$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa File: HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa (raw, json) Hash identifier: gOJzWm+jcyCuperTmbjIUhOldw0/mOpOcOaMvA/+rEc= Subject key identifier: 1E:79:CE:53:72:AB:E9:0B:18:D2:8D:D0:00:C5:0B:7E:CE:8F:A9:98 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B1C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa Signing time: Fri 01 Sep 2023 10:09:51 +0000 ROA not before: Fri 01 Sep 2023 10:09:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11036 (0x2b1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1E79CE5372ABE90B18D28DD000C50B7ECE8FA998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:41:fb:a0:39:83:5a:9e:e5:50:88:fe:e5: a3:93:1b:c2:c4:9b:32:89:0c:ad:ae:f3:69:ca:72: 03:43:2f:5c:4e:27:d7:97:d4:03:57:36:17:3b:df: 49:c7:37:ee:42:eb:d1:79:7c:3c:4f:03:f3:4c:fe: 7e:02:bd:68:f6:90:1c:0d:b2:57:1b:89:40:cb:ce: c3:b1:4b:84:04:1f:8e:69:f7:36:67:63:e5:e5:20: c5:98:10:1d:27:25:a8:3a:18:80:a9:ae:13:93:b0: fd:28:7b:d4:4e:6d:4b:5c:c8:98:36:bd:b5:f9:a6: 16:8a:a6:a7:40:74:2d:f5:c6:ab:7a:41:2f:9f:99: 7e:ac:76:fa:84:97:09:2e:b5:94:65:36:af:53:2f: 1a:85:f1:07:a2:57:c6:45:d5:76:44:ec:d6:11:4e: 8d:e8:81:4a:27:30:79:fc:ee:cd:b0:3c:30:5f:08: d1:9c:97:4e:9c:4a:31:9b:5a:21:22:7a:30:b1:0f: 74:2e:b1:ef:13:fd:b4:8f:ea:22:bb:2b:b6:e4:d9: f0:9a:73:e0:17:eb:b3:4c:6e:21:72:71:1d:bf:93: 95:a1:81:09:7f:29:16:bc:97:c1:ac:8e:9d:22:15: 83:64:b4:d5:a3:e6:45:fb:41:07:30:59:8b:76:17: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:79:CE:53:72:AB:E9:0B:18:D2:8D:D0:00:C5:0B:7E:CE:8F:A9:98 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.40.0/22 Signature Algorithm: sha256WithRSAEncryption 02:fa:f5:23:75:c0:dc:b2:ed:cb:29:d3:c7:c2:1c:8e:fe:d4: c0:66:ae:27:2b:60:05:e2:f6:21:ba:f8:14:3c:4b:0a:8f:7a: 12:50:71:24:f6:21:48:39:8d:c2:1b:b5:b9:c1:62:67:51:dd: 97:a1:4e:70:2b:6c:fb:d9:7b:07:0d:82:4f:6b:aa:a1:a8:74: 29:56:68:50:68:a6:bf:0a:c3:5d:ed:97:aa:98:e3:fe:50:c7: 42:6e:d5:3d:4c:ef:8d:97:41:42:a7:f5:1e:f5:f7:17:e8:c8: de:16:46:e0:fc:8a:55:7b:c1:6a:e5:6c:05:5e:be:5f:70:9a: 87:d6:7b:11:2d:17:76:a6:a4:25:a5:14:c3:81:72:ce:64:c6: dd:17:ad:7e:aa:27:90:b3:d7:73:84:c0:26:bd:58:d3:38:7c: 39:b2:95:44:fe:b8:26:66:ef:3c:30:a2:a9:76:c0:c3:de:6f: 62:d0:80:33:2a:45:30:8a:f4:de:31:9d:84:82:32:51:20:15: ac:96:c6:88:be:13:e6:13:c8:7e:ba:4e:f6:5c:5f:c8:19:63: 5c:70:97:e4:c7:14:46:80:8b:55:47:04:90:c8:21:58:50:55: a4:87:bf:bb:ea:f1:16:52:99:b8:3c:ce:18:5f:30:14:ba:5b: 93:d3:fe:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFFNzlDRTUzNzJBQkU5 MEIxOEQyOEREMDAwQzUwQjdFQ0U4RkE5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdmEH7oDmDWp7lUIj+5aOTG8LEmzKJDK2u82nKcgNDL1xOJ9eX 1ANXNhc730nHN+5C69F5fDxPA/NM/n4CvWj2kBwNslcbiUDLzsOxS4QEH45p9zZn Y+XlIMWYEB0nJag6GICprhOTsP0oe9RObUtcyJg2vbX5phaKpqdAdC31xqt6QS+f mX6sdvqElwkutZRlNq9TLxqF8QeiV8ZF1XZE7NYRTo3ogUonMHn87s2wPDBfCNGc l06cSjGbWiEiejCxD3Quse8T/bSP6iK7K7bk2fCac+AX67NMbiFycR2/k5WhgQl/ KRa8l8Gsjp0iFYNktNWj5kX7QQcwWYt2F/jLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHnnOU3Kr6QsY0o3QAMULfs6PqZgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hubk9VM0tyNlFzWTBvM1FB TVVMZnM2UHFaZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wCgwDQYJKoZIhvcNAQELBQADggEBAAL69SN1wNyy7csp08fCHI7+1MBmricrYAXi 9iG6+BQ8SwqPehJQcST2IUg5jcIbtbnBYmdR3ZehTnArbPvZewcNgk9rqqGodClW aFBopr8Kw13tl6qY4/5Qx0Ju1T1M742XQUKn9R719xfoyN4WRuD8ilV7wWrlbAVe vl9wmofWexEtF3ampCWlFMOBcs5kxt0XrX6qJ5Cz13OEwCa9WNM4fDmylUT+uCZm 7zwwoql2wMPeb2LQgDMqRTCK9N4xnYSCMlEgFayWxoi+E+YTyH66TvZcX8gZY1xw l+THFEaAi1VHBJDIIVhQVaSHv7vq8RZSmbg8zhhfMBS6W5PT/uk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org