$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-iGXRa9Eew2rrjOtzstcqw-Hew.roa File: L-iGXRa9Eew2rrjOtzstcqw-Hew.roa (raw, json) Hash identifier: 3k1GMk/BPv98fRS+h/w3wrShGLnlPLi/0m2GZsqyeaY= Subject key identifier: 2F:E8:86:5D:16:BD:11:EC:36:AE:B8:CE:B7:3B:2D:72:AC:3E:1D:EC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28F9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-iGXRa9Eew2rrjOtzstcqw-Hew.roa Signing time: Fri 01 Sep 2023 10:06:00 +0000 ROA not before: Fri 01 Sep 2023 10:06:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.192.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10489 (0x28f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2FE8865D16BD11EC36AEB8CEB73B2D72AC3E1DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:4c:31:9e:dc:9a:f1:7e:18:38:2d:32:3a: 75:b8:f0:03:c4:76:55:a7:fb:d4:13:29:10:ec:83: 55:41:0a:01:cd:f9:b2:35:44:05:ba:31:e2:9e:a7: c6:c3:b8:6e:36:db:61:b3:46:de:46:fa:4d:1b:db: 6d:8a:13:81:a1:79:d2:ce:15:0b:3b:52:d3:cd:62: ea:4a:6a:e2:19:c9:0d:37:c8:50:6b:5d:4e:5f:4f: 91:c2:d6:dc:73:7c:85:fc:79:cd:66:34:87:d0:8e: 12:61:9b:ab:ea:1f:2c:9e:0b:ad:81:bf:56:ff:37: 4e:5d:e5:90:c8:4f:19:79:e7:29:be:4b:70:83:24: 8f:b5:46:de:1e:97:b3:35:ad:7d:d5:1b:60:07:d1: 43:63:d8:a3:23:3d:6e:c7:cd:ab:63:9b:68:1d:39: e6:67:16:b6:d8:18:7d:ce:21:f4:ac:b3:56:a6:4a: 74:9e:30:cf:c8:fb:12:7a:aa:e5:fa:39:88:3c:c0: c3:ce:4f:85:9f:e4:59:22:6b:47:4d:e7:1c:53:44: 18:6a:35:7d:ec:cc:f3:38:c7:80:3c:ed:53:13:d3: 6d:91:22:fc:ab:5d:28:b6:33:b2:77:58:f3:50:7a: 74:7f:ec:6a:40:73:26:0c:fb:b0:c6:f5:7a:32:1b: a3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E8:86:5D:16:BD:11:EC:36:AE:B8:CE:B7:3B:2D:72:AC:3E:1D:EC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-iGXRa9Eew2rrjOtzstcqw-Hew.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/24 Signature Algorithm: sha256WithRSAEncryption 79:79:dc:42:48:fb:d0:ca:c5:b3:6d:d2:fe:df:70:91:7c:0b: 0b:26:4a:af:66:86:6d:6a:30:82:3d:c2:67:85:97:3a:c0:0a: 91:02:4e:36:a2:b9:1c:65:54:b3:9b:a8:e8:dc:63:dc:a7:dc: 4d:48:4f:6d:f6:b7:d5:af:70:48:be:b9:1c:c4:a6:20:26:45: 9b:2a:ef:9c:5c:06:5b:9b:a7:57:52:ff:e8:83:89:6a:6c:27: 8c:b5:21:e7:b9:00:53:65:d4:9b:00:29:f8:77:02:14:7f:8b: 84:6f:55:43:ad:ea:2f:ac:02:ef:e6:a3:12:90:c3:9b:cd:6b: ef:89:b2:85:ed:90:e6:22:1d:21:e1:38:7a:01:4c:ae:df:56: d5:db:68:88:8a:6c:f6:54:c7:ec:2b:f5:d7:2c:ce:47:58:97: 72:49:7c:97:63:7b:f7:5f:c0:3d:0d:8e:d9:5c:31:b1:49:d1: 25:ed:7c:5a:2f:9e:fc:f5:f8:cb:42:b5:89:04:14:00:40:84: 07:89:32:1e:c4:5d:f5:42:37:5e:5d:17:23:80:5a:90:71:e2: 70:72:25:ad:75:cc:76:e3:2e:11:c1:1d:24:ea:26:e5:88:09: 72:23:93:50:00:71:f2:98:70:45:a6:28:7e:ac:45:6c:cc:0b: 0e:a3:9d:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJGRTg4NjVEMTZCRDEx RUMzNkFFQjhDRUI3M0IyRDcyQUMzRTFERUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTakwxntya8X4YOC0yOnW48APEdlWn+9QTKRDsg1VBCgHN+bI1 RAW6MeKep8bDuG4222GzRt5G+k0b222KE4GhedLOFQs7UtPNYupKauIZyQ03yFBr XU5fT5HC1txzfIX8ec1mNIfQjhJhm6vqHyyeC62Bv1b/N05d5ZDITxl55ym+S3CD JI+1Rt4el7M1rX3VG2AH0UNj2KMjPW7Hzatjm2gdOeZnFrbYGH3OIfSss1amSnSe MM/I+xJ6quX6OYg8wMPOT4Wf5Fkia0dN5xxTRBhqNX3szPM4x4A87VMT022RIvyr XSi2M7J3WPNQenR/7GpAcyYM+7DG9XoyG6NtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUL+iGXRa9Eew2rrjOtzstcqw+HewwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0wtaUdYUmE5RWV3MnJyak90 enN0Y3F3LUhldy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wJAwDQYJKoZIhvcNAQELBQADggEBAHl53EJI+9DKxbNt0v7fcJF8CwsmSq9mhm1q MII9wmeFlzrACpECTjaiuRxlVLObqOjcY9yn3E1IT232t9WvcEi+uRzEpiAmRZsq 75xcBlubp1dS/+iDiWpsJ4y1Iee5AFNl1JsAKfh3AhR/i4RvVUOt6i+sAu/moxKQ w5vNa++JsoXtkOYiHSHhOHoBTK7fVtXbaIiKbPZUx+wr9dcszkdYl3JJfJdje/df wD0NjtlcMbFJ0SXtfFovnvz1+MtCtYkEFABAhAeJMh7EXfVCN15dFyOAWpBx4nBy Ja11zHbjLhHBHSTqJuWICXIjk1AAcfKYcEWmKH6sRWzMCw6jnZM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org