$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa File: EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa (raw, json) Hash identifier: ruaGn3YORATHne3puaTXvba0XX1WnwYCTNFEfEDsWA8= Subject key identifier: 11:73:3B:3A:BB:5B:9E:B5:18:63:08:78:0C:33:07:64:E0:1A:10:BD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A1D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa Signing time: Fri 01 Sep 2023 10:07:31 +0000 ROA not before: Fri 01 Sep 2023 10:07:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10781 (0x2a1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=11733B3ABB5B9EB5186308780C330764E01A10BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:b6:6b:e4:a4:ce:63:10:7a:b0:c8:29:ff: e3:27:04:48:76:12:24:a2:97:16:be:8f:3f:40:39: 1b:27:d6:d1:4c:e9:89:49:8a:76:d6:11:5f:53:37: 6e:41:a6:4b:68:88:8c:81:82:6f:51:37:7f:f0:9b: 92:6a:ba:9f:41:9c:23:a2:90:ab:70:51:05:76:87: 1f:29:50:5f:8f:64:da:97:37:81:b7:ed:bc:aa:16: a2:79:ca:f6:1e:ad:e7:05:64:51:22:be:e3:df:13: 17:17:c2:03:96:2d:62:28:be:22:14:9a:aa:40:49: 3e:e9:37:56:c3:f2:5b:92:5c:18:f7:93:15:c5:e7: 7e:78:71:95:1f:df:81:92:c1:53:84:1d:45:39:c9: 0a:fa:c4:04:f1:e6:ed:b9:7d:28:50:ff:be:76:c8: 1c:c5:2a:ee:54:d2:12:b8:d0:ea:57:67:4a:fc:bc: 1b:fe:2f:db:58:91:9e:02:d3:59:f1:f5:37:5c:43: c4:73:d9:ab:08:42:b0:15:5a:99:32:0c:85:7b:8b: ff:48:9e:c6:ec:22:22:6e:df:0f:47:63:97:e6:26: 25:14:1c:e5:5c:d1:dc:a9:a4:1d:2c:39:34:e5:69: de:3a:ad:32:22:db:2b:4b:f4:b3:c1:0a:67:0a:51: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:73:3B:3A:BB:5B:9E:B5:18:63:08:78:0C:33:07:64:E0:1A:10:BD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.100.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:06:d4:a6:a0:13:6e:b0:b1:46:51:e2:a9:bd:61:97:b0:03: 88:51:40:34:00:51:62:7f:7c:5a:08:b4:f2:f6:e2:73:6e:a6: 0f:fa:80:20:77:8e:d8:10:df:56:5d:db:5d:3a:e1:77:92:86: 7f:d5:ff:9c:be:0b:68:b3:19:db:be:71:28:9d:38:50:a9:c7: 73:34:e7:f2:9e:d7:e4:21:f2:84:c5:4a:ba:1b:d5:c1:f1:85: 6d:6d:a4:b0:37:ce:5a:10:53:56:61:fa:c8:61:99:f9:db:82: 57:8b:c6:99:89:13:82:ca:ba:0c:25:01:b3:2d:3e:81:12:94: f3:99:22:12:03:48:6b:53:f4:c0:bd:7e:0d:1a:4a:db:0c:ce: e0:f3:f5:f3:19:b5:a9:ff:55:19:aa:e0:5d:be:69:ee:e6:2a: fb:5f:8f:b2:b2:85:6b:43:15:5c:d2:f5:c0:5c:8e:0c:ee:30: 4b:df:33:0b:f8:9f:44:3f:6d:a7:af:f6:3e:7d:52:b4:8d:44: 2c:e8:b5:11:36:c2:18:e1:a2:e2:50:6b:37:9f:a3:db:54:10: 66:a4:fc:6b:a2:17:5d:f5:b6:b4:9e:86:e1:b3:59:02:c8:72: 7d:1c:82:4c:16:c4:50:c3:c0:ad:73:03:ab:ae:be:ef:ff:d7: 5e:74:7c:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDExNzMzQjNBQkI1QjlF QjUxODYzMDg3ODBDMzMwNzY0RTAxQTEwQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGJrZr5KTOYxB6sMgp/+MnBEh2EiSilxa+jz9AORsn1tFM6YlJ inbWEV9TN25BpktoiIyBgm9RN3/wm5Jqup9BnCOikKtwUQV2hx8pUF+PZNqXN4G3 7byqFqJ5yvYerecFZFEivuPfExcXwgOWLWIoviIUmqpAST7pN1bD8luSXBj3kxXF 5354cZUf34GSwVOEHUU5yQr6xATx5u25fShQ/752yBzFKu5U0hK40OpXZ0r8vBv+ L9tYkZ4C01nx9TdcQ8Rz2asIQrAVWpkyDIV7i/9InsbsIiJu3w9HY5fmJiUUHOVc 0dyppB0sOTTlad46rTIi2ytL9LPBCmcKUTEXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEXM7OrtbnrUYYwh4DDMHZOAaEL0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VYTTdPcnRibnJVWVl3aDRE RE1IWk9BYUVMMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wWQwDQYJKoZIhvcNAQELBQADggEBAE0G1KagE26wsUZR4qm9YZewA4hRQDQAUWJ/ fFoItPL24nNupg/6gCB3jtgQ31Zd21064XeShn/V/5y+C2izGdu+cSidOFCpx3M0 5/Ke1+Qh8oTFSrob1cHxhW1tpLA3zloQU1Zh+shhmfnbgleLxpmJE4LKugwlAbMt PoESlPOZIhIDSGtT9MC9fg0aStsMzuDz9fMZtan/VRmq4F2+ae7mKvtfj7KyhWtD FVzS9cBcjgzuMEvfMwv4n0Q/baev9j59UrSNRCzotRE2whjhouJQazefo9tUEGak /GuiF131trSehuGzWQLIcn0cgkwWxFDDwK1zA6uuvu//1150fK4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org