$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InIljJ4yxnNyH4VlW_X3TbAmUtc.roa File: InIljJ4yxnNyH4VlW_X3TbAmUtc.roa (raw, json) Hash identifier: 6BumevvZD9p2OkzUSiY0xkye8jIE56vDpxtNcRlgJhE= Subject key identifier: 22:72:25:8C:9E:32:C6:73:72:1F:85:65:5B:F5:F7:4D:B0:26:52:D7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 280A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InIljJ4yxnNyH4VlW_X3TbAmUtc.roa Signing time: Fri 01 Sep 2023 10:04:52 +0000 ROA not before: Fri 01 Sep 2023 10:04:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.195.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10250 (0x280a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2272258C9E32C673721F85655BF5F74DB02652D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:ef:9b:e4:7f:83:88:48:75:ac:7b:7c:63: d9:80:99:8a:c4:9e:ba:0f:69:0c:38:b6:1a:94:f6: 3e:63:a0:e0:7d:00:70:ac:f4:a4:c1:10:9b:6f:f0: eb:1c:de:31:4b:dc:5b:ae:a4:4c:0d:8c:43:a5:aa: 76:d4:b0:ab:af:01:56:21:d2:24:20:ed:5d:64:9f: 67:a5:78:9d:8b:be:e2:f0:c3:ec:88:f2:c3:d0:75: b7:aa:dd:85:cc:a3:51:23:33:99:a8:66:01:7a:eb: 34:35:22:08:5f:22:2e:50:a2:81:b6:df:72:b4:fe: d5:f5:5b:72:f3:37:6b:1e:ce:84:94:bc:3b:c0:2a: db:cb:b9:86:ef:f3:43:11:5a:d5:e1:1f:01:e2:44: aa:85:66:1f:6e:73:39:8a:44:de:5b:48:8d:56:24: 52:9c:2e:52:3f:6e:43:85:2d:30:0f:6a:76:f9:25: 90:92:9a:20:ca:18:31:eb:d6:30:dc:46:11:93:ab: a8:8a:75:31:db:30:6c:a2:56:80:fa:d7:81:d8:80: 8e:2a:f5:79:e2:4a:41:32:2f:16:6e:c6:f1:16:e0: 95:d0:3f:54:57:04:0f:e2:98:ad:83:21:aa:4c:dc: be:b7:82:d8:fa:b8:f9:7c:74:34:4d:c2:1d:4c:48: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:25:8C:9E:32:C6:73:72:1F:85:65:5B:F5:F7:4D:B0:26:52:D7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InIljJ4yxnNyH4VlW_X3TbAmUtc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.160.0/19 Signature Algorithm: sha256WithRSAEncryption 11:71:a3:d5:85:8a:c2:f7:74:ec:f9:c1:ab:83:14:a6:67:f6: e0:92:4b:c4:16:3b:c4:51:24:08:8a:3a:07:04:c3:c0:9c:aa: cf:47:87:62:85:a5:df:bb:8b:0e:6a:86:5a:a6:fc:8c:e9:ec: 06:de:83:90:42:e6:a8:d2:91:dd:23:6a:aa:40:2a:65:74:e2: 5d:0e:13:8a:1a:31:af:6f:8a:e9:c8:6f:7f:6e:55:c8:6e:9e: 0a:d7:59:80:43:f4:0b:13:df:1b:ea:5d:21:22:66:3b:eb:e2: b2:75:a3:84:24:2f:b8:d4:0a:a9:fb:10:14:9e:42:8c:94:4e: e5:d0:db:97:db:cb:a7:ea:0d:26:21:61:9d:c9:b9:c3:5a:eb: cd:31:74:7d:80:30:09:83:26:7b:28:a1:da:23:fa:0d:c1:a5: 66:95:83:47:40:92:04:13:fa:ab:68:23:fd:2d:22:00:00:d6: 56:8e:69:a6:1c:7c:e2:67:d5:a9:80:b3:dd:2a:ad:58:d8:c9: c7:e1:11:2a:c6:31:10:b2:9c:55:ea:fa:be:2c:30:ee:b1:b5: 3a:1e:de:42:42:fb:44:83:cd:88:0b:0c:5d:f5:1e:2f:e5:d5: ff:a7:28:51:32:d7:a0:ac:82:db:35:85:5b:17:eb:e4:f6:9e: 75:e3:ce:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIyNzIyNThDOUUzMkM2 NzM3MjFGODU2NTVCRjVGNzREQjAyNjUyRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSCO+b5H+DiEh1rHt8Y9mAmYrEnroPaQw4thqU9j5joOB9AHCs 9KTBEJtv8Osc3jFL3FuupEwNjEOlqnbUsKuvAVYh0iQg7V1kn2eleJ2LvuLww+yI 8sPQdbeq3YXMo1EjM5moZgF66zQ1IghfIi5QooG233K0/tX1W3LzN2sezoSUvDvA KtvLuYbv80MRWtXhHwHiRKqFZh9uczmKRN5bSI1WJFKcLlI/bkOFLTAPanb5JZCS miDKGDHr1jDcRhGTq6iKdTHbMGyiVoD614HYgI4q9XniSkEyLxZuxvEW4JXQP1RX BA/imK2DIapM3L63gtj6uPl8dDRNwh1MSBDVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUInIljJ4yxnNyH4VlW/X3TbAmUtcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0luSWxqSjR5eG5OeUg0VmxX X1gzVGJBbVV0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 w6AwDQYJKoZIhvcNAQELBQADggEBABFxo9WFisL3dOz5wauDFKZn9uCSS8QWO8RR JAiKOgcEw8Ccqs9Hh2KFpd+7iw5qhlqm/Izp7Abeg5BC5qjSkd0jaqpAKmV04l0O E4oaMa9viunIb39uVchungrXWYBD9AsT3xvqXSEiZjvr4rJ1o4QkL7jUCqn7EBSe QoyUTuXQ25fby6fqDSYhYZ3JucNa680xdH2AMAmDJnsoodoj+g3BpWaVg0dAkgQT +qtoI/0tIgAA1laOaaYcfOJn1amAs90qrVjYycfhESrGMRCynFXq+r4sMO6xtToe 3kJC+0SDzYgLDF31Hi/l1f+nKFEy16Csgts1hVsX6+T2nnXjzpQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org