$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/61PQY5OQRRLydlxbUChyqqC-DTE.roa File: 61PQY5OQRRLydlxbUChyqqC-DTE.roa (raw, json) Hash identifier: 0UXctK9AQ9UvItYWPYw9hm7sPwb6Pvvbd8CsQsjXQYI= Subject key identifier: EB:53:D0:63:93:90:45:12:F2:76:5C:5B:50:28:72:AA:A0:BE:0D:31 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2909 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/61PQY5OQRRLydlxbUChyqqC-DTE.roa Signing time: Fri 01 Sep 2023 10:06:04 +0000 ROA not before: Fri 01 Sep 2023 10:06:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10505 (0x2909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EB53D06393904512F2765C5B502872AAA0BE0D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:7d:aa:79:77:07:cc:90:f0:d8:b0:9d:80: a4:25:bf:d7:72:cc:27:d6:39:9a:b2:29:35:3a:8f: 2b:de:b6:3b:af:9e:3c:63:1c:74:2a:a3:63:5b:b3: 2b:26:2f:a9:80:95:f8:3d:e7:2f:09:00:46:22:98: 62:66:36:16:1c:d0:db:08:12:3c:fd:8d:51:67:7a: 34:3a:f5:11:7e:e3:ca:e2:17:e1:ff:a6:d2:04:3d: 6b:a2:b2:ab:08:55:f3:13:e1:c8:04:27:d4:d8:1e: 39:97:50:3d:3f:42:70:49:6b:a2:63:cf:7c:34:e6: 1f:8e:08:e1:d4:3e:f6:06:36:19:cb:de:42:01:a4: e3:ff:c8:87:98:4b:b9:e0:1d:15:08:28:32:56:ac: 47:e3:9b:21:0a:25:78:00:cb:8a:75:e1:f9:f4:36: 71:c4:45:6e:6f:40:68:cd:6b:02:dd:00:ee:e5:a8: e8:a5:93:0f:5a:db:cf:41:cc:5d:79:80:b7:9b:64: fc:43:af:61:b4:ff:a4:ea:bc:17:2c:22:4c:ad:85: 7f:21:15:2d:36:d2:cd:97:d5:c4:c0:61:9f:db:a1: ef:32:3e:c4:a3:4b:8e:1e:a3:b1:c2:a3:32:75:95: 42:97:07:7e:b7:b9:10:18:85:d9:53:1e:95:9a:7e: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:53:D0:63:93:90:45:12:F2:76:5C:5B:50:28:72:AA:A0:BE:0D:31 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/61PQY5OQRRLydlxbUChyqqC-DTE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.156.0/22 Signature Algorithm: sha256WithRSAEncryption 20:d1:4f:81:96:e5:8a:6c:be:d6:c1:2f:ff:11:20:f4:09:88: 0e:f0:9c:d3:19:22:12:5a:24:ad:27:ad:bd:74:15:ba:a0:06: 9a:f4:cb:75:b0:b9:27:0a:27:a2:e1:2e:51:b3:1a:eb:b1:2c: 19:a1:9a:24:2d:7c:ac:f4:dd:66:4b:5c:8d:b6:92:0f:73:30: 9b:b7:95:9b:ed:4c:c6:44:59:29:00:5b:de:49:41:2c:4b:37: e3:fd:33:a4:ea:a9:39:0d:05:06:3d:cc:1a:a0:6d:39:86:20: c1:58:e8:19:4d:f4:3c:d4:8a:5e:79:34:db:11:b6:54:f5:28: 25:32:c9:f6:5a:99:8b:9a:05:a0:05:54:de:5a:56:c9:7b:21: f0:6f:9e:09:e1:f2:a3:77:c1:0c:b0:65:65:3e:ce:fc:16:7b: a7:c3:d0:e7:36:9f:ed:9b:12:6a:98:7c:23:1a:17:e1:30:d0: be:57:2f:dc:0b:f3:44:4c:19:88:1d:98:8a:d7:19:33:7b:3b: f7:7a:91:d9:f6:94:c8:63:b4:2f:c8:4c:70:23:3c:20:bb:37: 4c:93:97:96:17:d7:1e:8f:cd:51:83:90:ce:7c:8a:b0:38:1a: 1f:7b:ca:9e:26:7f:23:88:6a:4e:d4:2a:a2:97:53:29:20:43: ed:1d:4c:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCNTNEMDYzOTM5MDQ1 MTJGMjc2NUM1QjUwMjg3MkFBQTBCRTBEMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFI32qeXcHzJDw2LCdgKQlv9dyzCfWOZqyKTU6jyvetjuvnjxj HHQqo2NbsysmL6mAlfg95y8JAEYimGJmNhYc0NsIEjz9jVFnejQ69RF+48riF+H/ ptIEPWuisqsIVfMT4cgEJ9TYHjmXUD0/QnBJa6Jjz3w05h+OCOHUPvYGNhnL3kIB pOP/yIeYS7ngHRUIKDJWrEfjmyEKJXgAy4p14fn0NnHERW5vQGjNawLdAO7lqOil kw9a289BzF15gLebZPxDr2G0/6TqvBcsIkythX8hFS020s2X1cTAYZ/boe8yPsSj S44eo7HCozJ1lUKXB363uRAYhdlTHpWafr0JAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU61PQY5OQRRLydlxbUChyqqC+DTEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzYxUFFZNU9RUlJMeWRseGJV Q2h5cXFDLURURS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpwwDQYJKoZIhvcNAQELBQADggEBACDRT4GW5YpsvtbBL/8RIPQJiA7wnNMZIhJa JK0nrb10FbqgBpr0y3WwuScKJ6LhLlGzGuuxLBmhmiQtfKz03WZLXI22kg9zMJu3 lZvtTMZEWSkAW95JQSxLN+P9M6TqqTkNBQY9zBqgbTmGIMFY6BlN9DzUil55NNsR tlT1KCUyyfZamYuaBaAFVN5aVsl7IfBvngnh8qN3wQywZWU+zvwWe6fD0Oc2n+2b EmqYfCMaF+Ew0L5XL9wL80RMGYgdmIrXGTN7O/d6kdn2lMhjtC/ITHAjPCC7N0yT l5YX1x6PzVGDkM58irA4Gh97yp4mfyOIak7UKqKXUykgQ+0dTCA= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:29 2024 by rpki-client on console-fra.rpki-client.org