$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6pYANZiFunuMuwOHH5A3bmdik60.roa File: 6pYANZiFunuMuwOHH5A3bmdik60.roa (raw, json) Hash identifier: GBMmiP1R7KLpZ83CVfbrDt3GOmtZFrTU08VUiVywkqM= Subject key identifier: EA:96:00:35:98:85:BA:7B:8C:BB:03:87:1F:90:37:6E:67:62:93:AD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28F2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6pYANZiFunuMuwOHH5A3bmdik60.roa Signing time: Fri 01 Sep 2023 10:05:57 +0000 ROA not before: Fri 01 Sep 2023 10:05:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.205.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10482 (0x28f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EA9600359885BA7B8CBB03871F90376E676293AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:65:81:26:ca:88:64:71:49:05:1b:30:88: 82:9e:af:b9:67:b2:09:16:c0:94:88:0a:94:53:83: da:1c:d6:36:30:08:ba:49:bb:35:f3:bd:1a:f6:5b: c7:79:39:ce:5e:28:4a:41:f0:28:de:6d:65:f3:63: 3d:ee:69:50:ae:7e:d1:2f:84:0a:8b:51:56:ea:4b: 60:ff:d5:da:c3:45:fa:b4:95:3e:b7:25:92:af:6f: c3:00:ad:41:0d:d5:79:db:9d:1b:63:82:bf:a9:e0: 6e:22:c3:76:58:62:72:29:06:35:60:ca:79:75:bc: cf:0a:ca:7a:63:6a:cb:27:1c:4f:6c:56:c3:ad:79: 1b:b4:a2:ff:2d:97:e8:68:d4:b7:6a:15:c3:dd:08: 81:08:f6:ec:28:9b:a6:83:a7:25:69:77:f9:e6:0e: 28:99:a9:4f:c2:cc:6c:ab:d6:af:61:fa:9f:2e:ed: cd:f0:e3:e9:3e:20:a2:bf:e3:02:9d:f8:2f:c4:00: 68:43:a0:49:87:c2:ff:2e:43:d5:22:5f:c8:ab:6a: b8:7e:99:44:fc:a5:db:bb:0b:41:1e:ca:c8:df:3d: 75:b0:b4:6d:6f:94:29:71:e1:98:70:b7:83:df:43: cc:60:f3:c7:21:2a:93:b4:dd:85:6d:15:5e:0a:61: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:96:00:35:98:85:BA:7B:8C:BB:03:87:1F:90:37:6E:67:62:93:AD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6pYANZiFunuMuwOHH5A3bmdik60.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.205.128/28 Signature Algorithm: sha256WithRSAEncryption 2a:c6:f1:37:f4:13:81:42:1c:41:d7:b0:76:5d:3e:1b:44:41: 73:c1:56:02:c0:29:3b:b1:51:a6:36:f5:c9:ae:8d:de:d6:2e: ba:c0:06:68:98:1e:9b:31:12:a5:d2:4c:e7:83:1f:d5:c6:c6: ae:c0:8b:b5:4e:a2:e0:61:fd:d2:39:d2:1d:b5:ed:9a:65:7c: 1a:f3:df:8a:75:be:6e:bf:13:54:b0:b6:6d:fc:8e:04:8c:52: 5f:c7:29:00:ff:c6:8d:1e:3e:e6:50:95:99:b2:60:9e:6d:73: 8b:76:b8:f8:6b:fc:98:f0:21:39:7e:e1:79:05:fb:f3:3c:aa: 98:ff:a8:82:12:ad:85:14:c3:ec:fa:91:98:67:b4:b8:f0:2e: ac:7b:e3:44:ca:04:43:4b:5c:2c:c0:c2:0c:fc:c4:8b:a2:59: c4:0f:39:91:35:d9:0c:71:46:b6:a5:be:00:75:61:5a:0d:6b: 7d:7f:2e:00:62:69:c1:9e:d7:2a:35:39:3e:dc:88:e9:cd:ee: 2f:a4:fe:31:26:0a:a2:fa:ee:fb:b1:40:0f:cb:69:4e:b5:9d: dc:8d:f2:e0:59:1e:07:fb:8b:c2:94:90:3b:f3:01:ae:fa:9b: 99:d5:48:5e:2e:a1:0b:8f:b0:59:c4:01:0d:bd:33:23:67:f5: 56:bc:46:1c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVBOTYwMDM1OTg4NUJB N0I4Q0JCMDM4NzFGOTAzNzZFNjc2MjkzQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzlmWBJsqIZHFJBRswiIKer7lnsgkWwJSICpRTg9oc1jYwCLpJ uzXzvRr2W8d5Oc5eKEpB8CjebWXzYz3uaVCuftEvhAqLUVbqS2D/1drDRfq0lT63 JZKvb8MArUEN1XnbnRtjgr+p4G4iw3ZYYnIpBjVgynl1vM8KynpjassnHE9sVsOt eRu0ov8tl+ho1LdqFcPdCIEI9uwom6aDpyVpd/nmDiiZqU/CzGyr1q9h+p8u7c3w 4+k+IKK/4wKd+C/EAGhDoEmHwv8uQ9UiX8irarh+mUT8pdu7C0EeysjfPXWwtG1v lClx4Zhwt4PfQ8xg88chKpO03YVtFV4KYajpAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU6pYANZiFunuMuwOHH5A3bmdik60wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZwWUFOWmlGdW51TXV3T0hI NUEzYm1kaWs2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7 ws2AMA0GCSqGSIb3DQEBCwUAA4IBAQAqxvE39BOBQhxB17B2XT4bREFzwVYCwCk7 sVGmNvXJro3e1i66wAZomB6bMRKl0kzngx/VxsauwIu1TqLgYf3SOdIdte2aZXwa 89+Kdb5uvxNUsLZt/I4EjFJfxykA/8aNHj7mUJWZsmCebXOLdrj4a/yY8CE5fuF5 BfvzPKqY/6iCEq2FFMPs+pGYZ7S48C6se+NEygRDS1wswMIM/MSLolnEDzmRNdkM cUa2pb4AdWFaDWt9fy4AYmnBntcqNTk+3Ijpze4vpP4xJgqi+u77sUAPy2lOtZ3c jfLgWR4H+4vClJA78wGu+puZ1UheLqELj7BZxAENvTMjZ/VWvEYc -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org