$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6cDoRekdlO0Fq_XEiZ0xofnOK2E.roa File: 6cDoRekdlO0Fq_XEiZ0xofnOK2E.roa (raw, json) Hash identifier: Cbu+GTJjT2ltjWhXd36p17Dz0q/zJYfqu/r6P+oRxg4= Subject key identifier: E9:C0:E8:45:E9:1D:94:ED:05:AB:F5:C4:89:9D:31:A1:F9:CE:2B:61 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2867 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6cDoRekdlO0Fq_XEiZ0xofnOK2E.roa Signing time: Fri 01 Sep 2023 10:05:18 +0000 ROA not before: Fri 01 Sep 2023 10:05:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.193.160.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10343 (0x2867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E9C0E845E91D94ED05ABF5C4899D31A1F9CE2B61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:eb:cd:32:3d:97:fc:52:5f:47:ef:7f:bb: f5:df:12:9c:0c:5a:e2:80:1f:9d:38:15:5a:67:cd: a7:41:e2:3e:ab:b2:62:5e:06:08:4f:31:91:c6:fa: a5:0b:7a:e2:43:d4:28:3f:12:c1:78:ce:9d:d4:18: 42:9b:8a:53:f0:68:3a:10:6d:4e:d8:8d:36:38:13: 95:e1:1e:6e:1f:03:8a:04:9a:a3:c0:eb:7c:18:23: 59:fa:4f:ad:27:64:9f:0f:c7:c3:80:20:e1:cd:75: 23:b1:b8:17:f4:1f:a8:c8:4f:4d:65:19:2d:17:92: f5:7b:62:a4:12:3e:57:73:73:12:ae:36:50:d5:a5: 2b:37:8d:d4:e1:41:af:91:c2:7d:ab:05:4c:3d:71: 84:d2:70:99:ff:45:43:e4:5c:be:44:15:9e:10:b7: 32:ea:d7:9f:3e:6a:37:e5:57:2d:d1:a1:56:2e:e7: 12:49:fb:e2:0c:cc:e6:67:0f:61:a0:93:de:f7:9c: b3:0e:9c:0d:26:9a:7d:c4:0b:bb:40:d5:39:82:e4: 74:f1:bd:57:2d:f2:33:bb:90:49:ca:c2:7f:eb:9c: c7:85:4f:b3:2e:71:c5:0a:69:2d:42:37:bd:d0:9b: 69:d0:a2:75:b8:82:0f:23:cb:d2:d9:e5:ae:fc:ca: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:E8:45:E9:1D:94:ED:05:AB:F5:C4:89:9D:31:A1:F9:CE:2B:61 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6cDoRekdlO0Fq_XEiZ0xofnOK2E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.160.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:d6:15:ef:7b:69:39:19:3a:9a:aa:52:18:c2:a4:fe:f7:99: dd:40:e2:32:91:79:66:2d:5b:00:52:5e:7b:2e:24:18:68:1d: 0c:50:7e:a5:92:2f:00:c6:c8:93:87:60:a9:81:a4:2d:45:21: dc:de:f3:d9:f7:7f:88:28:08:04:07:fb:b8:95:92:40:87:3f: 7a:24:4a:0d:32:f5:b2:c2:eb:51:d9:cc:43:eb:54:e3:4e:08: 81:f7:9e:4b:8d:6b:7d:38:81:60:8d:9c:67:7f:26:85:a3:09: 37:44:33:ea:63:56:fb:88:5b:ee:c9:93:ae:ca:f5:d4:55:a8: bc:d2:1a:4e:13:70:39:4f:bb:97:8d:59:d0:9c:9c:41:b2:0f: 9d:2f:ca:de:05:93:82:f0:67:0f:3f:fa:f4:b2:49:8f:70:4d: 40:84:eb:47:46:4b:fc:cf:d5:dd:15:3b:e2:60:6c:4e:83:4b: ee:87:00:a6:aa:b9:04:f6:73:b8:48:3d:4b:24:73:c2:3e:a8: c8:07:95:d0:f3:07:5d:bd:59:2f:72:81:64:f5:1c:dc:25:d6: d6:9b:b3:83:0d:5f:8c:8f:ff:5b:38:39:78:57:39:60:fd:3f: 1f:0c:c8:96:42:96:56:0f:77:42:55:fe:23:48:90:0d:81:ec: 7d:fe:ad:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU5QzBFODQ1RTkxRDk0 RUQwNUFCRjVDNDg5OUQzMUExRjlDRTJCNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC99uvNMj2X/FJfR+9/u/XfEpwMWuKAH504FVpnzadB4j6rsmJe BghPMZHG+qULeuJD1Cg/EsF4zp3UGEKbilPwaDoQbU7YjTY4E5XhHm4fA4oEmqPA 63wYI1n6T60nZJ8Px8OAIOHNdSOxuBf0H6jIT01lGS0XkvV7YqQSPldzcxKuNlDV pSs3jdThQa+Rwn2rBUw9cYTScJn/RUPkXL5EFZ4QtzLq158+ajflVy3RoVYu5xJJ ++IMzOZnD2Ggk973nLMOnA0mmn3EC7tA1TmC5HTxvVct8jO7kEnKwn/rnMeFT7Mu ccUKaS1CN73Qm2nQonW4gg8jy9LZ5a78yhtVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6cDoRekdlO0Fq/XEiZ0xofnOK2EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZjRG9SZWtkbE8wRnFfWEVp WjB4b2ZuT0syRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 waAwDQYJKoZIhvcNAQELBQADggEBAJ/WFe97aTkZOpqqUhjCpP73md1A4jKReWYt WwBSXnsuJBhoHQxQfqWSLwDGyJOHYKmBpC1FIdze89n3f4goCAQH+7iVkkCHP3ok Sg0y9bLC61HZzEPrVONOCIH3nkuNa304gWCNnGd/JoWjCTdEM+pjVvuIW+7Jk67K 9dRVqLzSGk4TcDlPu5eNWdCcnEGyD50vyt4Fk4LwZw8/+vSySY9wTUCE60dGS/zP 1d0VO+JgbE6DS+6HAKaquQT2c7hIPUskc8I+qMgHldDzB129WS9ygWT1HNwl1tab s4MNX4yP/1s4OXhXOWD9Px8MyJZCllYPd0JV/iNIkA2B7H3+rew= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org