$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JoU6u8RuSaLQArJ1SCkpISMW_tQ.roa File: JoU6u8RuSaLQArJ1SCkpISMW_tQ.roa (raw, json) Hash identifier: vmw8XXC8rHUnbClXUgLQ73wRgbmhRissdqCt1qVcxBw= Subject key identifier: 26:85:3A:BB:C4:6E:49:A2:D0:02:B2:75:48:29:29:21:23:16:FE:D4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28BD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JoU6u8RuSaLQArJ1SCkpISMW_tQ.roa Signing time: Fri 01 Sep 2023 10:05:43 +0000 ROA not before: Fri 01 Sep 2023 10:05:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10429 (0x28bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=26853ABBC46E49A2D002B275482929212316FED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:f6:96:b4:6c:b3:ce:8b:81:5e:df:26:8b: 7a:9d:32:44:a7:e1:1c:41:af:56:0a:8d:ee:1f:d2: a5:0c:2c:38:c7:fb:f7:1d:90:64:a6:f3:39:dc:25: 60:51:80:07:69:d4:85:c0:3a:22:b7:f2:1e:52:a2: 02:83:cd:47:71:00:2f:7f:41:77:9d:07:80:a1:c1: df:93:9a:c2:fa:0c:97:f3:09:19:db:be:56:08:a1: ea:e4:f5:c0:ff:fd:1d:38:29:59:bf:75:c2:c7:0f: 2e:fa:23:ed:19:9d:dc:c4:86:62:9e:46:ff:f4:d2: 65:1f:7e:f6:bf:15:64:cf:e3:65:3a:44:e4:60:f1: ba:cf:ca:ca:18:50:08:94:a9:95:fd:ee:56:bb:21: c2:e2:54:ad:49:13:46:be:ea:db:86:2c:91:7f:79: ae:b6:1c:cc:93:d2:9f:ed:7b:bb:fc:31:a1:ec:41: a4:47:cf:86:d4:c0:04:b8:98:18:c7:82:4c:ef:45: 42:d8:28:cf:53:0f:cd:d7:97:10:02:a3:d7:21:ce: 74:e2:f6:4d:52:e8:d9:d3:d0:2b:f6:b8:13:27:20: d6:d1:a6:f8:71:0c:cb:a0:02:e5:d6:da:bc:4d:af: 4e:4d:a7:5f:49:73:ea:08:a3:f2:6e:92:38:bb:1a: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:85:3A:BB:C4:6E:49:A2:D0:02:B2:75:48:29:29:21:23:16:FE:D4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JoU6u8RuSaLQArJ1SCkpISMW_tQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/22 Signature Algorithm: sha256WithRSAEncryption b9:b7:10:36:6f:03:2d:0f:41:62:16:b7:50:78:4c:c5:4c:f5: 54:30:a6:3e:12:c1:f6:f8:52:47:4c:7f:69:95:aa:9c:31:1b: 61:a4:76:27:31:4e:6e:42:21:b8:b8:47:04:59:99:02:4f:e1: 8a:48:59:56:55:ad:b8:c5:6a:88:14:ef:05:55:9c:91:c9:a9: 6d:f1:96:7b:cb:c4:6c:7f:25:b0:29:e7:19:38:72:1a:28:14: 08:49:75:79:c2:f8:c3:d1:87:81:a7:2c:c7:74:a8:07:fe:dc: b5:80:3e:eb:69:1c:be:94:b0:ce:1a:e7:f1:4d:80:96:18:c1: e3:4e:0e:9e:24:b9:95:b0:53:ab:ec:c6:72:26:79:e4:a5:75: 84:ea:ac:89:97:8a:20:7f:d6:56:66:64:14:75:15:60:5c:2c: d5:be:d4:b5:d2:ba:b2:6e:96:77:f9:88:aa:88:c5:0e:21:ab: 62:fa:03:d1:c5:e3:2a:d2:6c:bb:33:b5:ff:96:6f:5f:8e:b9: 9d:53:00:d5:2a:e5:89:d7:08:74:7b:d3:16:2b:35:c6:7e:56: 74:29:ae:0b:bc:3d:e8:d7:01:a5:5a:13:3a:e9:61:be:87:91: f6:74:91:62:c7:39:ae:32:37:97:f1:97:61:bb:ed:2b:95:d9: a2:47:80:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI2ODUzQUJCQzQ2RTQ5 QTJEMDAyQjI3NTQ4MjkyOTIxMjMxNkZFRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu7/aWtGyzzouBXt8mi3qdMkSn4RxBr1YKje4f0qUMLDjH+/cd kGSm8zncJWBRgAdp1IXAOiK38h5SogKDzUdxAC9/QXedB4Chwd+TmsL6DJfzCRnb vlYIoerk9cD//R04KVm/dcLHDy76I+0ZndzEhmKeRv/00mUffva/FWTP42U6RORg 8brPysoYUAiUqZX97la7IcLiVK1JE0a+6tuGLJF/ea62HMyT0p/te7v8MaHsQaRH z4bUwAS4mBjHgkzvRULYKM9TD83XlxACo9chznTi9k1S6NnT0Cv2uBMnINbRpvhx DMugAuXW2rxNr05Np19Jc+oIo/Jukji7GiwrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJoU6u8RuSaLQArJ1SCkpISMW/tQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pvVTZ1OFJ1U2FMUUFySjFT Q2twSVNNV190US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wJAwDQYJKoZIhvcNAQELBQADggEBALm3EDZvAy0PQWIWt1B4TMVM9VQwpj4Swfb4 UkdMf2mVqpwxG2GkdicxTm5CIbi4RwRZmQJP4YpIWVZVrbjFaogU7wVVnJHJqW3x lnvLxGx/JbAp5xk4chooFAhJdXnC+MPRh4GnLMd0qAf+3LWAPutpHL6UsM4a5/FN gJYYweNODp4kuZWwU6vsxnImeeSldYTqrImXiiB/1lZmZBR1FWBcLNW+1LXSurJu lnf5iKqIxQ4hq2L6A9HF4yrSbLsztf+Wb1+OuZ1TANUq5YnXCHR70xYrNcZ+VnQp rgu8PejXAaVaEzrpYb6HkfZ0kWLHOa4yN5fxl2G77SuV2aJHgH4= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org