$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qKo76kRopxTo3SPiCpXXtwUNrU.roa File: 7qKo76kRopxTo3SPiCpXXtwUNrU.roa (raw, json) Hash identifier: ozrkytyjk2GhyarGZSdvvNHnfiPXvloJ1zE1bI8s72E= Subject key identifier: EE:A2:A8:EF:A9:11:A2:9C:53:A3:74:8F:88:2A:57:5E:DC:14:36:B5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AD5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qKo76kRopxTo3SPiCpXXtwUNrU.roa Signing time: Fri 01 Sep 2023 10:08:19 +0000 ROA not before: Fri 01 Sep 2023 10:08:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.193.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10965 (0x2ad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EEA2A8EFA911A29C53A3748F882A575EDC1436B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:62:e9:22:aa:c0:8e:f8:8b:19:44:d3:c1: a6:1e:47:6b:f4:c4:c7:e1:07:9a:be:47:7e:d4:0d: b4:66:e8:2e:70:e2:1c:f4:58:c4:e8:c6:5e:30:85: 98:2b:47:ab:62:14:85:fe:5d:d3:2a:b0:e4:4d:38: 79:89:1f:7f:a2:df:1f:6f:b7:c7:fb:88:4a:2b:72: 70:42:63:94:6d:aa:05:20:5e:55:6b:b3:29:c8:ca: 41:df:2a:01:2a:f8:cd:6b:56:70:f3:d6:76:b1:59: 05:40:3e:2a:79:1c:9f:42:2c:48:9b:87:ad:e0:cb: 90:ee:0d:47:65:e6:d3:c5:19:66:d0:89:b2:60:0c: 0e:11:8d:17:1b:ea:2e:6a:7d:42:8d:a1:c7:50:53: 49:d3:c8:78:a2:f1:2a:a2:02:49:f9:ab:23:60:c0: 10:1e:ca:7e:de:43:9f:54:f0:23:82:f1:1e:8f:7b: 01:92:73:5a:ec:42:e8:1a:32:14:35:ef:72:16:04: db:67:5c:28:04:e2:c7:75:fc:4a:94:21:51:84:ce: aa:77:ed:dc:57:0c:41:e7:4d:bd:f2:40:42:99:a0: 7a:3c:82:d0:98:92:aa:80:70:e4:a4:e1:d5:f8:3e: e7:88:66:27:d9:de:f6:71:51:2c:d9:f7:5d:60:22: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:A8:EF:A9:11:A2:9C:53:A3:74:8F:88:2A:57:5E:DC:14:36:B5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qKo76kRopxTo3SPiCpXXtwUNrU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.218.0/23 Signature Algorithm: sha256WithRSAEncryption bb:2b:aa:62:51:ae:a9:22:70:53:0d:e4:0c:57:e6:e0:e7:18: 37:65:84:b5:d5:c9:dd:58:ea:63:8d:9b:1f:fa:18:eb:ee:45: 7d:c1:d5:24:82:03:ee:ab:11:05:96:83:41:0f:1d:fc:0c:b0: 7f:72:b7:ba:39:89:33:ec:2d:b3:90:52:3e:1f:fd:95:1e:d0: fd:bd:52:a1:53:2e:74:c9:78:c7:e1:69:bd:38:c7:7d:fc:0c: 25:06:cc:9c:3d:bb:60:ef:a5:82:16:36:59:01:d7:bd:be:62: 3a:f3:c0:3c:a6:8d:e6:da:4e:76:ac:b5:8c:90:a1:04:b6:1f: ae:63:49:41:f0:cf:02:a8:b6:b5:18:98:09:42:e6:f2:e7:c0: 86:70:b9:7d:6c:c5:22:50:3a:97:5d:9b:99:16:c4:ef:a8:77: 2b:9b:9c:99:09:9c:8e:62:89:52:22:24:3b:d4:38:79:58:2b: be:ef:39:93:2a:1d:a0:81:89:85:fc:98:1d:0d:1a:28:1e:5f: db:03:2a:58:b9:4c:e8:ab:a6:cf:4d:d0:79:87:6c:32:c5:d4: 2c:dd:90:5b:68:7b:a7:2b:4f:01:fe:65:a0:4e:44:bb:17:fc: 19:1a:05:e2:2d:03:00:a0:3b:49:98:8e:95:50:fc:e2:3a:6b: 97:76:3c:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVFQTJBOEVGQTkxMUEy OUM1M0EzNzQ4Rjg4MkE1NzVFREMxNDM2QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe42LpIqrAjviLGUTTwaYeR2v0xMfhB5q+R37UDbRm6C5w4hz0 WMToxl4whZgrR6tiFIX+XdMqsORNOHmJH3+i3x9vt8f7iEorcnBCY5RtqgUgXlVr synIykHfKgEq+M1rVnDz1naxWQVAPip5HJ9CLEibh63gy5DuDUdl5tPFGWbQibJg DA4RjRcb6i5qfUKNocdQU0nTyHii8SqiAkn5qyNgwBAeyn7eQ59U8COC8R6PewGS c1rsQugaMhQ173IWBNtnXCgE4sd1/EqUIVGEzqp37dxXDEHnTb3yQEKZoHo8gtCY kqqAcOSk4dX4PueIZifZ3vZxUSzZ911gInaLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7qKo76kRopxTo3SPiCpXXtwUNrUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdxS283NmtSb3B4VG8zU1Bp Q3BYWHR3VU5yVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wdowDQYJKoZIhvcNAQELBQADggEBALsrqmJRrqkicFMN5AxX5uDnGDdlhLXVyd1Y 6mONmx/6GOvuRX3B1SSCA+6rEQWWg0EPHfwMsH9yt7o5iTPsLbOQUj4f/ZUe0P29 UqFTLnTJeMfhab04x338DCUGzJw9u2DvpYIWNlkB172+YjrzwDymjebaTnastYyQ oQS2H65jSUHwzwKotrUYmAlC5vLnwIZwuX1sxSJQOpddm5kWxO+odyubnJkJnI5i iVIiJDvUOHlYK77vOZMqHaCBiYX8mB0NGigeX9sDKli5TOirps9N0HmHbDLF1Czd kFtoe6crTwH+ZaBORLsX/BkaBeItAwCgO0mYjpVQ/OI6a5d2PKA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org