$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M8IUJv-p8gg6GGCj0SC-3vM02-s.roa File: M8IUJv-p8gg6GGCj0SC-3vM02-s.roa (raw, json) Hash identifier: h1GiUcAmhkVwFxhGXtb72eJ8o6V/CyBcy5fLafD8Xkk= Subject key identifier: 33:C2:14:26:FF:A9:F2:08:3A:18:60:A3:D1:20:BE:DE:F3:34:DB:EB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29C2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M8IUJv-p8gg6GGCj0SC-3vM02-s.roa Signing time: Fri 01 Sep 2023 10:07:02 +0000 ROA not before: Fri 01 Sep 2023 10:07:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.192.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10690 (0x29c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=33C21426FFA9F2083A1860A3D120BEDEF334DBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:4c:f6:11:5a:95:14:b3:fb:51:12:8d:41: 1c:c3:f7:01:57:9f:09:3f:e9:b7:6c:34:cf:5e:57: e7:63:cf:55:ab:e5:98:16:5f:83:26:30:db:3d:57: df:26:d7:18:59:fd:1e:18:0c:5d:8d:58:9e:f7:b4: 45:e0:ef:93:0f:da:1b:77:1d:8d:4d:82:a6:9d:cc: 4e:c9:89:e0:cd:17:2c:a2:3d:dd:21:44:fd:f3:51: ce:e7:b1:ac:c3:e9:d5:1d:f7:43:ea:4d:7e:03:4d: 69:43:30:60:38:72:1f:47:49:1f:a6:15:44:1d:60: aa:3f:12:0e:47:8b:aa:db:a5:e8:db:77:c0:ee:75: a4:6c:3d:66:17:05:14:c7:24:68:fe:39:8a:fa:78: f9:bc:e6:16:ee:92:7c:84:48:0b:87:1d:47:b0:3d: c7:b1:ee:21:8e:a1:88:86:df:97:96:53:62:ba:4f: 79:5f:4c:bb:2f:00:a9:5d:e5:2e:25:06:39:ba:7f: 68:73:a5:db:cb:6c:47:d4:7d:9e:6c:51:9f:0f:41: 77:ac:4e:d5:f2:d5:af:a0:9a:e9:04:a0:ce:c6:78: 42:6c:a2:40:cc:83:30:96:7f:2d:bb:f6:b5:d0:6c: 3b:0e:bf:7b:67:46:8a:db:ad:bd:de:18:d4:a5:1b: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:14:26:FF:A9:F2:08:3A:18:60:A3:D1:20:BE:DE:F3:34:DB:EB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M8IUJv-p8gg6GGCj0SC-3vM02-s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.240.0/21 Signature Algorithm: sha256WithRSAEncryption 95:e4:08:46:79:a4:12:6a:2a:f8:4f:68:b5:5c:cf:da:4a:3c: 09:5a:e4:2f:b4:d9:a0:2d:65:40:13:29:80:32:c6:59:50:24: 37:12:8d:12:2c:5e:69:95:65:d2:b3:d1:09:d1:1c:97:37:18: 55:ea:25:09:89:a4:54:f9:17:8e:42:3a:56:66:fa:10:cb:7e: 92:47:8b:9f:f6:3b:0a:31:7f:fc:8a:62:02:56:44:8d:0b:25: 3f:88:37:f5:3a:81:6b:fa:b5:4b:68:a0:94:d4:42:34:6b:1d: 3b:98:d3:13:61:0b:ba:42:1c:72:ed:e4:c9:fe:cc:3c:ed:be: 00:8a:83:45:77:96:05:1f:89:63:a8:e8:d3:02:00:c9:20:2b: 9f:7a:c0:35:f5:cb:1b:5e:b6:87:45:77:d8:88:07:9b:00:21: 18:ec:97:e5:cd:90:16:27:e4:b7:c4:3e:ff:c9:08:e0:16:dc: 96:62:df:d2:27:a5:49:82:90:16:9b:7c:16:56:f3:c2:22:34: 4c:05:97:78:46:19:ce:37:c7:df:13:59:ca:83:1a:34:68:ef: 99:9b:7b:b7:23:07:41:5c:17:53:05:c8:5f:9f:c8:a3:47:e2: 8c:0e:00:08:42:84:c7:99:c9:4f:50:33:64:96:d0:ec:8f:a8: 02:5c:eb:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMzQzIxNDI2RkZBOUYy MDgzQTE4NjBBM0QxMjBCRURFRjMzNERCRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCxkz2EVqVFLP7URKNQRzD9wFXnwk/6bdsNM9eV+djz1Wr5ZgW X4MmMNs9V98m1xhZ/R4YDF2NWJ73tEXg75MP2ht3HY1NgqadzE7JieDNFyyiPd0h RP3zUc7nsazD6dUd90PqTX4DTWlDMGA4ch9HSR+mFUQdYKo/Eg5Hi6rbpejbd8Du daRsPWYXBRTHJGj+OYr6ePm85hbuknyESAuHHUewPcex7iGOoYiG35eWU2K6T3lf TLsvAKld5S4lBjm6f2hzpdvLbEfUfZ5sUZ8PQXesTtXy1a+gmukEoM7GeEJsokDM gzCWfy279rXQbDsOv3tnRorbrb3eGNSlG5LBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUM8IUJv+p8gg6GGCj0SC+3vM02+swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL004SVVKdi1wOGdnNkdHQ2ow U0MtM3ZNMDItcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wPAwDQYJKoZIhvcNAQELBQADggEBAJXkCEZ5pBJqKvhPaLVcz9pKPAla5C+02aAt ZUATKYAyxllQJDcSjRIsXmmVZdKz0QnRHJc3GFXqJQmJpFT5F45COlZm+hDLfpJH i5/2Owoxf/yKYgJWRI0LJT+IN/U6gWv6tUtooJTUQjRrHTuY0xNhC7pCHHLt5Mn+ zDztvgCKg0V3lgUfiWOo6NMCAMkgK596wDX1yxtetodFd9iIB5sAIRjsl+XNkBYn 5LfEPv/JCOAW3JZi39InpUmCkBabfBZW88IiNEwFl3hGGc43x98TWcqDGjRo75mb e7cjB0FcF1MFyF+fyKNH4owOAAhChMeZyU9QM2SW0OyPqAJc61I= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:56 2024 by rpki-client on console-ams.rpki-client.org