$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa File: MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa (raw, json) Hash identifier: imswKi+JOix+ullHIgnSDxpf4tA19tHBwfrEKNNkGwE= Subject key identifier: 31:46:73:C9:18:31:15:48:53:0C:81:0C:E2:BA:48:86:7C:F8:2B:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A98 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa Signing time: Fri 01 Sep 2023 10:08:05 +0000 ROA not before: Fri 01 Sep 2023 10:08:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10904 (0x2a98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=314673C918311548530C810CE2BA48867CF82B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:f3:f1:97:e8:5a:aa:cf:65:b3:88:c0:8b: 3a:0c:13:45:60:67:49:66:dc:dd:31:e3:c4:e8:68: 95:f5:9c:53:e4:3c:69:63:f9:c1:bd:4d:c0:ba:34: 58:9b:a9:86:9c:d7:09:d9:68:3d:0f:0e:a3:e7:0c: b3:2a:49:1b:31:81:d1:c8:0f:24:92:93:86:2e:1c: 3f:84:d3:63:8f:ca:3b:40:37:16:eb:d9:57:82:84: 0f:b2:3e:4f:8f:ae:3c:95:91:a2:47:56:b4:68:e1: 5e:a5:ba:68:7a:75:b5:4a:af:9d:06:c0:61:44:34: ec:76:de:d0:15:b6:7f:4e:36:de:cd:73:05:9c:07: 15:cf:f7:7f:1c:46:48:d7:38:66:1a:3d:37:fd:70: d1:f0:fe:2d:d6:ee:ef:21:c4:cc:64:5f:a0:f7:aa: 9d:05:7a:fc:ff:e6:20:9d:c0:45:2f:22:24:ad:3f: a8:f6:7c:e6:d2:fc:74:a9:e5:b5:d0:f7:ce:be:b8: 1c:a9:b2:41:f8:8f:d5:f4:42:57:54:ce:0a:4e:32: 9f:c1:c8:9b:d4:19:25:60:7f:f1:13:fe:39:91:2b: 64:20:92:f5:76:a7:da:d9:4d:9f:50:0d:df:b2:1b: ee:f8:0b:d2:fa:af:4a:9b:14:78:a7:44:c4:42:46: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:73:C9:18:31:15:48:53:0C:81:0C:E2:BA:48:86:7C:F8:2B:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.24.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:b2:5c:47:e6:cf:23:7c:f8:7c:47:7e:5d:9c:98:56:77:06: c2:95:47:23:24:79:c2:d6:6d:fe:a4:dd:57:dc:70:01:23:3e: b1:88:26:98:a1:6b:eb:36:18:b2:b6:a1:98:df:ab:da:3e:28: 1e:cf:02:50:39:59:6c:08:0e:d2:34:a6:d8:a0:ee:69:8e:de: ea:f2:8b:25:17:25:36:ca:bb:ae:7f:dc:82:9c:aa:06:a5:ba: 05:8b:d0:b1:d0:2c:a4:42:b6:bb:e7:75:6d:62:20:50:4a:9b: d3:d8:a4:c1:65:2a:7b:8b:e3:5d:45:d5:b0:50:a4:88:0a:5b: 0c:4a:6a:c7:fa:a7:52:3d:b9:38:6f:e6:d9:db:cc:5c:3c:ad: de:11:aa:14:0b:a0:33:42:fd:e0:ff:e5:4b:d0:d3:65:79:50: 7f:de:bb:65:87:64:b8:4a:4d:2a:d4:a0:a6:53:72:df:9c:68: 01:8b:b8:56:a2:d8:3c:a2:43:2b:fa:de:95:e0:50:bd:00:07: cd:0e:57:5b:6f:1a:df:8d:0a:3b:ef:49:6a:f9:fc:d7:50:34: c1:60:15:1c:ad:c9:20:18:29:e5:02:04:d9:a2:07:34:5f:12: 9c:8b:ab:46:a6:b6:11:63:eb:ea:0b:2c:68:85:bc:26:a1:c6: e1:db:c8:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMxNDY3M0M5MTgzMTE1 NDg1MzBDODEwQ0UyQkE0ODg2N0NGODJCNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjxvPxl+haqs9ls4jAizoME0VgZ0lm3N0x48ToaJX1nFPkPGlj +cG9TcC6NFibqYac1wnZaD0PDqPnDLMqSRsxgdHIDySSk4YuHD+E02OPyjtANxbr 2VeChA+yPk+PrjyVkaJHVrRo4V6lumh6dbVKr50GwGFENOx23tAVtn9ONt7NcwWc BxXP938cRkjXOGYaPTf9cNHw/i3W7u8hxMxkX6D3qp0Fevz/5iCdwEUvIiStP6j2 fObS/HSp5bXQ986+uBypskH4j9X0QldUzgpOMp/ByJvUGSVgf/ET/jmRK2QgkvV2 p9rZTZ9QDd+yG+74C9L6r0qbFHinRMRCRvVRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMUZzyRgxFUhTDIEM4rpIhnz4K3kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01VWnp5Umd4RlVoVERJRU00 cnBJaG56NEszay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 whgwDQYJKoZIhvcNAQELBQADggEBAH2yXEfmzyN8+HxHfl2cmFZ3BsKVRyMkecLW bf6k3VfccAEjPrGIJpiha+s2GLK2oZjfq9o+KB7PAlA5WWwIDtI0ptig7mmO3ury iyUXJTbKu65/3IKcqgalugWL0LHQLKRCtrvndW1iIFBKm9PYpMFlKnuL411F1bBQ pIgKWwxKasf6p1I9uThv5tnbzFw8rd4RqhQLoDNC/eD/5UvQ02V5UH/eu2WHZLhK TSrUoKZTct+caAGLuFai2DyiQyv63pXgUL0AB80OV1tvGt+NCjvvSWr5/NdQNMFg FRytySAYKeUCBNmiBzRfEpyLq0amthFj6+oLLGiFvCahxuHbyIk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org