$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAPoWIkS_vJnTc-6HjyTYtqEafg.roa File: AAPoWIkS_vJnTc-6HjyTYtqEafg.roa (raw, json) Hash identifier: eukK5Ud0qGzhwU5p0Vm4ZNL5CbiXq5cDRNNtV3uoyJE= Subject key identifier: 00:03:E8:58:89:12:FE:F2:67:4D:CF:BA:1E:3C:93:62:DA:84:69:F8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 294A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAPoWIkS_vJnTc-6HjyTYtqEafg.roa Signing time: Fri 01 Sep 2023 10:06:21 +0000 ROA not before: Fri 01 Sep 2023 10:06:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10570 (0x294a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0003E8588912FEF2674DCFBA1E3C9362DA8469F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:ca:69:e9:88:a3:97:3b:f3:35:7d:f3:48: cc:28:78:5b:6e:24:14:2f:a7:31:23:ce:4b:0b:b1: 02:da:2f:7f:7e:70:c2:dd:ce:4e:47:2d:6c:c5:d1: a5:3b:13:d9:72:d4:50:97:f4:ba:2e:8b:22:f5:5c: 1c:49:61:04:85:3f:88:31:ee:df:3c:e3:4c:15:17: ce:e3:d2:16:ef:fd:71:73:04:3c:f5:15:d1:7c:4d: 65:9d:cb:1b:cb:ed:13:94:9f:ec:6b:61:28:73:c1: 73:9f:d5:07:c5:1b:85:80:38:27:df:8d:50:54:1e: 8a:e8:6c:d6:b4:83:ec:f4:54:26:aa:15:ef:55:ce: 04:6d:4f:a0:9b:5a:1b:90:91:ac:6d:60:3d:ae:06: db:11:a0:5f:11:22:72:a4:96:13:a2:25:c1:e7:15: 47:a0:c4:72:ff:bc:88:5e:6e:7f:b2:84:c5:4c:2d: 2b:f3:71:2f:48:9f:70:45:f3:89:7b:c7:ae:f6:79: d5:a3:ef:07:70:d1:33:e2:f8:8c:6e:21:f4:1c:39: f0:11:3c:d0:b8:b1:79:21:9c:cf:1c:dd:43:38:b6: d1:8f:f5:b1:b3:bd:9c:b8:78:56:61:e4:9d:34:93: ec:f0:ea:15:88:42:d2:89:77:8d:9f:67:a2:5a:c5: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:03:E8:58:89:12:FE:F2:67:4D:CF:BA:1E:3C:93:62:DA:84:69:F8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AAPoWIkS_vJnTc-6HjyTYtqEafg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:f9:bc:77:80:c2:d2:14:38:f0:86:52:1a:54:d8:e9:83:da: 33:d7:7b:9f:a6:2c:1c:d0:bd:f5:5a:62:54:24:2a:44:03:0a: 1e:7f:16:f5:e9:06:ac:4e:73:0d:77:16:10:cf:4d:4a:97:57: 88:bc:20:89:37:1d:0e:85:c9:ea:af:92:a2:0c:22:28:d7:88: 60:d1:5a:57:3b:a0:45:84:12:8b:5c:ae:bc:d6:da:d4:88:ce: 46:60:93:ab:5c:83:33:97:75:d0:0d:c9:d6:0c:09:9c:97:c1: e7:72:bc:e1:f4:b5:42:d0:65:11:91:b5:73:f3:00:30:db:fb: 41:72:57:1a:6c:bd:fa:62:1e:41:7f:d3:6b:bb:2f:ed:31:88: 5b:d2:b1:ac:6f:3c:49:1d:e4:7f:db:81:07:d5:d0:ac:ae:5a: 7a:dc:0a:36:e6:2b:6f:87:4b:7c:e6:24:b0:d3:73:67:9f:76: 40:9c:a0:a0:c1:aa:62:19:18:21:36:52:18:b3:c9:70:f1:7c: 7a:15:02:36:96:7e:94:fb:bc:5d:0a:83:fa:bf:17:ce:b4:37: 79:d7:36:98:9f:db:68:5d:27:ec:14:a7:bc:2b:ff:b2:49:68: 40:75:c4:1d:10:bc:cc:08:cb:7c:93:f1:4e:b3:bb:21:7f:5d: b7:bc:44:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwMDNFODU4ODkxMkZF RjI2NzREQ0ZCQTFFM0M5MzYyREE4NDY5RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLnspp6YijlzvzNX3zSMwoeFtuJBQvpzEjzksLsQLaL39+cMLd zk5HLWzF0aU7E9ly1FCX9LouiyL1XBxJYQSFP4gx7t8840wVF87j0hbv/XFzBDz1 FdF8TWWdyxvL7ROUn+xrYShzwXOf1QfFG4WAOCffjVBUHorobNa0g+z0VCaqFe9V zgRtT6CbWhuQkaxtYD2uBtsRoF8RInKklhOiJcHnFUegxHL/vIhebn+yhMVMLSvz cS9In3BF84l7x672edWj7wdw0TPi+IxuIfQcOfARPNC4sXkhnM8c3UM4ttGP9bGz vZy4eFZh5J00k+zw6hWIQtKJd42fZ6Jaxe8vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAAPoWIkS/vJnTc+6HjyTYtqEafgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FBUG9XSWtTX3ZKblRjLTZI anlUWXRxRWFmZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 woAwDQYJKoZIhvcNAQELBQADggEBAF/5vHeAwtIUOPCGUhpU2OmD2jPXe5+mLBzQ vfVaYlQkKkQDCh5/FvXpBqxOcw13FhDPTUqXV4i8IIk3HQ6FyeqvkqIMIijXiGDR Wlc7oEWEEotcrrzW2tSIzkZgk6tcgzOXddANydYMCZyXwedyvOH0tULQZRGRtXPz ADDb+0FyVxpsvfpiHkF/02u7L+0xiFvSsaxvPEkd5H/bgQfV0KyuWnrcCjbmK2+H S3zmJLDTc2efdkCcoKDBqmIZGCE2UhizyXDxfHoVAjaWfpT7vF0Kg/q/F860N3nX Npif22hdJ+wUp7wr/7JJaEB1xB0QvMwIy3yT8U6zuyF/Xbe8RLM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org