$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M4C2N2rftWTORyWuz6fjOcBmbwg.roa File: M4C2N2rftWTORyWuz6fjOcBmbwg.roa (raw, json) Hash identifier: fuKzhhluBP9JfV5HLGwypPfYH1uOnlaCvlE22Xfa5+I= Subject key identifier: 33:80:B6:37:6A:DF:B5:64:CE:47:25:AE:CF:A7:E3:39:C0:66:6F:08 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A9C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M4C2N2rftWTORyWuz6fjOcBmbwg.roa Signing time: Fri 01 Sep 2023 10:08:06 +0000 ROA not before: Fri 01 Sep 2023 10:08:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10908 (0x2a9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3380B6376ADFB564CE4725AECFA7E339C0666F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:a6:ea:d3:5d:73:2d:a0:3c:51:0a:fd:2c: 9c:04:b3:80:73:04:20:5a:9b:75:12:8d:81:7c:c1: 93:91:43:62:a4:a9:89:15:64:ea:fe:03:45:3f:08: cc:22:d3:2f:4f:30:47:c6:26:d5:42:aa:ad:61:3f: a3:17:23:d4:c4:8a:f9:db:6d:77:36:70:d9:f5:17: bd:81:8d:61:d1:d4:20:7e:43:1a:8a:cc:c5:82:27: 71:92:62:a7:6d:a0:43:07:c1:21:bf:67:17:1e:e8: 0f:72:d4:42:5b:f4:9b:b9:ea:d1:f4:74:ac:e8:ad: 82:64:97:cb:fd:bb:7f:fe:6f:9a:d0:a4:c8:fd:94: 06:c1:b1:fd:c9:a4:de:d9:4c:ae:48:89:80:ef:6d: e3:80:00:c2:70:1d:af:6a:c9:83:2b:7d:2b:29:4e: 91:e7:b6:0d:21:bd:8d:be:c0:b4:b9:33:ad:f0:95: 23:83:b1:b6:38:02:6c:3b:dc:39:c8:7e:c6:33:76: a0:3e:a5:00:0b:94:e0:51:b1:35:ba:fb:db:1b:4a: 50:c6:79:35:fe:bb:4c:55:a5:c6:05:65:6a:82:ae: c2:00:40:73:70:a3:48:0a:72:36:25:48:e1:96:09: 85:70:7f:9f:65:b8:a8:66:4d:ae:cb:2d:85:ff:76: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:B6:37:6A:DF:B5:64:CE:47:25:AE:CF:A7:E3:39:C0:66:6F:08 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M4C2N2rftWTORyWuz6fjOcBmbwg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.96.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:14:b6:c2:43:89:64:43:c9:49:a7:40:ac:e1:9d:a2:5c:5a: 46:d6:15:bb:1d:df:e7:0a:bb:fa:85:04:d6:9b:14:11:70:33: 7d:c6:69:ba:f7:eb:d0:72:39:05:95:b4:04:b6:f8:39:d1:07: 0a:7f:82:b0:30:7b:6b:a3:c1:6d:62:40:e9:84:44:3d:03:c4: be:99:ad:a9:84:86:26:bd:5f:98:27:c7:90:0d:dd:a2:dc:2d: b8:8f:82:49:57:55:14:12:5b:ac:8e:5c:fc:e2:a8:89:0e:34: 93:1f:f0:10:f0:24:10:4b:98:50:79:dc:8d:e8:76:cc:71:19: fc:10:b4:f0:a3:51:4b:4d:21:f0:5b:10:fe:43:33:a0:93:b4: 73:12:49:1d:ab:dc:67:81:18:b1:19:75:c3:3f:95:b6:54:ff: 2c:e8:7d:0e:e2:b1:55:93:ed:ca:6b:49:2e:bd:0b:7f:f5:b4: 5a:bf:f8:7b:d3:3a:f7:7b:ee:f6:04:27:ba:23:e7:1b:90:0f: a5:14:d5:c7:09:d9:1d:be:5a:19:bb:4e:86:f2:bb:6c:85:f0: 46:45:ff:87:c9:34:81:35:90:dc:67:74:87:be:6d:a6:3a:c9: 41:97:fc:d8:da:51:f1:a8:b9:2a:22:c7:e4:72:67:82:e9:f5: 6e:b1:aa:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMzODBCNjM3NkFERkI1 NjRDRTQ3MjVBRUNGQTdFMzM5QzA2NjZGMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfyabq011zLaA8UQr9LJwEs4BzBCBam3USjYF8wZORQ2KkqYkV ZOr+A0U/CMwi0y9PMEfGJtVCqq1hP6MXI9TEivnbbXc2cNn1F72BjWHR1CB+QxqK zMWCJ3GSYqdtoEMHwSG/Zxce6A9y1EJb9Ju56tH0dKzorYJkl8v9u3/+b5rQpMj9 lAbBsf3JpN7ZTK5IiYDvbeOAAMJwHa9qyYMrfSspTpHntg0hvY2+wLS5M63wlSOD sbY4Amw73DnIfsYzdqA+pQALlOBRsTW6+9sbSlDGeTX+u0xVpcYFZWqCrsIAQHNw o0gKcjYlSOGWCYVwf59luKhmTa7LLYX/dgkrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUM4C2N2rftWTORyWuz6fjOcBmbwgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL000QzJOMnJmdFdUT1J5V3V6 NmZqT2NCbWJ3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wWAwDQYJKoZIhvcNAQELBQADggEBACoUtsJDiWRDyUmnQKzhnaJcWkbWFbsd3+cK u/qFBNabFBFwM33Gabr369ByOQWVtAS2+DnRBwp/grAwe2ujwW1iQOmERD0DxL6Z ramEhia9X5gnx5AN3aLcLbiPgklXVRQSW6yOXPziqIkONJMf8BDwJBBLmFB53I3o dsxxGfwQtPCjUUtNIfBbEP5DM6CTtHMSSR2r3GeBGLEZdcM/lbZU/yzofQ7isVWT 7cprSS69C3/1tFq/+HvTOvd77vYEJ7oj5xuQD6UU1ccJ2R2+Whm7Tobyu2yF8EZF /4fJNIE1kNxndIe+baY6yUGX/NjaUfGouSoix+RyZ4Lp9W6xqno= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org