$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IRN71tlMZOv7k0XJcvO8XuGRSL4.roa File: IRN71tlMZOv7k0XJcvO8XuGRSL4.roa (raw, json) Hash identifier: 0BJDSSc/X2kOyd9TvtINxn5IVHJz8RGQEG3UFudyrFQ= Subject key identifier: 21:13:7B:D6:D9:4C:64:EB:FB:93:45:C9:72:F3:BC:5E:E1:91:48:BE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2927 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IRN71tlMZOv7k0XJcvO8XuGRSL4.roa Signing time: Fri 01 Sep 2023 10:06:13 +0000 ROA not before: Fri 01 Sep 2023 10:06:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10535 (0x2927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=21137BD6D94C64EBFB9345C972F3BC5EE19148BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:cf:09:e0:b7:b4:37:20:00:9b:d2:b3:ff: 24:8a:69:7e:06:4a:18:02:3e:f6:9f:d3:1f:f1:de: 73:e8:74:2d:d1:f7:91:7e:08:de:cd:e5:28:a2:a8: 06:71:48:86:b2:c2:6d:26:62:2e:53:b1:8c:2e:6a: a5:5b:6a:21:3c:d4:b9:98:7e:ba:6e:1a:8d:f2:f7: 06:67:0e:60:e9:81:2f:31:f8:bd:5d:42:b1:2d:df: d0:1b:9a:48:bb:63:31:6f:10:44:2f:6e:00:3b:36: 47:68:91:24:6b:f6:b8:17:0c:8e:4a:d6:9d:92:25: 4d:05:86:d5:8d:96:c6:92:71:85:88:6a:3d:28:de: 7a:0a:d3:ce:be:30:fb:87:47:11:97:b1:0a:c3:15: 87:28:4f:1d:e9:86:42:de:6a:32:29:91:fd:85:f6: 2a:25:c0:a2:7f:2f:98:f3:ce:b6:c6:54:bc:07:56: 8b:69:83:b2:96:bb:2e:00:41:6c:8b:0a:cc:2c:18: 3d:d6:3f:04:5a:61:fc:f8:c5:b6:12:38:df:31:01: 33:2b:19:f5:d9:09:e8:51:70:62:c1:c8:c2:76:41: 1a:01:d6:c6:4a:ab:3d:7c:23:5d:fa:98:1a:6d:a1: 02:fc:81:41:bc:0d:0d:8a:da:27:fb:b0:89:ef:d7: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:13:7B:D6:D9:4C:64:EB:FB:93:45:C9:72:F3:BC:5E:E1:91:48:BE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IRN71tlMZOv7k0XJcvO8XuGRSL4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.64.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:fa:df:6a:8a:6b:15:71:6e:55:63:fb:7c:00:f2:8c:77:30: 65:ac:7c:bc:08:82:83:fc:bc:7c:96:b8:ac:8b:5c:0e:39:6d: 69:d9:b2:7b:58:7c:2d:5c:b0:c4:5e:c5:6e:1c:ce:db:92:2f: 41:1e:e6:d1:a9:49:bb:7e:e8:11:7a:1d:d2:9f:54:c3:0c:a0: 1a:e7:68:74:a5:f2:bd:14:df:33:89:58:ee:84:6a:56:e9:39: e3:f9:43:fe:60:2a:7a:c5:46:9f:5f:66:9d:81:c7:43:98:83: a7:f1:b8:f5:e2:f6:f9:2b:44:d7:e6:35:36:51:aa:07:98:5b: 6e:59:89:38:d0:31:90:ce:53:39:be:e1:35:6c:67:18:e2:4e: 50:74:c5:65:8e:93:7d:62:0a:85:db:40:11:ea:6c:2a:f8:0f: 44:4a:97:58:9b:50:7f:2f:eb:c3:c4:11:60:8d:19:29:5d:f0: e2:97:62:1b:0f:eb:d0:44:39:cd:b9:81:a9:fa:76:8d:c5:9b: 57:4b:70:b7:70:27:0b:91:42:63:fb:d6:72:4c:61:ac:a5:eb: 6f:c9:1c:69:83:1e:d2:f4:db:7b:9d:8c:57:20:e9:d3:5f:b0: 8c:ab:4d:a7:f6:48:ee:48:4e:a3:4b:fe:69:55:ac:97:27:ed: 2c:15:6a:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIxMTM3QkQ2RDk0QzY0 RUJGQjkzNDVDOTcyRjNCQzVFRTE5MTQ4QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIqc8J4Le0NyAAm9Kz/ySKaX4GShgCPvaf0x/x3nPodC3R95F+ CN7N5SiiqAZxSIaywm0mYi5TsYwuaqVbaiE81LmYfrpuGo3y9wZnDmDpgS8x+L1d QrEt39Abmki7YzFvEEQvbgA7NkdokSRr9rgXDI5K1p2SJU0FhtWNlsaScYWIaj0o 3noK086+MPuHRxGXsQrDFYcoTx3phkLeajIpkf2F9iolwKJ/L5jzzrbGVLwHVotp g7KWuy4AQWyLCswsGD3WPwRaYfz4xbYSON8xATMrGfXZCehRcGLByMJ2QRoB1sZK qz18I136mBptoQL8gUG8DQ2K2if7sInv143VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIRN71tlMZOv7k0XJcvO8XuGRSL4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lSTjcxdGxNWk92N2swWEpj dk84WHVHUlNMNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w0AwDQYJKoZIhvcNAQELBQADggEBAI3632qKaxVxblVj+3wA8ox3MGWsfLwIgoP8 vHyWuKyLXA45bWnZsntYfC1csMRexW4cztuSL0Ee5tGpSbt+6BF6HdKfVMMMoBrn aHSl8r0U3zOJWO6EalbpOeP5Q/5gKnrFRp9fZp2Bx0OYg6fxuPXi9vkrRNfmNTZR qgeYW25ZiTjQMZDOUzm+4TVsZxjiTlB0xWWOk31iCoXbQBHqbCr4D0RKl1ibUH8v 68PEEWCNGSld8OKXYhsP69BEOc25gan6do3Fm1dLcLdwJwuRQmP71nJMYayl62/J HGmDHtL023udjFcg6dNfsIyrTaf2SO5ITqNL/mlVrJcn7SwVakw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org