$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GRW2XxqoK_MLq4mx5yPIkt6rSoE.roa File: GRW2XxqoK_MLq4mx5yPIkt6rSoE.roa (raw, json) Hash identifier: xFxs9bV8msqFhv13mggl8ivJDkdkzEnUSXRx8QvVAQg= Subject key identifier: 19:15:B6:5F:1A:A8:2B:F3:0B:AB:89:B1:E7:23:C8:92:DE:AB:4A:81 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A5B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GRW2XxqoK_MLq4mx5yPIkt6rSoE.roa Signing time: Fri 01 Sep 2023 10:07:49 +0000 ROA not before: Fri 01 Sep 2023 10:07:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10843 (0x2a5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1915B65F1AA82BF30BAB89B1E723C892DEAB4A81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:39:e4:29:de:3a:72:cb:bd:ba:19:44:80: fc:18:65:f4:04:3d:2c:c3:b0:ed:e6:3b:b5:bd:2f: ec:81:bb:fe:40:32:79:74:5f:82:50:e0:45:6a:cd: 22:cd:87:ce:23:52:cc:14:8f:8f:42:32:12:a7:44: 32:80:39:42:e8:c4:8c:03:57:75:c4:fb:3e:75:80: d4:de:e4:21:ca:23:60:32:dd:df:64:71:d7:22:02: bd:d2:29:5d:20:f3:94:1f:a0:4c:ed:9b:f1:f9:6d: 24:d6:9b:f2:1d:01:40:ee:4b:65:12:b6:13:96:53: 0b:f0:d6:51:c9:a5:15:e5:18:03:59:33:5f:34:e6: 56:5d:97:b4:76:11:5d:d3:5d:ea:80:77:60:55:c1: e0:b8:04:bd:f6:92:86:24:f5:9f:bb:ee:9d:2f:2b: 7d:0c:01:94:e4:c5:0c:20:f8:40:db:56:94:fd:81: 61:11:b7:c7:93:f7:22:e8:66:4b:fa:0c:bf:57:e8: 10:cc:91:ca:87:80:24:38:1a:a0:62:6a:86:eb:6d: 7b:80:bc:06:1f:f0:72:12:99:21:04:db:48:25:3b: c6:d4:c2:e2:77:af:e7:b2:f0:47:8c:59:f8:ed:29: 6c:10:fe:ce:c2:2b:89:a7:53:a2:c9:f5:2f:54:9d: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:B6:5F:1A:A8:2B:F3:0B:AB:89:B1:E7:23:C8:92:DE:AB:4A:81 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GRW2XxqoK_MLq4mx5yPIkt6rSoE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/20 Signature Algorithm: sha256WithRSAEncryption 48:e9:0c:91:10:18:a4:a5:26:7c:a5:bf:22:25:30:de:71:24: 14:54:16:fb:24:fd:4e:58:69:4a:f8:0b:47:43:26:db:c3:5b: 3f:43:ae:ac:f9:ed:b7:be:6f:c0:94:f4:99:92:c6:49:3d:c1: 58:78:ad:b4:ea:13:49:3b:a5:1b:52:05:0a:58:e7:5e:b2:36: cb:17:93:7e:c5:98:c0:bd:92:e3:a8:d8:df:7d:00:46:02:82: 95:1c:2f:60:79:80:ed:10:b7:72:df:cc:a0:00:ef:ba:f5:3b: 70:18:cc:21:f8:66:8e:8d:93:c7:6e:54:a9:a0:f5:75:80:58: 6a:8b:61:b6:1c:e1:0f:63:3d:e7:64:98:81:6f:89:99:ad:00: ef:80:3a:c6:6b:60:54:27:cf:86:c0:04:22:90:cd:8f:a8:98: 0f:e4:bd:a8:6e:ae:38:52:3f:2f:b7:71:7a:27:00:0a:db:69: 9f:1b:58:b9:9f:8c:9c:30:b6:7c:40:46:49:13:0d:fe:af:74: 4c:5a:ae:06:5b:82:04:6c:37:0d:35:ce:d2:af:07:3f:87:f0: 33:ac:48:f6:03:8f:f7:84:16:d9:1a:66:65:fa:7f:3f:bf:53: 37:34:6c:34:80:3d:73:b8:ff:80:d0:48:0f:56:2b:13:81:a4: b9:57:a4:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE5MTVCNjVGMUFBODJC RjMwQkFCODlCMUU3MjNDODkyREVBQjRBODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSRjnkKd46csu9uhlEgPwYZfQEPSzDsO3mO7W9L+yBu/5AMnl0 X4JQ4EVqzSLNh84jUswUj49CMhKnRDKAOULoxIwDV3XE+z51gNTe5CHKI2Ay3d9k cdciAr3SKV0g85QfoEztm/H5bSTWm/IdAUDuS2USthOWUwvw1lHJpRXlGANZM180 5lZdl7R2EV3TXeqAd2BVweC4BL32koYk9Z+77p0vK30MAZTkxQwg+EDbVpT9gWER t8eT9yLoZkv6DL9X6BDMkcqHgCQ4GqBiaobrbXuAvAYf8HISmSEE20glO8bUwuJ3 r+ey8EeMWfjtKWwQ/s7CK4mnU6LJ9S9UnawDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGRW2XxqoK/MLq4mx5yPIkt6rSoEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dSVzJYeHFvS19NTHE0bXg1 eVBJa3Q2clNvRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wAAwDQYJKoZIhvcNAQELBQADggEBAEjpDJEQGKSlJnylvyIlMN5xJBRUFvsk/U5Y aUr4C0dDJtvDWz9Drqz57be+b8CU9JmSxkk9wVh4rbTqE0k7pRtSBQpY516yNssX k37FmMC9kuOo2N99AEYCgpUcL2B5gO0Qt3LfzKAA77r1O3AYzCH4Zo6Nk8duVKmg 9XWAWGqLYbYc4Q9jPedkmIFviZmtAO+AOsZrYFQnz4bABCKQzY+omA/kvahurjhS Py+3cXonAArbaZ8bWLmfjJwwtnxARkkTDf6vdExargZbggRsNw01ztKvBz+H8DOs SPYDj/eEFtkaZmX6fz+/Uzc0bDSAPXO4/4DQSA9WKxOBpLlXpMI= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org