$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7httDOlK0rUwHekamYj6maj2Mo.roa File: E7httDOlK0rUwHekamYj6maj2Mo.roa (raw, json) Hash identifier: k5ib0PNyZ5HBdq5brwxOfUiTvTaeA68Toup0aeCoYD4= Subject key identifier: 13:B8:6D:B4:33:A5:2B:4A:D4:C0:77:A4:6A:66:23:EA:66:A3:D8:CA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2814 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7httDOlK0rUwHekamYj6maj2Mo.roa Signing time: Fri 01 Sep 2023 10:04:55 +0000 ROA not before: Fri 01 Sep 2023 10:04:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.193.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10260 (0x2814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=13B86DB433A52B4AD4C077A46A6623EA66A3D8CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:47:fa:e4:4a:66:a3:1f:56:52:97:55:f9: 1c:3e:79:02:28:b3:c6:c5:5c:1c:c1:e1:3e:76:05: 71:23:58:fe:a9:fa:98:6b:f4:0a:4e:8d:26:01:14: 92:9f:ac:21:74:38:c6:e5:12:a3:71:31:59:06:19: cc:5e:6b:06:38:e3:e0:ae:46:2c:ed:e9:e0:77:be: 75:64:c3:79:e8:5d:fc:15:86:84:65:bf:c4:20:f8: 3a:2b:d7:e0:74:47:f2:0a:55:fe:33:40:70:45:1b: e2:01:c9:8e:2f:da:74:ed:de:4e:6c:ac:44:d3:1a: 9f:16:d5:2e:e6:ac:77:52:7e:0d:8c:59:02:34:93: 82:c0:a0:db:d9:b9:13:37:92:3e:02:d4:6d:5b:17: 68:98:12:07:4a:96:98:e5:10:ee:0d:d8:dc:34:69: 41:b2:43:c9:32:e6:77:c3:6c:4d:1d:a4:1b:71:35: cf:a3:9f:10:d7:07:bb:5e:60:b6:8d:62:f6:62:5d: d1:15:97:4e:6a:eb:9d:79:c2:67:a7:5d:f4:35:59: d4:b8:e5:39:a2:1b:82:72:e7:2b:9b:50:4d:bc:c1: 1b:a7:99:66:18:f7:8d:26:5a:18:a2:9a:fa:bf:b7: 02:ce:d2:c6:05:2d:db:76:7f:e2:ab:98:87:06:08: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B8:6D:B4:33:A5:2B:4A:D4:C0:77:A4:6A:66:23:EA:66:A3:D8:CA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7httDOlK0rUwHekamYj6maj2Mo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.192.0/19 Signature Algorithm: sha256WithRSAEncryption ba:de:f3:49:0c:f8:1a:f0:63:42:37:fb:93:01:a7:82:3d:34: 15:af:ab:a0:ee:72:35:27:7d:54:91:9f:b0:2f:aa:f1:f6:02: d3:24:ec:6a:78:94:9a:b5:5f:a7:d4:62:86:cd:4d:04:99:79: 9f:e8:96:8e:e1:fc:92:3a:a3:6c:ad:80:28:c3:b4:e4:24:5f: 6a:4d:c2:60:06:d1:17:73:8d:83:e1:64:0d:51:c3:ad:b4:f6: 4b:f5:d7:56:f7:ca:d9:8c:d0:f4:36:8b:33:59:51:1b:56:88: 94:3f:d7:f7:8f:c9:bd:05:6a:4b:3e:a1:2d:8c:c9:6e:bf:16: 2e:98:0d:ff:ed:10:f8:7a:69:c8:5d:98:0a:45:3d:03:85:a3: ab:8a:a6:5f:4f:3a:d3:41:be:ea:fd:5f:7c:ec:bb:cd:59:e7: 54:7d:63:ed:ec:c3:f8:28:a0:ed:44:01:87:45:2f:71:e3:0b: 41:65:db:c7:84:4f:09:b2:2e:16:e9:a6:6b:ff:96:f8:c0:8d: 7f:9f:e0:52:4c:02:24:18:54:fc:35:57:a5:7f:54:6c:19:05: 29:92:a1:de:fd:f2:f1:a5:99:5f:dc:2e:f3:13:eb:2f:11:8b: 26:a6:d8:65:80:d8:5c:61:9f:a3:19:0a:f5:97:04:f9:e9:0a: 2e:de:4e:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEzQjg2REI0MzNBNTJC NEFENEMwNzdBNDZBNjYyM0VBNjZBM0Q4Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8/Ef65Epmox9WUpdV+Rw+eQIos8bFXBzB4T52BXEjWP6p+phr 9ApOjSYBFJKfrCF0OMblEqNxMVkGGcxeawY44+CuRizt6eB3vnVkw3noXfwVhoRl v8Qg+Dor1+B0R/IKVf4zQHBFG+IByY4v2nTt3k5srETTGp8W1S7mrHdSfg2MWQI0 k4LAoNvZuRM3kj4C1G1bF2iYEgdKlpjlEO4N2Nw0aUGyQ8ky5nfDbE0dpBtxNc+j nxDXB7teYLaNYvZiXdEVl05q6515wmenXfQ1WdS45TmiG4Jy5yubUE28wRunmWYY 940mWhiimvq/twLO0sYFLdt2f+KrmIcGCFjTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUE7httDOlK0rUwHekamYj6maj2MowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0U3aHR0RE9sSzByVXdIZWth bVlqNm1hajJNby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wcAwDQYJKoZIhvcNAQELBQADggEBALre80kM+BrwY0I3+5MBp4I9NBWvq6DucjUn fVSRn7AvqvH2AtMk7Gp4lJq1X6fUYobNTQSZeZ/olo7h/JI6o2ytgCjDtOQkX2pN wmAG0RdzjYPhZA1Rw6209kv111b3ytmM0PQ2izNZURtWiJQ/1/ePyb0Faks+oS2M yW6/Fi6YDf/tEPh6achdmApFPQOFo6uKpl9POtNBvur9X3zsu81Z51R9Y+3sw/go oO1EAYdFL3HjC0Fl28eETwmyLhbppmv/lvjAjX+f4FJMAiQYVPw1V6V/VGwZBSmS od798vGlmV/cLvMT6y8Riyam2GWA2Fxhn6MZCvWXBPnpCi7eTho= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org