$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa File: GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa (raw, json) Hash identifier: 97b1nYgf0Zxcok+0CMU7jDM2LPDEeHZCJhhYKWaBFbo= Subject key identifier: 1B:10:EF:B4:E9:CD:66:F2:D3:37:92:7C:3E:42:6C:63:26:74:18:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2833 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa Signing time: Fri 01 Sep 2023 10:05:04 +0000 ROA not before: Fri 01 Sep 2023 10:05:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10291 (0x2833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1B10EFB4E9CD66F2D337927C3E426C632674188A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:41:06:79:fa:73:3f:cc:10:b5:4b:ab:e7: e8:a5:ad:8b:ab:ca:45:3b:8e:8c:d9:4c:4a:b7:07: a6:5c:65:cd:74:5f:7b:b9:4e:9e:ad:d8:29:54:c3: 66:5a:06:58:87:93:1e:2a:74:2f:4b:5c:c4:18:71: 3b:33:29:05:a2:cd:0b:91:00:08:81:5e:25:36:de: 3b:0c:21:8d:f4:43:4f:f4:f9:1d:d6:75:f4:dd:81: 6c:b8:db:e0:6a:6a:3b:27:b3:d7:3c:30:f2:29:31: 36:73:d2:14:31:78:92:b1:b4:56:03:e1:84:e2:5a: d3:8d:5f:9c:4c:c8:b6:ad:8d:91:9a:12:50:e7:8d: cd:1e:a6:c8:80:70:a7:b6:43:46:aa:0d:10:54:6d: 0b:1c:62:34:58:e0:82:d1:0c:20:40:80:d9:fd:3e: f7:d6:e8:3f:5c:7a:ae:28:d2:cf:5f:69:ac:b8:9f: 66:c3:84:52:8f:17:80:a9:8a:bf:45:12:05:15:d6: 0a:9b:b8:77:a0:89:66:4c:16:bd:ed:69:e1:49:bb: 83:1b:bb:bf:a9:2c:af:9f:4c:91:a3:5a:be:87:e2: 59:f6:b7:16:7d:85:ee:5b:47:09:e8:8e:b0:e0:fe: b5:c1:2b:da:5e:b5:92:17:5c:dc:24:ef:1d:aa:11: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:10:EF:B4:E9:CD:66:F2:D3:37:92:7C:3E:42:6C:63:26:74:18:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/21 Signature Algorithm: sha256WithRSAEncryption 40:e6:51:62:5e:9c:0a:b0:ae:4e:c4:e1:d6:fb:af:c9:b9:5d: 96:7d:76:0d:5f:d6:58:48:a1:63:8e:d7:95:f3:c9:f8:b3:c3: 40:64:8e:68:96:d0:c0:b9:f6:ac:55:77:77:39:e2:2b:9a:53: 84:97:69:35:37:c5:33:9c:49:61:7e:70:c1:27:f7:bf:2d:c3: 4a:f7:44:24:10:eb:97:54:e4:ee:07:7a:b0:e8:85:ca:7c:65: 3b:35:a8:e5:05:d7:45:5c:3f:f7:a9:f8:8d:4b:07:b2:a5:fd: b4:8c:e0:e6:52:69:be:16:9f:aa:40:9f:ba:9b:10:1c:f7:21: 50:2f:43:e3:e9:d9:22:01:00:ad:00:5c:43:e2:b1:ba:4a:dd: 54:e7:6d:d7:0b:aa:ee:3c:e9:9e:17:83:38:d0:13:f9:70:4a: 49:9d:e3:f2:06:3f:97:94:7e:61:48:3d:d8:7b:31:c8:41:66: b3:14:f9:53:33:2b:32:39:db:56:0c:bb:94:32:15:bb:68:e8: ac:ac:91:b6:2e:66:74:7b:db:75:cc:dc:be:a8:59:b9:b4:33: 00:3d:af:33:8a:40:16:ec:77:a0:bf:c6:c2:b2:a9:af:d3:78: fc:d0:a8:a8:c8:00:a1:dd:92:3b:bc:f3:eb:e7:7c:d5:4b:2c: aa:29:a0:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFCMTBFRkI0RTlDRDY2 RjJEMzM3OTI3QzNFNDI2QzYzMjY3NDE4OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrzkEGefpzP8wQtUur5+ilrYurykU7jozZTEq3B6ZcZc10X3u5 Tp6t2ClUw2ZaBliHkx4qdC9LXMQYcTszKQWizQuRAAiBXiU23jsMIY30Q0/0+R3W dfTdgWy42+Bqajsns9c8MPIpMTZz0hQxeJKxtFYD4YTiWtONX5xMyLatjZGaElDn jc0epsiAcKe2Q0aqDRBUbQscYjRY4ILRDCBAgNn9PvfW6D9ceq4o0s9faay4n2bD hFKPF4Cpir9FEgUV1gqbuHegiWZMFr3taeFJu4Mbu7+pLK+fTJGjWr6H4ln2txZ9 he5bRwnojrDg/rXBK9petZIXXNwk7x2qEfdtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGxDvtOnNZvLTN5J8PkJsYyZ0GIowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0d4RHZ0T25OWnZMVE41SjhQ a0pzWXlaMEdJby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 woAwDQYJKoZIhvcNAQELBQADggEBAEDmUWJenAqwrk7E4db7r8m5XZZ9dg1f1lhI oWOO15Xzyfizw0BkjmiW0MC59qxVd3c54iuaU4SXaTU3xTOcSWF+cMEn978tw0r3 RCQQ65dU5O4HerDohcp8ZTs1qOUF10VcP/ep+I1LB7Kl/bSM4OZSab4Wn6pAn7qb EBz3IVAvQ+Pp2SIBAK0AXEPisbpK3VTnbdcLqu486Z4XgzjQE/lwSkmd4/IGP5eU fmFIPdh7MchBZrMU+VMzKzI521YMu5QyFbto6KyskbYuZnR723XM3L6oWbm0MwA9 rzOKQBbsd6C/xsKyqa/TePzQqKjIAKHdkju88+vnfNVLLKopoNY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org