$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20No-eiz22lTauTwNQwM25EwgMc.roa File: 20No-eiz22lTauTwNQwM25EwgMc.roa (raw, json) Hash identifier: EIRarfjMT4/Afl8Y0/f1FoYpgTf78DpFspf3G8JszN0= Subject key identifier: DB:43:68:F9:E8:B3:DB:69:53:6A:E4:F0:35:0C:0C:DB:91:30:80:C7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27C9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20No-eiz22lTauTwNQwM25EwgMc.roa Signing time: Fri 01 Sep 2023 10:04:32 +0000 ROA not before: Fri 01 Sep 2023 10:04:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10185 (0x27c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DB4368F9E8B3DB69536AE4F0350C0CDB913080C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:2f:ba:35:dd:34:38:81:09:e5:38:35:fd: ce:1a:92:e1:85:cd:90:8a:7d:54:5e:34:a4:e7:62: 91:30:89:71:16:6d:86:4c:71:4e:b7:22:6c:81:a7: 05:a7:37:86:cd:3b:85:a2:05:9f:1c:57:fd:9c:53: 3f:e6:ed:e6:a7:16:8e:ec:1a:31:56:67:3c:e3:59: e1:3a:3f:07:d6:a5:96:1d:b6:78:a3:cb:01:da:34: 9f:7d:90:1b:f2:ff:21:81:23:53:e1:f2:07:28:4c: 49:9c:e1:16:5c:1d:ae:1c:c4:8a:6b:29:0a:95:d5: b0:af:fc:82:96:6a:22:1e:46:0a:45:4d:f4:9f:9a: bc:27:0d:79:e6:80:ed:6b:bd:6a:5e:70:1a:8d:e0: 15:27:0b:a6:25:f6:a3:c4:5b:8d:be:9d:b8:45:b1: 2d:f4:52:33:1d:22:e5:fc:14:ca:e5:1d:e4:ff:3a: 90:18:68:63:0e:bc:9a:e1:c5:fd:32:5a:9c:6f:63: 23:d4:79:db:fd:f5:e5:4b:3b:0c:10:b3:8d:90:5e: 82:ba:6a:28:15:cc:06:58:12:91:8c:53:b5:5f:31: 29:64:92:9b:4f:1a:c7:c6:a7:db:ab:6c:a4:de:e4: 7d:e7:2c:f4:25:d7:11:8b:32:33:db:fd:96:d7:a7: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:68:F9:E8:B3:DB:69:53:6A:E4:F0:35:0C:0C:DB:91:30:80:C7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20No-eiz22lTauTwNQwM25EwgMc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.174.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:cc:46:f8:ad:b9:8d:a9:38:06:3c:92:87:3d:ae:19:bf:76: 53:9c:68:a2:e3:39:6a:f9:42:5d:a8:df:98:e5:e0:28:74:b7: 1c:28:60:fb:bc:ca:8d:f7:f9:14:14:e1:1f:09:bb:65:1b:98: f0:64:88:14:93:29:98:2e:76:0a:a9:ce:9c:15:f6:bd:13:09: 89:56:7c:a5:18:e1:73:d4:47:33:c1:66:af:a4:73:44:6e:d9: a3:99:7a:8f:0e:92:ca:bc:e6:2a:e8:4f:2b:d0:5f:6f:03:1a: cb:f8:3f:72:e3:ac:3d:9d:82:0a:d2:ba:36:5d:a3:17:5c:a6: 77:fe:d1:60:f2:45:f9:c7:da:d7:b0:ee:fb:0b:46:12:4e:48: 6e:be:e0:c0:5c:4b:6d:a2:91:7a:25:c7:a0:d2:6a:1c:2a:7f: 04:df:77:15:7d:eb:22:17:9e:03:1f:16:6e:d2:39:3a:9e:be: 7c:a5:0b:13:b6:11:aa:54:e2:d9:06:19:e8:cc:89:6e:da:86: 51:00:24:a8:bd:b1:c6:77:4e:41:88:53:59:f5:e9:72:82:36: 61:8f:f4:ee:50:90:5d:cb:ff:47:11:41:ac:ff:fe:be:c1:29: 4f:7c:d7:6e:b9:3f:0a:10:84:b4:7e:68:6b:76:a5:68:29:3d: 14:05:09:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERCNDM2OEY5RThCM0RC Njk1MzZBRTRGMDM1MEMwQ0RCOTEzMDgwQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKDS+6Nd00OIEJ5Tg1/c4akuGFzZCKfVReNKTnYpEwiXEWbYZM cU63ImyBpwWnN4bNO4WiBZ8cV/2cUz/m7eanFo7sGjFWZzzjWeE6PwfWpZYdtnij ywHaNJ99kBvy/yGBI1Ph8gcoTEmc4RZcHa4cxIprKQqV1bCv/IKWaiIeRgpFTfSf mrwnDXnmgO1rvWpecBqN4BUnC6Yl9qPEW42+nbhFsS30UjMdIuX8FMrlHeT/OpAY aGMOvJrhxf0yWpxvYyPUedv99eVLOwwQs42QXoK6aigVzAZYEpGMU7VfMSlkkptP GsfGp9urbKTe5H3nLPQl1xGLMjPb/ZbXpyI/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU20No+eiz22lTauTwNQwM25EwgMcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzIwTm8tZWl6MjJsVGF1VHdO UXdNMjVFd2dNYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 w64wDQYJKoZIhvcNAQELBQADggEBAFvMRvituY2pOAY8koc9rhm/dlOcaKLjOWr5 Ql2o35jl4Ch0txwoYPu8yo33+RQU4R8Ju2UbmPBkiBSTKZgudgqpzpwV9r0TCYlW fKUY4XPURzPBZq+kc0Ru2aOZeo8Oksq85iroTyvQX28DGsv4P3LjrD2dggrSujZd oxdcpnf+0WDyRfnH2tew7vsLRhJOSG6+4MBcS22ikXolx6DSahwqfwTfdxV96yIX ngMfFm7SOTqevnylCxO2EapU4tkGGejMiW7ahlEAJKi9scZ3TkGIU1n16XKCNmGP 9O5QkF3L/0cRQaz//r7BKU981265PwoQhLR+aGt2pWgpPRQFCSQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org