$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48lR6D4MlUfzJ003N0TFj7q9aSY.roa File: 48lR6D4MlUfzJ003N0TFj7q9aSY.roa (raw, json) Hash identifier: tWhNHfIuBpgdQTl6f/GScdDG2mA1QihVPVeezUbd+dA= Subject key identifier: E3:C9:51:E8:3E:0C:95:47:F3:27:4D:37:37:44:C5:8F:BA:BD:69:26 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27D6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48lR6D4MlUfzJ003N0TFj7q9aSY.roa Signing time: Fri 01 Sep 2023 10:04:36 +0000 ROA not before: Fri 01 Sep 2023 10:04:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10198 (0x27d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E3C951E83E0C9547F3274D373744C58FBABD6926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:46:fe:75:0a:89:e9:06:4d:4a:79:d8:36: a1:e3:d2:ca:00:9c:11:4c:6e:6e:00:b7:02:2a:6a: 25:bf:07:96:99:10:31:3f:58:71:b9:a3:1a:02:2e: 8e:39:7b:6c:98:b0:3d:81:62:a4:f1:43:e0:b1:ca: 7e:a7:51:7f:d9:a0:6a:79:87:2f:1c:00:6f:45:21: ef:f7:1f:5c:26:0e:74:78:20:87:a9:a9:a8:bc:ba: e6:48:f5:ea:6e:e1:b9:98:a7:4f:93:3f:23:0d:3c: 93:9a:75:55:b8:a3:29:ff:0d:e6:a3:c2:3c:84:89: ba:3f:73:93:72:00:65:91:17:65:8e:47:c1:1b:0e: c4:ea:71:b0:2b:45:36:3e:ed:b0:cc:86:1a:3c:6a: b3:be:01:49:f1:71:34:e5:e3:4d:14:1c:ac:00:ee: 25:60:a6:a0:8a:64:e1:e6:41:89:ac:56:74:3d:1f: cb:98:15:79:93:df:e5:b5:e3:67:ae:67:ba:81:81: 2e:07:cf:ab:1c:b6:45:9a:3e:f2:91:a7:5d:28:c9: 48:a1:27:fb:65:91:72:05:d1:7e:d8:0e:5e:8d:16: 8f:26:bb:4a:45:b7:79:81:28:b0:39:d4:c1:75:f2: 49:79:38:db:dd:dd:b4:17:ba:94:94:6a:92:f7:8c: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C9:51:E8:3E:0C:95:47:F3:27:4D:37:37:44:C5:8F:BA:BD:69:26 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48lR6D4MlUfzJ003N0TFj7q9aSY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.160.0/21 Signature Algorithm: sha256WithRSAEncryption 57:5d:56:46:1c:26:84:fd:8e:de:27:86:d0:ba:55:ce:da:0a: 38:5b:44:f1:c4:e9:a9:57:0a:55:87:56:a8:fd:ec:7f:fe:94: d1:08:69:f5:79:1a:36:ec:7c:d9:5a:1b:56:d1:4c:7a:80:13: 28:cd:54:5a:e6:ce:4d:a3:bd:a6:85:1d:ba:de:e4:d7:50:4d: 67:ae:2c:5b:28:86:1a:0c:89:e0:a8:30:8f:84:6f:36:dd:7f: 09:39:a9:73:7d:1a:bb:5c:a4:09:3d:ee:ae:67:05:52:d0:f6: 82:54:7b:c3:30:f4:d6:db:34:17:c3:4c:16:c8:d2:61:cf:89: 82:b4:c1:80:28:8d:01:3b:38:db:fb:ff:3d:16:83:96:27:5c: 0e:3f:aa:d9:63:8e:6e:17:06:2d:f5:b5:d6:e5:a2:36:d1:98: be:d2:2c:4f:38:f8:09:18:4b:38:df:a1:8d:8c:0a:52:49:2a: a7:be:d6:44:9a:ac:2b:a7:81:de:dc:ff:b4:82:eb:74:c7:15: 0d:8b:b3:04:5f:ff:d6:05:cb:57:d3:33:09:59:0b:88:fc:7a: a6:86:2b:64:85:f2:56:06:7e:52:27:a0:35:cc:d4:dc:20:a5: 9f:73:a4:18:bf:0f:f2:e7:b0:92:0a:a9:70:f4:be:4e:bd:44: 42:78:b9:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUzQzk1MUU4M0UwQzk1 NDdGMzI3NEQzNzM3NDRDNThGQkFCRDY5MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS40b+dQqJ6QZNSnnYNqHj0soAnBFMbm4AtwIqaiW/B5aZEDE/ WHG5oxoCLo45e2yYsD2BYqTxQ+Cxyn6nUX/ZoGp5hy8cAG9FIe/3H1wmDnR4IIep qai8uuZI9epu4bmYp0+TPyMNPJOadVW4oyn/DeajwjyEibo/c5NyAGWRF2WOR8Eb DsTqcbArRTY+7bDMhho8arO+AUnxcTTl400UHKwA7iVgpqCKZOHmQYmsVnQ9H8uY FXmT3+W142euZ7qBgS4Hz6sctkWaPvKRp10oyUihJ/tlkXIF0X7YDl6NFo8mu0pF t3mBKLA51MF18kl5ONvd3bQXupSUapL3jEA3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU48lR6D4MlUfzJ003N0TFj7q9aSYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzQ4bFI2RDRNbFVmekowMDNO MFRGajdxOWFTWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wqAwDQYJKoZIhvcNAQELBQADggEBAFddVkYcJoT9jt4nhtC6Vc7aCjhbRPHE6alX ClWHVqj97H/+lNEIafV5GjbsfNlaG1bRTHqAEyjNVFrmzk2jvaaFHbre5NdQTWeu LFsohhoMieCoMI+Ebzbdfwk5qXN9GrtcpAk97q5nBVLQ9oJUe8Mw9NbbNBfDTBbI 0mHPiYK0wYAojQE7ONv7/z0Wg5YnXA4/qtljjm4XBi31tdblojbRmL7SLE84+AkY SzjfoY2MClJJKqe+1kSarCungd7c/7SC63THFQ2LswRf/9YFy1fTMwlZC4j8eqaG K2SF8lYGflInoDXM1NwgpZ9zpBi/D/LnsJIKqXD0vk69REJ4uc4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org