$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCgxND35xz0SVuATCdNzRw2TAX8.roa File: DCgxND35xz0SVuATCdNzRw2TAX8.roa (raw, json) Hash identifier: vFJXS7MufohatDuAax6/JxO5XknLGWmhs7jcvLOmJa8= Subject key identifier: 0C:28:31:34:3D:F9:C7:3D:12:56:E0:13:09:D3:73:47:0D:93:01:7F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2897 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCgxND35xz0SVuATCdNzRw2TAX8.roa Signing time: Fri 01 Sep 2023 10:05:32 +0000 ROA not before: Fri 01 Sep 2023 10:05:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.237.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10391 (0x2897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0C2831343DF9C73D1256E01309D373470D93017F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:1d:9d:64:ad:19:76:80:42:9e:d3:ae:e1: 32:56:a3:c0:96:8b:1a:95:3c:96:bf:2a:2e:38:28: 8f:c0:c6:91:09:c8:96:68:b7:d7:2b:09:76:52:ee: 65:57:c1:77:58:20:42:b8:ba:30:39:ff:c7:75:5e: e5:b0:b1:4c:f6:81:66:a0:13:2c:3b:f4:67:c6:90: b4:d6:0e:c1:70:13:6c:3e:ba:21:e0:44:43:4f:8d: 2f:ca:4a:09:26:57:bc:cf:f2:fd:12:59:c4:66:8a: d9:49:be:51:09:5f:18:41:e2:ad:9d:6b:52:ab:ae: d1:62:d0:cc:a4:11:26:65:82:a9:e4:be:25:94:1a: 68:47:b9:2b:bc:89:47:5f:d5:31:44:68:99:cc:d9: 5e:6c:83:cb:11:41:07:ca:b0:7d:d9:a4:8e:97:a8: 48:d5:31:0a:b1:64:ae:19:b0:07:ad:83:68:83:bb: fe:b3:1c:53:87:d2:ec:db:a6:01:72:57:19:30:e6: f6:0b:2d:8a:5c:14:b3:49:6b:de:2b:65:9a:3e:da: bd:c7:18:ee:a0:7d:e3:12:80:d0:97:f7:21:7c:a2: fa:70:e7:91:48:24:3a:5f:7c:87:cd:4f:18:83:8e: e6:32:ea:a5:c3:2f:21:0b:91:9f:ff:58:cc:dd:77: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:31:34:3D:F9:C7:3D:12:56:E0:13:09:D3:73:47:0D:93:01:7F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCgxND35xz0SVuATCdNzRw2TAX8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.128/25 Signature Algorithm: sha256WithRSAEncryption a1:be:6d:08:88:13:4e:30:a4:9c:7a:02:de:72:30:0b:4d:e9: 75:f8:f9:09:19:e7:c1:0a:bd:7f:ea:2a:01:56:79:5e:8e:f8: 80:33:c7:58:0a:92:13:f9:3e:4e:fe:52:60:cc:b4:ec:8f:87: dc:8e:d7:92:5c:c4:fb:54:e5:75:a7:f1:9a:a9:4e:e1:fc:4d: 4c:c2:54:77:09:d6:4d:93:db:4a:88:1f:49:ce:9c:67:08:d8: ba:4a:ed:eb:62:97:ad:ba:e9:0f:ca:53:f6:25:0c:57:98:e5: c7:a2:18:7f:7c:5e:e7:f0:f2:9d:9d:a5:5d:a2:e4:c4:c5:9a: 44:a3:98:46:50:dc:d3:78:c0:19:1f:26:b9:1f:ee:71:37:12: be:7b:72:ee:66:22:a5:d9:5d:d0:a0:ea:a2:b1:d8:43:e8:9e: 3b:06:98:56:2a:a1:84:eb:87:dd:4e:70:ca:9c:b0:41:a4:84: b1:96:fa:62:56:bf:e8:95:47:df:87:3f:f3:a1:d8:09:fe:fe: 09:07:f2:94:32:77:19:bc:2e:59:3a:42:9b:78:6d:d8:f1:a4: e3:90:4f:51:88:c3:9b:4c:f2:ce:ff:f1:05:71:01:1e:90:9d: 17:7a:b8:f9:c5:69:a8:24:33:8f:0b:97:fd:cf:0d:30:f4:70: 9c:3f:06:39 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBDMjgzMTM0M0RGOUM3 M0QxMjU2RTAxMzA5RDM3MzQ3MEQ5MzAxN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIzR2dZK0ZdoBCntOu4TJWo8CWixqVPJa/Ki44KI/AxpEJyJZo t9crCXZS7mVXwXdYIEK4ujA5/8d1XuWwsUz2gWagEyw79GfGkLTWDsFwE2w+uiHg RENPjS/KSgkmV7zP8v0SWcRmitlJvlEJXxhB4q2da1KrrtFi0MykESZlgqnkviWU GmhHuSu8iUdf1TFEaJnM2V5sg8sRQQfKsH3ZpI6XqEjVMQqxZK4ZsAetg2iDu/6z HFOH0uzbpgFyVxkw5vYLLYpcFLNJa94rZZo+2r3HGO6gfeMSgNCX9yF8ovpw55FI JDpffIfNTxiDjuYy6qXDLyELkZ//WMzddxThAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUDCgxND35xz0SVuATCdNzRw2TAX8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RDZ3hORDM1eHowU1Z1QVRD ZE56UncyVEFYOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+2AMA0GCSqGSIb3DQEBCwUAA4IBAQChvm0IiBNOMKScegLecjALTel1+PkJGefB Cr1/6ioBVnlejviAM8dYCpIT+T5O/lJgzLTsj4fcjteSXMT7VOV1p/GaqU7h/E1M wlR3CdZNk9tKiB9JzpxnCNi6Su3rYpetuukPylP2JQxXmOXHohh/fF7n8PKdnaVd ouTExZpEo5hGUNzTeMAZHya5H+5xNxK+e3LuZiKl2V3QoOqisdhD6J47BphWKqGE 64fdTnDKnLBBpISxlvpiVr/olUffhz/zodgJ/v4JB/KUMncZvC5ZOkKbeG3Y8aTj kE9RiMObTPLO//EFcQEekJ0Xerj5xWmoJDOPC5f9zw0w9HCcPwY5 -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org