$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9L0L58j9yP7Ay07IUvdJm39CpXM.roa File: 9L0L58j9yP7Ay07IUvdJm39CpXM.roa (raw, json) Hash identifier: u+th5/vB/0cEKpbqSoPbBTCQKptQi3tJcKJbNzCxIRk= Subject key identifier: F4:BD:0B:E7:C8:FD:C8:FE:C0:CB:4E:C8:52:F7:49:9B:7F:42:A5:73 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29B9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9L0L58j9yP7Ay07IUvdJm39CpXM.roa Signing time: Fri 01 Sep 2023 10:06:59 +0000 ROA not before: Fri 01 Sep 2023 10:06:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10681 (0x29b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F4BD0BE7C8FDC8FEC0CB4EC852F7499B7F42A573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:4f:d1:3b:34:8c:8f:ee:7f:a0:d6:de:8f: c6:cf:d5:83:b6:8a:d8:b1:32:4e:84:64:55:32:d3: e6:dd:78:5e:4e:cb:00:21:58:91:a6:c2:4d:f2:2b: 34:8b:3a:40:93:35:ed:5a:da:b2:79:d8:57:ca:20: 45:09:ca:9a:50:62:d8:42:0f:55:eb:ec:c3:82:75: ee:64:67:24:9f:69:3d:a1:a7:b6:86:dc:0b:eb:5a: ab:43:3a:18:92:1c:b2:ee:d4:08:e5:24:10:cb:a2: 80:df:a9:07:23:e0:b4:a9:67:d1:2c:22:44:32:c1: e0:29:80:11:97:7a:c6:c0:14:86:4c:f0:bb:b5:ae: a6:66:02:0e:e1:db:cc:b6:de:97:60:49:56:7a:02: a4:ad:bf:1e:09:9d:e1:a2:9c:fe:96:a0:10:f1:d1: 6f:a4:fe:f6:85:15:7c:e8:1e:cf:c3:97:3b:ec:4b: 05:20:9b:ee:4b:60:46:0d:b4:70:4e:63:2a:1e:a7: a7:05:cb:36:c4:12:ba:2a:bf:dc:f0:d3:83:b0:c6: d4:7b:b5:e3:e3:f7:ce:b2:48:a3:09:17:c8:ef:4b: 7f:d4:c9:1d:bc:bb:13:76:a1:13:7b:33:c1:92:4e: c6:c5:53:90:d7:92:c6:69:60:fd:e3:b4:88:80:95: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BD:0B:E7:C8:FD:C8:FE:C0:CB:4E:C8:52:F7:49:9B:7F:42:A5:73 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9L0L58j9yP7Ay07IUvdJm39CpXM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.232.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:e1:0a:9d:7e:26:c9:da:41:c0:28:8a:20:20:d3:a2:07:30: 9e:aa:d6:9f:cf:75:fe:45:54:5c:c3:72:b2:0c:c4:8d:61:c9: 1e:96:f4:11:00:f3:d5:37:39:cb:2c:d2:cd:ef:2d:3c:67:dc: 27:fc:e1:25:94:34:2b:05:9a:48:16:03:cd:7f:aa:ac:ae:17: 37:87:61:0a:ab:a4:73:1e:bd:6a:69:32:57:11:dc:d3:90:bf: 62:47:c7:5a:89:c6:d8:be:7c:05:9d:f4:ed:6b:58:22:57:94: 98:b7:1e:00:8f:65:29:c6:84:12:32:98:c9:41:be:83:20:1e: 35:3a:12:a6:cd:22:e8:13:01:2c:30:95:cf:6b:83:58:32:d2: 30:7d:ea:ec:5f:7f:a3:43:76:ae:10:87:5e:b2:c5:d3:3b:9d: 5c:d4:3d:2a:44:2b:53:57:a9:f7:be:e7:31:bb:22:0b:21:c9: e6:97:b4:15:2e:10:30:ad:99:65:2a:ef:55:9e:92:1d:ca:43: f1:1f:aa:95:aa:a4:b8:fa:33:57:ca:cc:b0:c7:2d:79:ee:e6: 6c:b1:aa:e2:a4:8a:fd:fb:86:c0:65:44:bb:4a:9f:91:bc:25: 51:8c:6a:a9:dc:5a:f8:c3:56:22:ec:63:d1:4a:93:40:2b:4d: da:b3:6e:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY0QkQwQkU3QzhGREM4 RkVDMENCNEVDODUyRjc0OTlCN0Y0MkE1NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUkk/ROzSMj+5/oNbej8bP1YO2itixMk6EZFUy0+bdeF5OywAh WJGmwk3yKzSLOkCTNe1a2rJ52FfKIEUJyppQYthCD1Xr7MOCde5kZySfaT2hp7aG 3AvrWqtDOhiSHLLu1AjlJBDLooDfqQcj4LSpZ9EsIkQyweApgBGXesbAFIZM8Lu1 rqZmAg7h28y23pdgSVZ6AqStvx4JneGinP6WoBDx0W+k/vaFFXzoHs/DlzvsSwUg m+5LYEYNtHBOYyoep6cFyzbEEroqv9zw04OwxtR7tePj986ySKMJF8jvS3/UyR28 uxN2oRN7M8GSTsbFU5DXksZpYP3jtIiAlYX3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9L0L58j9yP7Ay07IUvdJm39CpXMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlMMEw1OGo5eVA3QXkwN0lV dmRKbTM5Q3BYTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wegwDQYJKoZIhvcNAQELBQADggEBADzhCp1+JsnaQcAoiiAg06IHMJ6q1p/Pdf5F VFzDcrIMxI1hyR6W9BEA89U3Ocss0s3vLTxn3Cf84SWUNCsFmkgWA81/qqyuFzeH YQqrpHMevWppMlcR3NOQv2JHx1qJxti+fAWd9O1rWCJXlJi3HgCPZSnGhBIymMlB voMgHjU6EqbNIugTASwwlc9rg1gy0jB96uxff6NDdq4Qh16yxdM7nVzUPSpEK1NX qfe+5zG7IgshyeaXtBUuEDCtmWUq71Wekh3KQ/EfqpWqpLj6M1fKzLDHLXnu5myx quKkiv37hsBlRLtKn5G8JVGMaqncWvjDViLsY9FKk0ArTdqzbqA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org