$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CeselHY5a2oc3r04qJbNd4M8XqM.roa File: CeselHY5a2oc3r04qJbNd4M8XqM.roa (raw, json) Hash identifier: 7iiyDZiTsCHs+ume2jFULhH0hfwIg13oxwkYBFNrwyc= Subject key identifier: 09:EB:1E:94:76:39:6B:6A:1C:DE:BD:38:A8:96:CD:77:83:3C:5E:A3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27BD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CeselHY5a2oc3r04qJbNd4M8XqM.roa Signing time: Fri 01 Sep 2023 10:04:29 +0000 ROA not before: Fri 01 Sep 2023 10:04:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10173 (0x27bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=09EB1E9476396B6A1CDEBD38A896CD77833C5EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:ac:41:f4:6f:10:dd:0b:37:fc:97:80:53: 20:7b:07:26:0e:09:97:37:29:ee:f2:98:59:ed:b9: 2f:16:a3:a0:b7:c9:b7:3e:4f:fc:76:4b:08:40:23: a3:61:d3:d9:a6:3e:61:eb:f8:35:88:52:83:ce:65: d8:cc:ed:f4:0e:b3:84:d5:2d:fc:6a:22:a6:1a:3b: 56:3f:af:91:3a:2e:e3:38:f2:8b:79:cd:6b:92:53: 1f:4a:21:f4:ba:e1:67:7b:38:51:81:6f:92:5c:c2: 93:32:79:2b:6e:10:07:97:cf:14:45:f5:fe:46:5c: 1a:ff:42:e5:3a:a1:2d:3e:90:cb:b8:3e:e4:96:af: f4:f5:7a:54:36:7e:c0:12:8f:56:c0:41:19:0a:a5: 17:40:d4:7e:28:d2:34:86:64:99:cf:72:58:1d:62: 2b:d8:79:67:a8:a8:19:f4:ef:30:2c:fb:72:f7:bf: 29:d4:2a:ec:31:00:39:0c:42:2f:1e:67:5e:6f:77: 93:6a:1a:35:e1:c7:52:33:79:41:da:ef:15:dc:cf: a9:28:20:2b:a4:12:44:82:23:02:f8:0b:9a:58:84: 56:55:77:c4:2e:7b:5f:8b:4a:2c:db:d2:44:bf:13: e8:c6:5a:a8:89:2f:3c:ba:d1:35:09:f4:c6:a3:67: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:1E:94:76:39:6B:6A:1C:DE:BD:38:A8:96:CD:77:83:3C:5E:A3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CeselHY5a2oc3r04qJbNd4M8XqM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.136.0/21 Signature Algorithm: sha256WithRSAEncryption 61:00:6f:70:93:6b:84:27:f1:7d:12:a1:f1:2b:fa:78:5d:ce: 66:0a:73:33:8f:d8:27:bc:1f:d2:86:83:7f:97:9d:cd:e6:72: 6b:2d:c6:31:50:98:d5:70:eb:4b:78:5e:85:94:a6:2a:a8:ab: e3:86:7b:a5:f4:42:7f:8f:7a:10:89:7e:9f:75:f4:4d:81:6e: 94:29:8e:ad:19:c1:ac:7d:54:19:b8:29:f7:53:2a:0e:5e:08: cc:80:9b:a2:31:7a:be:e2:08:3e:fd:0b:1a:4c:4a:87:61:cf: ba:d9:5c:0a:40:4c:af:3f:fa:d9:3c:0f:6a:56:14:71:f6:3d: b7:8d:e4:85:5f:68:57:64:95:70:f3:32:5a:bd:cf:ab:bc:3f: e2:5f:8f:71:5a:4f:9c:e0:db:bf:98:5a:63:d9:9a:ce:d6:9c: a6:e9:1c:d6:9c:fc:25:f6:c3:e1:82:33:23:93:e4:42:85:39: 45:39:47:21:41:ac:0b:ef:0a:53:43:60:b8:b4:c5:47:2c:8d: 49:51:93:f1:33:ef:fe:61:7e:17:c1:a5:ae:ab:b5:48:69:0a: d4:c1:07:26:2d:f6:ee:5d:63:46:17:12:7f:8e:47:75:1c:ae: ec:75:0b:09:76:88:c8:74:fb:a2:a4:c3:48:fd:23:c3:9a:c3: df:2e:a9:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA5RUIxRTk0NzYzOTZC NkExQ0RFQkQzOEE4OTZDRDc3ODMzQzVFQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqZaxB9G8Q3Qs3/JeAUyB7ByYOCZc3Ke7ymFntuS8Wo6C3ybc+ T/x2SwhAI6Nh09mmPmHr+DWIUoPOZdjM7fQOs4TVLfxqIqYaO1Y/r5E6LuM48ot5 zWuSUx9KIfS64Wd7OFGBb5JcwpMyeStuEAeXzxRF9f5GXBr/QuU6oS0+kMu4PuSW r/T1elQ2fsASj1bAQRkKpRdA1H4o0jSGZJnPclgdYivYeWeoqBn07zAs+3L3vynU KuwxADkMQi8eZ15vd5NqGjXhx1IzeUHa7xXcz6koICukEkSCIwL4C5pYhFZVd8Qu e1+LSizb0kS/E+jGWqiJLzy60TUJ9MajZ8QbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCeselHY5a2oc3r04qJbNd4M8XqMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Nlc2VsSFk1YTJvYzNyMDRx SmJOZDRNOFhxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6IgwDQYJKoZIhvcNAQELBQADggEBAGEAb3CTa4Qn8X0SofEr+nhdzmYKczOP2Ce8 H9KGg3+Xnc3mcmstxjFQmNVw60t4XoWUpiqoq+OGe6X0Qn+PehCJfp919E2BbpQp jq0Zwax9VBm4KfdTKg5eCMyAm6Ixer7iCD79CxpMSodhz7rZXApATK8/+tk8D2pW FHH2PbeN5IVfaFdklXDzMlq9z6u8P+Jfj3FaT5zg27+YWmPZms7WnKbpHNac/CX2 w+GCMyOT5EKFOUU5RyFBrAvvClNDYLi0xUcsjUlRk/Ez7/5hfhfBpa6rtUhpCtTB ByYt9u5dY0YXEn+OR3Ucrux1Cwl2iMh0+6Kkw0j9I8Oaw98uqdA= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:29 2024 by rpki-client on console-fra.rpki-client.org