$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FvJvmCeyQ3At2qo20QWRYapdoMc.roa File: FvJvmCeyQ3At2qo20QWRYapdoMc.roa (raw, json) Hash identifier: RBNrc2kzAAeQ1Pt5AjGsCBGa5lNvo+5mXFXKfilDkzc= Subject key identifier: 16:F2:6F:98:27:B2:43:70:2D:DA:AA:36:D1:05:91:61:AA:5D:A0:C7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2891 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FvJvmCeyQ3At2qo20QWRYapdoMc.roa Signing time: Fri 01 Sep 2023 10:05:30 +0000 ROA not before: Fri 01 Sep 2023 10:05:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10385 (0x2891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=16F26F9827B243702DDAAA36D1059161AA5DA0C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:02:a6:14:33:d0:c8:8f:6a:d8:6d:5a:03: 7a:49:ed:e7:d3:5d:05:b0:71:0a:f0:14:ea:e0:0a: dc:34:32:41:17:3b:5a:ff:c1:77:95:49:03:ed:ed: 39:59:39:44:55:b0:1a:4e:2f:a9:39:9d:81:ba:30: 08:5b:95:6c:9e:4e:d2:6a:c2:61:1c:5b:70:fe:5a: 44:75:da:eb:6b:71:88:36:de:d0:b2:26:29:29:07: a6:a6:6d:2b:c5:3a:f3:58:da:71:bd:8c:32:71:6a: 83:95:64:4a:f0:3d:e7:69:6d:1b:89:f8:e2:8f:35: e4:ab:49:fb:95:6c:e1:61:83:0d:1e:5e:ee:61:fd: 2d:c8:4f:ec:96:49:0b:5c:56:39:c3:b9:33:01:48: 44:d3:6c:46:e9:0d:90:21:43:3c:98:17:28:db:e8: 0a:c2:a1:aa:3e:e2:29:0d:30:7a:91:14:67:bc:c5: 85:8a:b3:ed:52:14:a6:8a:31:03:fa:b2:d4:16:bf: 11:bc:cb:9c:af:90:01:a5:eb:f4:b7:f5:5d:ab:0b: b0:99:ec:68:ec:21:4e:96:3a:60:37:4f:bc:08:dc: 5e:4c:2c:fb:d1:21:3d:55:24:3c:14:bc:68:fa:68: 5f:7e:86:79:9a:8e:08:0e:c4:59:fb:1a:66:08:c6: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F2:6F:98:27:B2:43:70:2D:DA:AA:36:D1:05:91:61:AA:5D:A0:C7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FvJvmCeyQ3At2qo20QWRYapdoMc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.240.0/21 Signature Algorithm: sha256WithRSAEncryption 47:39:49:66:14:6a:a9:89:b2:ce:b2:49:79:13:6a:14:dd:de: 60:f1:c6:32:dd:3a:1d:38:0f:d5:48:60:d5:b4:8e:80:c1:b4: bb:ea:e6:e9:b6:f6:99:4b:a7:f6:e2:f8:f5:d2:be:c8:99:23: 6b:fb:3d:01:18:c1:75:d4:ac:48:a7:c8:b6:ac:49:db:d4:48: b9:2e:ac:62:36:ab:4e:d8:9c:5f:42:d0:8c:12:a4:a9:1f:b8: ff:84:17:b2:a3:c8:f5:c8:fd:3b:0f:a5:f4:97:ab:f2:b3:d6: 87:ea:58:d3:55:d3:4f:41:a9:8c:1c:29:87:e6:d8:29:39:f2: 30:37:22:31:78:44:76:cb:3f:55:ab:9e:69:12:74:0d:f4:5f: e8:84:fc:68:0c:ec:4e:15:04:b3:3b:a4:21:d8:95:13:53:1c: 74:95:06:3d:ef:a7:38:e5:dc:b7:1a:f5:5d:bc:94:86:70:48: bc:62:86:f4:0d:63:4e:9c:47:a7:52:f1:6f:7b:63:52:f9:74: af:b4:74:b2:70:13:c8:ac:c7:25:9a:68:8c:38:44:08:0c:6b: 08:66:f0:bc:4e:39:cd:a3:d0:4c:64:03:9c:e4:cd:a4:76:d7: 87:10:df:8f:aa:44:54:69:b9:a0:87:18:ca:0d:23:5b:29:f9: cc:27:27:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2RjI2Rjk4MjdCMjQz NzAyRERBQUEzNkQxMDU5MTYxQUE1REEwQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3nAKmFDPQyI9q2G1aA3pJ7efTXQWwcQrwFOrgCtw0MkEXO1r/ wXeVSQPt7TlZOURVsBpOL6k5nYG6MAhblWyeTtJqwmEcW3D+WkR12utrcYg23tCy JikpB6ambSvFOvNY2nG9jDJxaoOVZErwPedpbRuJ+OKPNeSrSfuVbOFhgw0eXu5h /S3IT+yWSQtcVjnDuTMBSETTbEbpDZAhQzyYFyjb6ArCoao+4ikNMHqRFGe8xYWK s+1SFKaKMQP6stQWvxG8y5yvkAGl6/S39V2rC7CZ7GjsIU6WOmA3T7wI3F5MLPvR IT1VJDwUvGj6aF9+hnmajggOxFn7GmYIxt6PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFvJvmCeyQ3At2qo20QWRYapdoMcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Z2SnZtQ2V5UTNBdDJxbzIw UVdSWWFwZG9NYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wvAwDQYJKoZIhvcNAQELBQADggEBAEc5SWYUaqmJss6ySXkTahTd3mDxxjLdOh04 D9VIYNW0joDBtLvq5um29plLp/bi+PXSvsiZI2v7PQEYwXXUrEinyLasSdvUSLku rGI2q07YnF9C0IwSpKkfuP+EF7KjyPXI/TsPpfSXq/Kz1ofqWNNV009BqYwcKYfm 2Ck58jA3IjF4RHbLP1WrnmkSdA30X+iE/GgM7E4VBLM7pCHYlRNTHHSVBj3vpzjl 3Lca9V28lIZwSLxihvQNY06cR6dS8W97Y1L5dK+0dLJwE8isxyWaaIw4RAgMawhm 8LxOOc2j0ExkA5zkzaR214cQ34+qRFRpuaCHGMoNI1sp+cwnJx4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org