXCe5HV0Cx5WM95OqnF3p8X+DrgHYwSj2YN4c0R4yGjP5ssZ9ZiAgOUhJvfr2NOT iUz8ujPRa7Ix4ORtGJdzhzwkhkvVDLPI/sKf5nTTlTczInynPfDWXjeNfxU3kN04 gIU9/hEm3bT7ADNNuhx2dyxB/dBvmoWhJwXbcI426AgJTfTOotw8uELYbZ4O+lr4 e5zWJ1/3lrEWK2OoT1kgsTPPIyUXvYmymro0sc3sXBBcIYMcmMDy -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org