$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BqxXtAbh82fFmtpfWVLgC-7F8rc.roa File: BqxXtAbh82fFmtpfWVLgC-7F8rc.roa (raw, json) Hash identifier: sAOfW/C3k7XYDxfp4VyRdsxvSY8GJ7iZPhUp1KoRUPc= Subject key identifier: 06:AC:57:B4:06:E1:F3:67:C5:9A:DA:5F:59:52:E0:0B:EE:C5:F2:B7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A82 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BqxXtAbh82fFmtpfWVLgC-7F8rc.roa Signing time: Fri 01 Sep 2023 10:07:59 +0000 ROA not before: Fri 01 Sep 2023 10:07:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10882 (0x2a82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=06AC57B406E1F367C59ADA5F5952E00BEEC5F2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:29:3e:54:3a:45:7a:3d:00:f9:a2:78:83: 26:1c:24:4f:5f:58:e5:77:02:71:8e:01:2b:eb:1f: e3:43:b9:f5:e0:17:29:f4:2e:af:7a:2a:c1:c6:2c: 9c:cf:f6:40:53:e2:49:ea:00:89:b8:23:23:8d:9a: 7e:00:56:04:8e:62:28:74:85:24:4c:8f:51:98:97: 03:b0:c5:17:25:ae:f7:99:8d:df:a6:64:a0:8f:62: fb:b0:6f:30:4d:fe:a1:5c:fb:6e:aa:28:96:35:50: 0f:bf:43:d7:e7:5c:a5:57:6e:c8:66:55:9c:2d:10: e2:39:cf:62:03:7b:4c:dc:7d:bb:e2:b2:d4:b9:ed: 9c:af:dd:8f:32:70:de:64:07:09:a5:de:80:11:cd: f9:9f:d5:1a:a0:e3:2f:fc:7d:04:64:bf:e7:67:25: fa:7f:7f:2f:85:cd:0f:f2:3c:1a:0c:37:e6:59:88: 96:44:ef:13:c2:ad:41:4e:94:f3:a8:d9:f3:a2:bc: 02:46:f1:a5:08:fc:0b:b7:c2:bf:68:89:ae:d7:55: 17:68:9e:77:e5:a9:2e:36:5f:c4:1e:d9:f4:ee:6d: c7:93:ca:50:6e:76:8f:8b:7f:3b:65:4d:19:6c:4f: e2:5b:b5:7b:88:90:48:ee:02:a5:46:82:69:a6:a4: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:57:B4:06:E1:F3:67:C5:9A:DA:5F:59:52:E0:0B:EE:C5:F2:B7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BqxXtAbh82fFmtpfWVLgC-7F8rc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.172.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:d9:3d:2a:3c:62:7c:d3:9a:e8:a7:93:4c:99:8e:f4:5a:ba: ba:eb:f9:44:ba:2d:2c:ff:87:64:6a:6b:3a:ea:2a:eb:4d:f4: 6e:19:ec:f7:11:ac:ef:28:5f:e1:bf:46:4b:0f:64:98:19:84: 62:59:34:ae:8d:c9:9e:bf:52:5f:02:ef:ca:00:6c:87:f4:01: f2:1c:9d:93:46:60:e4:77:fc:c9:3b:fc:85:ff:b1:4f:44:c8: 06:f2:d6:6f:c6:e9:4a:55:94:a3:c2:ae:78:3e:7f:00:f0:08: 3e:bb:ef:3a:75:ee:93:01:03:64:48:2f:7e:e6:c4:94:a7:39: f4:c8:e8:6f:d4:a7:61:fa:96:b5:82:54:67:37:e5:88:63:60: 3d:c1:77:83:11:73:32:b5:98:db:49:0c:ca:7d:7c:df:73:a7: d9:89:3e:67:40:84:53:71:65:8c:a3:89:a5:f6:b3:26:87:92: 3f:7e:74:db:fd:a9:c7:d6:91:85:ad:3c:99:c3:99:a1:19:92: 10:87:22:68:79:1b:ef:6e:8e:de:31:90:cc:73:b8:ca:06:ad: 18:12:eb:67:1d:91:cd:14:e2:69:bc:34:08:b4:dd:ff:67:8a: 4c:fa:43:00:2d:47:8f:8c:c3:28:7c:fb:56:36:aa:3a:9e:35: c3:7d:1b:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKoIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA2QUM1N0I0MDZFMUYz NjdDNTlBREE1RjU5NTJFMDBCRUVDNUYyQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrNSk+VDpFej0A+aJ4gyYcJE9fWOV3AnGOASvrH+NDufXgFyn0 Lq96KsHGLJzP9kBT4knqAIm4IyONmn4AVgSOYih0hSRMj1GYlwOwxRclrveZjd+m ZKCPYvuwbzBN/qFc+26qKJY1UA+/Q9fnXKVXbshmVZwtEOI5z2IDe0zcfbvistS5 7Zyv3Y8ycN5kBwml3oARzfmf1Rqg4y/8fQRkv+dnJfp/fy+FzQ/yPBoMN+ZZiJZE 7xPCrUFOlPOo2fOivAJG8aUI/Au3wr9oia7XVRdonnflqS42X8Qe2fTubceTylBu do+LfztlTRlsT+JbtXuIkEjuAqVGgmmmpI8PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBqxXtAbh82fFmtpfWVLgC+7F8rcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JxeFh0QWJoODJmRm10cGZX VkxnQy03RjhyYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wqwwDQYJKoZIhvcNAQELBQADggEBAG3ZPSo8YnzTmuink0yZjvRaurrr+US6LSz/ h2RqazrqKutN9G4Z7PcRrO8oX+G/RksPZJgZhGJZNK6NyZ6/Ul8C78oAbIf0AfIc nZNGYOR3/Mk7/IX/sU9EyAby1m/G6UpVlKPCrng+fwDwCD677zp17pMBA2RIL37m xJSnOfTI6G/Up2H6lrWCVGc35YhjYD3Bd4MRczK1mNtJDMp9fN9zp9mJPmdAhFNx ZYyjiaX2syaHkj9+dNv9qcfWkYWtPJnDmaEZkhCHImh5G+9ujt4xkMxzuMoGrRgS 62cdkc0U4mm8NAi03f9nikz6QwAtR4+Mwyh8+1Y2qjqeNcN9GzY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org