$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/67p2jU8cX1kd1G5AfOx2q14oB58.roa File: 67p2jU8cX1kd1G5AfOx2q14oB58.roa (raw, json) Hash identifier: QA+VI5c8hRucMKTvv3od2wh/aDNFlQRXWhL/6wzyftA= Subject key identifier: EB:BA:76:8D:4F:1C:5F:59:1D:D4:6E:40:7C:EC:76:AB:5E:28:07:9F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 288D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/67p2jU8cX1kd1G5AfOx2q14oB58.roa Signing time: Fri 01 Sep 2023 10:05:29 +0000 ROA not before: Fri 01 Sep 2023 10:05:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10381 (0x288d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EBBA768D4F1C5F591DD46E407CEC76AB5E28079F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:4b:8c:76:22:b3:d6:4b:4c:36:85:e3:82: 1d:f9:6b:7a:97:2b:9e:9c:c1:d4:4f:b7:60:f3:e4: 51:35:1a:97:35:0d:91:f3:a2:3e:28:d4:28:7d:ba: 3f:ea:d3:c0:cf:aa:95:66:06:cc:47:f8:a0:7e:0b: 49:0f:b7:fc:1e:9c:6c:c2:30:30:8f:ea:2b:14:cc: 98:a5:6d:3a:67:aa:37:cf:0b:64:45:1c:ae:b8:e1: 2d:1d:2b:77:c7:ae:25:ca:ec:19:eb:a1:fd:ca:f3: 6b:17:37:f8:e3:5b:e6:27:4b:fa:47:d6:02:7c:d9: c0:10:b9:c9:67:ed:68:21:9b:b4:d3:2c:f9:23:71: 0a:cd:c0:a0:46:00:4a:0d:27:68:ba:6c:7d:c5:8a: 6f:fb:ac:bb:af:77:50:e6:70:e6:a5:66:69:ef:22: b7:e9:b6:90:c6:45:8c:fc:82:13:04:86:2d:9a:b3: 7e:6a:92:26:69:9b:b2:bb:ef:f9:41:e4:3d:fe:ab: ba:53:0a:03:28:09:89:53:6d:ec:ab:2b:d3:fc:92: 18:53:38:25:ec:5a:f4:89:96:23:a9:5f:0b:c2:aa: d2:f8:f6:87:34:e6:15:e4:11:72:3c:2c:bd:93:7a: 8a:77:05:5f:10:95:bf:cf:f1:07:a2:2e:18:3f:50: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BA:76:8D:4F:1C:5F:59:1D:D4:6E:40:7C:EC:76:AB:5E:28:07:9F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/67p2jU8cX1kd1G5AfOx2q14oB58.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.136.0/21 Signature Algorithm: sha256WithRSAEncryption a4:44:3e:ab:24:6a:b7:b3:e2:3d:90:00:cb:c0:3b:d5:3a:2c: a3:a1:c0:28:af:6b:46:63:ac:9b:2e:c3:d8:7d:66:91:29:56: 71:01:a9:32:31:40:a8:fd:1d:42:00:e7:c0:08:8d:b2:00:1e: e2:1a:f5:c5:0e:62:8c:27:66:7d:4e:3d:03:be:87:fa:ed:17: 44:c2:82:21:77:52:cd:e4:24:02:7c:19:68:06:dc:c4:f9:8b: 93:65:cd:80:09:69:8a:9a:9c:e6:06:4e:80:ee:80:db:91:b9: 27:a3:f2:b9:3d:92:ce:00:d2:03:3e:6f:2b:c9:ef:e7:71:39: ca:10:55:2f:3e:10:d0:cc:e8:80:91:cf:a0:a5:0f:46:44:e0: 3a:b0:40:29:17:1e:ce:4a:01:57:38:26:70:17:89:e1:7e:b1: 38:65:a6:3d:5e:b3:c5:2c:60:9e:b2:51:6e:ba:f7:36:07:20: 04:34:0c:ee:e8:4c:c1:40:e5:40:44:29:56:94:25:db:0a:ef: 6d:97:f4:e8:2a:20:8e:40:43:41:ea:05:2b:a5:60:4e:b8:51: e8:03:cd:b1:60:e2:51:bf:be:e6:b6:91:03:4d:53:16:3c:e5: 59:17:2a:e1:0c:08:be:72:04:2a:64:db:e2:a5:a1:95:60:20: 93:5d:56:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCQkE3NjhENEYxQzVG NTkxREQ0NkU0MDdDRUM3NkFCNUUyODA3OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCocEuMdiKz1ktMNoXjgh35a3qXK56cwdRPt2Dz5FE1Gpc1DZHz oj4o1Ch9uj/q08DPqpVmBsxH+KB+C0kPt/wenGzCMDCP6isUzJilbTpnqjfPC2RF HK644S0dK3fHriXK7Bnrof3K82sXN/jjW+YnS/pH1gJ82cAQucln7Wghm7TTLPkj cQrNwKBGAEoNJ2i6bH3Fim/7rLuvd1DmcOalZmnvIrfptpDGRYz8ghMEhi2as35q kiZpm7K77/lB5D3+q7pTCgMoCYlTbeyrK9P8khhTOCXsWvSJliOpXwvCqtL49oc0 5hXkEXI8LL2Teop3BV8Qlb/P8QeiLhg/UNbTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU67p2jU8cX1kd1G5AfOx2q14oB58wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzY3cDJqVThjWDFrZDFHNUFm T3gycTE0b0I1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w4gwDQYJKoZIhvcNAQELBQADggEBAKREPqskarez4j2QAMvAO9U6LKOhwCiva0Zj rJsuw9h9ZpEpVnEBqTIxQKj9HUIA58AIjbIAHuIa9cUOYownZn1OPQO+h/rtF0TC giF3Us3kJAJ8GWgG3MT5i5NlzYAJaYqanOYGToDugNuRuSej8rk9ks4A0gM+byvJ 7+dxOcoQVS8+ENDM6ICRz6ClD0ZE4DqwQCkXHs5KAVc4JnAXieF+sThlpj1es8Us YJ6yUW669zYHIAQ0DO7oTMFA5UBEKVaUJdsK722X9OgqII5AQ0HqBSulYE64UegD zbFg4lG/vua2kQNNUxY85VkXKuEMCL5yBCpk2+KloZVgIJNdVk4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org