$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dj41YtOYMP3cxoY-gDdFdM4KssE.roa File: Dj41YtOYMP3cxoY-gDdFdM4KssE.roa (raw, json) Hash identifier: E1QnuHX+broyngq4wAiPULv7XU0olPcMj+EfTxaRAIU= Subject key identifier: 0E:3E:35:62:D3:98:30:FD:DC:C6:86:3E:80:37:45:74:CE:0A:B2:C1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29FC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dj41YtOYMP3cxoY-gDdFdM4KssE.roa Signing time: Fri 01 Sep 2023 10:07:21 +0000 ROA not before: Fri 01 Sep 2023 10:07:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10748 (0x29fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0E3E3562D39830FDDCC6863E80374574CE0AB2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:c1:c2:b9:6c:21:9e:d7:2d:65:f8:de:a4: f6:89:a2:98:2b:ec:d6:e7:e5:97:5e:9c:42:7a:f9: b7:8b:65:5a:d6:ab:a2:ff:2b:fd:7f:b9:d1:40:dc: 42:f6:70:da:c6:a5:14:ff:3c:ee:36:51:ab:05:6c: 7f:7f:e3:52:8a:a0:54:b4:52:74:a3:71:a1:15:0a: af:12:11:52:f2:39:85:38:d6:bd:8a:2b:94:dd:41: 80:95:b2:da:dd:eb:90:07:d4:79:b5:78:4f:82:45: cd:b7:ac:c6:c1:7e:df:3a:96:bc:c4:03:0a:6f:8d: 2e:11:62:b5:08:15:02:ec:9d:e7:a5:af:b8:cd:92: af:0f:a2:11:1e:c1:7a:ef:71:bc:57:f9:aa:b9:5c: 4a:54:78:cb:45:19:c9:83:5c:f5:cc:82:4a:71:31: b1:8b:b9:61:01:ff:14:f0:82:4e:83:a4:5c:18:71: 8b:bc:0b:54:31:57:dd:07:3a:c9:e3:56:48:cb:60: 55:23:96:ba:09:0c:95:52:c1:a1:c9:7c:a3:a0:0e: 50:82:a4:af:c3:9b:a3:33:af:4a:a3:01:dd:78:dd: d3:80:22:a6:2e:4d:ed:7a:38:a5:79:f1:80:6a:e1: ad:a0:58:21:9d:cf:ea:40:78:31:7a:d0:75:c3:b3: f2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3E:35:62:D3:98:30:FD:DC:C6:86:3E:80:37:45:74:CE:0A:B2:C1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dj41YtOYMP3cxoY-gDdFdM4KssE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.72.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:4c:37:e2:0a:82:5e:67:dc:dd:f3:97:10:c8:5c:11:a3:11: f0:50:5e:b5:43:4a:3d:68:2b:d8:c5:fb:d4:26:dd:19:dd:a9: 5b:fe:04:97:7f:f8:0f:dc:7b:1c:b0:da:08:c5:c4:e0:04:70: 4e:3c:b9:c8:ea:96:27:86:45:7e:e0:ca:4b:6a:a5:e9:ec:6d: f3:f3:7c:54:a8:d6:11:f9:d0:64:5e:ae:20:d9:9d:f0:c6:33: 74:db:97:a3:42:29:03:6f:e2:71:87:aa:0b:60:8e:ad:dc:75: 53:12:7b:21:f2:58:18:7c:dc:6c:81:7a:c2:52:01:3b:4b:cb: 0f:24:7a:1d:3e:4d:32:ae:90:76:43:ae:e3:91:15:3c:67:3d: 06:f6:aa:61:a1:56:f3:8e:0d:54:71:3e:67:94:aa:2d:35:88: 8d:bc:11:27:08:83:ae:c1:ca:32:2b:a3:a8:8a:f7:0d:02:65: 55:c2:9e:8a:67:cd:45:4f:81:e7:cf:d0:10:79:1b:cc:1e:10: 56:c9:49:77:69:9b:2c:c4:72:d3:d9:86:29:73:b5:06:a8:ae: c9:03:4b:f8:ff:e6:ed:d0:1f:bd:5b:74:de:17:f8:c3:dd:8a: 2d:38:7d:7d:33:d7:32:99:ab:6a:2c:a8:f7:97:f2:85:ab:c8: bb:2f:cf:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBFM0UzNTYyRDM5ODMw RkREQ0M2ODYzRTgwMzc0NTc0Q0UwQUIyQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr+8HCuWwhntctZfjepPaJopgr7Nbn5ZdenEJ6+beLZVrWq6L/ K/1/udFA3EL2cNrGpRT/PO42UasFbH9/41KKoFS0UnSjcaEVCq8SEVLyOYU41r2K K5TdQYCVstrd65AH1Hm1eE+CRc23rMbBft86lrzEAwpvjS4RYrUIFQLsneelr7jN kq8PohEewXrvcbxX+aq5XEpUeMtFGcmDXPXMgkpxMbGLuWEB/xTwgk6DpFwYcYu8 C1QxV90HOsnjVkjLYFUjlroJDJVSwaHJfKOgDlCCpK/Dm6Mzr0qjAd143dOAIqYu Te16OKV58YBq4a2gWCGdz+pAeDF60HXDs/KlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDj41YtOYMP3cxoY+gDdFdM4KssEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RqNDFZdE9ZTVAzY3hvWS1n RGRGZE00S3NzRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkgwDQYJKoZIhvcNAQELBQADggEBABpMN+IKgl5n3N3zlxDIXBGjEfBQXrVDSj1o K9jF+9Qm3RndqVv+BJd/+A/cexyw2gjFxOAEcE48ucjqlieGRX7gyktqpensbfPz fFSo1hH50GReriDZnfDGM3Tbl6NCKQNv4nGHqgtgjq3cdVMSeyHyWBh83GyBesJS ATtLyw8keh0+TTKukHZDruORFTxnPQb2qmGhVvOODVRxPmeUqi01iI28EScIg67B yjIro6iK9w0CZVXCnopnzUVPgefP0BB5G8weEFbJSXdpmyzEctPZhilztQaorskD S/j/5u3QH71bdN4X+MPdii04fX0z1zKZq2osqPeX8oWryLsvz/I= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org