$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOhCStaslQ17mWC_p195L_3V_8s.roa File: LOhCStaslQ17mWC_p195L_3V_8s.roa (raw, json) Hash identifier: yGkU0YGcR91UA1atcBik+q/CCCbcncn8PSAuASVbxPI= Subject key identifier: 2C:E8:42:4A:D6:AC:95:0D:7B:99:60:BF:A7:5F:79:2F:FD:D5:FF:CB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2940 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOhCStaslQ17mWC_p195L_3V_8s.roa Signing time: Fri 01 Sep 2023 10:06:19 +0000 ROA not before: Fri 01 Sep 2023 10:06:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10560 (0x2940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2CE8424AD6AC950D7B9960BFA75F792FFDD5FFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:ed:de:b2:77:e0:d2:b0:cb:e5:99:10:2e: f1:31:fd:5f:6e:9e:b7:8a:cd:8e:7b:90:7b:76:46: 2c:fa:2d:47:cd:77:51:b3:44:c2:5b:03:a6:ad:b2: 49:e8:5b:20:e1:22:1b:18:eb:bc:eb:0d:26:de:a3: 58:04:f2:25:70:ab:35:ab:6f:0b:a3:c4:fe:d9:33: 8d:e9:9b:ff:a4:87:14:1b:1a:d2:30:aa:5b:a1:e4: e8:43:dd:54:08:20:86:dd:88:59:3a:e9:94:2c:17: d6:ba:ec:f0:11:52:c1:f5:47:91:24:d7:3e:ef:43: 93:9e:ca:2a:e9:28:27:d6:a9:e8:02:35:d5:33:9d: 7d:08:53:90:75:1e:08:79:01:1e:2c:4a:98:d1:5c: 62:00:17:36:9a:c8:fa:1b:bf:ba:89:09:07:84:93: d0:57:aa:5c:10:5c:1d:f7:fc:d0:4a:e3:f6:dd:02: 2e:e0:d4:0d:b6:7a:bd:2a:3f:29:52:e9:2c:9e:d8: ae:95:6d:35:07:0d:8a:bd:8e:16:f3:2e:ca:f9:c7: 04:66:c7:fa:82:63:8a:9a:af:d5:16:0f:8b:cd:9a: 47:8f:7e:89:f8:58:46:cd:87:ba:db:74:36:6f:3b: 67:fc:d0:9e:44:cf:22:68:22:0d:37:36:d8:fe:65: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E8:42:4A:D6:AC:95:0D:7B:99:60:BF:A7:5F:79:2F:FD:D5:FF:CB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOhCStaslQ17mWC_p195L_3V_8s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.8.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:5b:f8:64:67:f9:cc:db:5d:29:09:8b:0e:47:56:68:26:c5: ef:3a:33:ca:90:fb:96:3e:4b:df:cc:55:b9:2a:50:e6:5f:0a: 61:34:f8:fd:db:0a:05:e9:0d:c8:82:18:f3:00:1c:08:a4:b2: 30:b9:2b:7d:8d:d4:79:f1:f4:a8:56:49:5c:94:3d:6d:90:0d: 3a:f0:f1:39:6f:26:fc:3a:e4:4f:7d:14:90:71:aa:b4:20:ce: 2c:73:9f:26:e7:02:eb:c8:06:6c:a6:a9:f4:8f:15:48:0c:c5: 0c:00:33:c8:6a:12:13:d4:21:cc:4c:46:7b:f6:cf:80:ab:95: f7:3d:f1:09:d5:20:12:09:64:91:03:42:66:a5:6f:a6:31:c4: b1:1c:bf:e4:a9:40:bd:42:bc:a6:86:b3:ae:73:69:8c:f6:d1: ed:79:82:39:36:c9:3c:66:2e:6a:0b:df:1d:0b:e7:05:2a:73: a7:a9:97:2d:14:fe:67:31:b4:5b:c3:a0:e0:d6:3e:3b:ce:6e: 86:51:03:83:ee:d5:f5:d0:af:71:21:00:4e:b1:33:53:50:b3: 1d:94:e6:70:1a:ae:93:b3:e3:c6:fc:0f:37:a2:53:8a:97:51: 1f:0a:5d:0e:f5:ac:05:13:58:81:db:f3:b3:54:c0:e7:02:0b: d4:a4:de:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJDRTg0MjRBRDZBQzk1 MEQ3Qjk5NjBCRkE3NUY3OTJGRkRENUZGQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGu3esnfg0rDL5ZkQLvEx/V9unreKzY57kHt2Riz6LUfNd1Gz RMJbA6atsknoWyDhIhsY67zrDSbeo1gE8iVwqzWrbwujxP7ZM43pm/+khxQbGtIw qluh5OhD3VQIIIbdiFk66ZQsF9a67PARUsH1R5Ek1z7vQ5OeyirpKCfWqegCNdUz nX0IU5B1Hgh5AR4sSpjRXGIAFzaayPobv7qJCQeEk9BXqlwQXB33/NBK4/bdAi7g 1A22er0qPylS6Sye2K6VbTUHDYq9jhbzLsr5xwRmx/qCY4qar9UWD4vNmkePfon4 WEbNh7rbdDZvO2f80J5EzyJoIg03Ntj+ZcDrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULOhCStaslQ17mWC/p195L/3V/8swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xPaENTdGFzbFExN21XQ19w MTk1TF8zVl84cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwgwDQYJKoZIhvcNAQELBQADggEBAC5b+GRn+czbXSkJiw5HVmgmxe86M8qQ+5Y+ S9/MVbkqUOZfCmE0+P3bCgXpDciCGPMAHAiksjC5K32N1Hnx9KhWSVyUPW2QDTrw 8TlvJvw65E99FJBxqrQgzixznybnAuvIBmymqfSPFUgMxQwAM8hqEhPUIcxMRnv2 z4Crlfc98QnVIBIJZJEDQmalb6YxxLEcv+SpQL1CvKaGs65zaYz20e15gjk2yTxm LmoL3x0L5wUqc6eply0U/mcxtFvDoODWPjvOboZRA4Pu1fXQr3EhAE6xM1NQsx2U 5nAarpOz48b8DzeiU4qXUR8KXQ71rAUTWIHb87NUwOcCC9Sk3vw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org