$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7-zM1c4lg-zsWxonaLs5PmBs54Y.roa File: 7-zM1c4lg-zsWxonaLs5PmBs54Y.roa (raw, json) Hash identifier: uaG8rZ40W/d9fg18UCgHedl4T3Tv8awIKTTNmKbMmU8= Subject key identifier: EF:EC:CC:D5:CE:25:83:EC:EC:5B:1A:27:68:BB:39:3E:60:6C:E7:86 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2883 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7-zM1c4lg-zsWxonaLs5PmBs54Y.roa Signing time: Fri 01 Sep 2023 10:05:25 +0000 ROA not before: Fri 01 Sep 2023 10:05:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10371 (0x2883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:25 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EFECCCD5CE2583ECEC5B1A2768BB393E606CE786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:68:f8:a5:90:01:b0:73:da:64:aa:fb:04: af:3c:f1:8d:a2:a4:b6:fc:24:da:45:e5:c1:6e:d1: c4:05:4c:73:9e:c6:4a:7f:8e:47:64:e0:2e:1b:98: 17:bd:1b:f8:72:f8:bd:80:4e:30:a0:a6:82:b2:0a: 24:e5:f4:96:87:11:6e:33:0d:91:9e:83:f7:42:f8: 94:97:d6:8c:ca:6f:29:7d:57:ca:52:2b:83:ae:15: fe:4a:69:88:c6:62:26:dc:b5:d7:b0:cc:f3:ad:20: 63:cd:f2:e7:eb:c7:cc:2e:38:b7:fc:db:39:68:72: cb:d8:7c:cb:6e:de:e1:cc:cf:e4:a7:49:4a:73:bd: 82:27:61:39:0b:10:5d:45:aa:97:c7:a3:21:8b:3d: ff:d4:f9:95:5b:b6:c5:2c:05:4a:53:55:b2:42:4c: c2:99:96:3f:1c:21:09:2a:32:bc:da:a2:01:6c:01: 73:f6:91:aa:53:c0:24:28:55:38:10:8e:7d:cf:d4: 63:38:5c:50:6f:2c:d0:fd:d9:39:fd:21:c4:a6:c6: 6d:03:c4:6d:be:a9:00:7d:98:d0:4d:23:c8:9f:0b: ea:f9:39:7a:45:84:23:d3:bf:25:6e:ad:ac:9f:dc: 2c:fe:95:47:ed:a5:ab:7a:b8:ce:cf:45:ab:89:81: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EC:CC:D5:CE:25:83:EC:EC:5B:1A:27:68:BB:39:3E:60:6C:E7:86 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7-zM1c4lg-zsWxonaLs5PmBs54Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.88.0/22 Signature Algorithm: sha256WithRSAEncryption 22:9f:7f:27:aa:2e:d0:c0:7f:36:01:eb:e2:20:e3:ad:2f:01: 44:96:60:d6:45:77:c7:ed:0a:6b:f1:f6:f2:6d:8a:b1:03:38: 91:a0:13:08:2b:6d:37:c8:f6:66:ca:d4:49:a7:13:5e:57:4e: 1f:3b:8c:5c:b8:19:ee:24:6e:76:ca:34:07:fd:42:de:71:63: 61:d1:39:a3:42:e0:5c:87:35:a5:9f:4d:cf:e4:ad:4f:4c:27: d2:84:52:5d:d9:85:8d:95:95:fb:c2:51:88:ef:3f:98:49:2a: 7c:99:d1:33:8b:3c:6e:0d:7b:b6:bc:4e:af:23:29:b6:83:de: 48:77:ce:96:47:6c:79:91:01:97:88:b0:14:58:36:40:00:35: 2e:6e:b2:e4:fd:37:ff:ca:b8:ce:c5:66:ea:f9:9d:8b:71:44: b2:f3:06:2b:15:6b:2a:8e:16:97:8c:97:d4:2c:aa:74:6f:c2: 01:1b:0e:06:f4:28:50:8a:46:19:2c:f0:a4:e5:6e:0e:33:9e: 46:74:07:92:b2:e0:9c:9b:d5:90:c2:61:29:f8:f9:fc:97:6a: 40:43:b6:2b:ea:12:94:b5:a8:d7:5d:c2:9f:f9:9e:f8:d9:9d: 3a:a1:76:d4:f6:27:89:89:8a:11:dd:42:c1:c7:4a:6e:91:f8: 5e:19:70:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVGRUNDQ0Q1Q0UyNTgz RUNFQzVCMUEyNzY4QkIzOTNFNjA2Q0U3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6T2j4pZABsHPaZKr7BK888Y2ipLb8JNpF5cFu0cQFTHOexkp/ jkdk4C4bmBe9G/hy+L2ATjCgpoKyCiTl9JaHEW4zDZGeg/dC+JSX1ozKbyl9V8pS K4OuFf5KaYjGYibctdewzPOtIGPN8ufrx8wuOLf82zlocsvYfMtu3uHMz+SnSUpz vYInYTkLEF1FqpfHoyGLPf/U+ZVbtsUsBUpTVbJCTMKZlj8cIQkqMrzaogFsAXP2 kapTwCQoVTgQjn3P1GM4XFBvLND92Tn9IcSmxm0DxG2+qQB9mNBNI8ifC+r5OXpF hCPTvyVurayf3Cz+lUftpat6uM7PRauJgZ6nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7+zM1c4lg+zsWxonaLs5PmBs54YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzctek0xYzRsZy16c1d4b25h THM1UG1CczU0WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wVgwDQYJKoZIhvcNAQELBQADggEBACKffyeqLtDAfzYB6+Ig460vAUSWYNZFd8ft Cmvx9vJtirEDOJGgEwgrbTfI9mbK1EmnE15XTh87jFy4Ge4kbnbKNAf9Qt5xY2HR OaNC4FyHNaWfTc/krU9MJ9KEUl3ZhY2VlfvCUYjvP5hJKnyZ0TOLPG4Ne7a8Tq8j KbaD3kh3zpZHbHmRAZeIsBRYNkAANS5usuT9N//KuM7FZur5nYtxRLLzBisVayqO FpeMl9QsqnRvwgEbDgb0KFCKRhks8KTlbg4znkZ0B5Ky4Jyb1ZDCYSn4+fyXakBD tivqEpS1qNddwp/5nvjZnTqhdtT2J4mJihHdQsHHSm6R+F4ZcMU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org