$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa File: C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa (raw, json) Hash identifier: oFDqWHOGhPeHbTLt1aE0TYD9O0z15W4SolQ7PXiRmRQ= Subject key identifier: 0B:AF:A0:DA:54:89:32:71:1F:1A:88:E6:12:A8:7E:3A:C5:67:67:87 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2ADC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa Signing time: Fri 01 Sep 2023 10:08:22 +0000 ROA not before: Fri 01 Sep 2023 10:08:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10972 (0x2adc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0BAFA0DA548932711F1A88E612A87E3AC5676787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:ae:85:f8:19:d7:6a:15:d7:82:a3:a6:cf: 00:dc:c6:ca:1e:5b:32:bf:1c:78:c6:49:39:70:d4: 07:e0:0b:11:8e:39:fa:2f:63:2b:76:d7:ea:35:45: e2:43:d6:3c:47:03:7d:43:81:92:cb:a5:a9:8e:86: 01:6e:55:35:46:54:81:5d:9e:2f:72:87:24:53:4d: d2:95:c4:54:0f:14:69:3f:57:0f:70:a6:93:7a:2e: 76:6f:65:f0:52:fe:f7:8f:17:0e:02:6e:1d:30:4a: a1:3c:a0:e7:f4:a6:f8:e9:76:1e:d6:ff:3f:56:11: 5b:26:4f:9b:f1:73:81:12:34:38:30:52:62:70:79: 58:f3:68:44:22:14:1c:c8:47:a8:fc:d1:33:5d:53: 53:0e:89:ed:d0:bf:b3:0e:25:f3:41:89:22:29:48: d3:50:28:c3:f5:75:16:e3:77:7c:f9:67:f1:01:7b: 88:5b:d4:ae:8c:63:95:cb:3e:c5:42:9c:81:27:94: 2b:71:b2:13:75:11:b5:65:01:a0:8c:fc:cd:82:a1: 9b:96:c1:a2:42:44:20:81:66:10:c1:a6:64:3a:e8: 4b:82:8e:12:d3:15:20:af:8a:7c:65:f7:6d:05:58: a8:2f:18:fe:fd:13:0c:f4:c5:6c:93:8b:62:cb:1b: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:A0:DA:54:89:32:71:1F:1A:88:E6:12:A8:7E:3A:C5:67:67:87 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.192.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:75:e8:64:a4:f0:3f:28:59:85:36:ea:5f:f0:7f:c5:c6:b9: c0:52:6d:b6:9d:eb:2a:c0:78:9c:a2:03:3e:94:64:e9:40:ea: 3f:ee:76:c5:78:15:a6:2a:f9:f4:51:d7:95:a7:b4:f9:a2:29: 64:0b:ee:87:08:7d:a2:23:16:e8:71:58:35:9e:b1:11:19:fc: 61:f4:f5:ab:54:26:66:29:3c:9c:c4:56:ab:b9:29:43:a0:36: db:62:a3:e5:84:f2:c6:fa:b8:80:af:9b:00:43:b3:99:6c:2d: 6a:43:d5:93:8b:de:74:48:bc:36:a3:ee:28:71:db:2c:34:7b: 64:aa:69:ee:b1:b8:91:29:ba:d5:19:e3:a2:70:ae:c0:7e:e9: db:18:92:2e:ea:7a:9f:88:18:a9:e1:22:24:d1:9d:1e:2b:ac: 27:f2:17:5e:02:ca:29:23:ca:b5:15:38:6f:3b:3b:31:a5:ee: d7:de:07:e9:27:54:90:bc:e8:aa:fe:61:dd:e8:18:bc:6a:0a: 94:aa:25:e9:b1:77:e7:d4:a6:ad:dc:fd:41:f6:ee:00:fa:c4: 93:14:a9:f0:08:43:d8:9e:87:5c:a8:e6:b6:b0:5a:41:a9:fd: fe:f5:f1:f6:d5:b4:97:c3:0b:63:a5:39:79:c2:48:82:cb:8d: bf:46:78:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBCQUZBMERBNTQ4OTMy NzExRjFBODhFNjEyQTg3RTNBQzU2NzY3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3q66F+BnXahXXgqOmzwDcxsoeWzK/HHjGSTlw1AfgCxGOOfov Yyt21+o1ReJD1jxHA31DgZLLpamOhgFuVTVGVIFdni9yhyRTTdKVxFQPFGk/Vw9w ppN6LnZvZfBS/vePFw4Cbh0wSqE8oOf0pvjpdh7W/z9WEVsmT5vxc4ESNDgwUmJw eVjzaEQiFBzIR6j80TNdU1MOie3Qv7MOJfNBiSIpSNNQKMP1dRbjd3z5Z/EBe4hb 1K6MY5XLPsVCnIEnlCtxshN1EbVlAaCM/M2CoZuWwaJCRCCBZhDBpmQ66EuCjhLT FSCvinxl920FWKgvGP79Ewz0xWyTi2LLG4snAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC6+g2lSJMnEfGojmEqh+OsVnZ4cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0M2LWcybFNKTW5FZkdvam1F cWgtT3NWblo0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wsAwDQYJKoZIhvcNAQELBQADggEBAAt16GSk8D8oWYU26l/wf8XGucBSbbad6yrA eJyiAz6UZOlA6j/udsV4FaYq+fRR15WntPmiKWQL7ocIfaIjFuhxWDWesREZ/GH0 9atUJmYpPJzEVqu5KUOgNttio+WE8sb6uICvmwBDs5lsLWpD1ZOL3nRIvDaj7ihx 2yw0e2Sqae6xuJEputUZ46JwrsB+6dsYki7qep+IGKnhIiTRnR4rrCfyF14Cyikj yrUVOG87OzGl7tfeB+knVJC86Kr+Yd3oGLxqCpSqJemxd+fUpq3c/UH27gD6xJMU qfAIQ9ieh1yo5rawWkGp/f718fbVtJfDC2OlOXnCSILLjb9GeNI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org