$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NDKB9lkKEMv-T58IzEGAWXWFM-w.roa File: NDKB9lkKEMv-T58IzEGAWXWFM-w.roa (raw, json) Hash identifier: bYZH+gU1orTK5QxQQL1lnmSSj0PhLodYznPwCLbNZpw= Subject key identifier: 34:32:81:F6:59:0A:10:CB:FE:4F:9F:08:CC:41:80:59:75:85:33:EC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 289B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NDKB9lkKEMv-T58IzEGAWXWFM-w.roa Signing time: Fri 01 Sep 2023 10:05:34 +0000 ROA not before: Fri 01 Sep 2023 10:05:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10395 (0x289b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=343281F6590A10CBFE4F9F08CC418059758533EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:f9:67:b0:52:e0:fa:28:7c:17:2d:73:e4: 1b:01:80:d3:0e:18:88:21:96:cb:57:8f:e3:0f:41: 1b:d3:8f:4a:f9:59:10:15:c5:f4:4b:1b:7e:36:cb: ba:b7:f9:b7:b2:f1:a7:7d:15:b7:54:a4:7c:10:07: 7a:83:56:56:33:29:ce:ee:6f:1f:65:cc:e1:0b:b2: 98:39:25:8e:d7:fd:34:a9:0a:18:c3:30:1f:a5:60: 1d:3a:1b:85:16:45:27:f8:4e:10:90:fa:7f:f2:40: b2:5d:57:4f:a0:f2:d4:a9:a5:50:f8:e0:a9:fb:ff: 0a:55:44:41:cd:83:4d:f7:3f:41:d7:2d:c1:3c:03: 19:43:22:15:ff:1e:d3:b0:97:2d:8c:01:b0:f9:c3: a7:26:ee:b6:94:1c:f6:cb:bd:7f:f3:c9:ff:95:a7: 1e:b1:1a:8b:d1:9c:06:a5:e7:c7:2a:bb:a1:70:af: 52:a6:4e:9c:29:32:2a:4c:31:c3:5c:61:6b:0f:6a: 28:4f:57:1a:6f:34:ed:e4:e7:4c:a0:aa:b3:f1:83: 52:ed:0f:90:50:48:e8:4f:b1:8d:b3:98:4f:e0:07: f0:b6:9b:e4:c9:c9:62:31:0c:1d:63:56:f0:3a:3a: f3:9c:76:07:66:fb:8d:6b:be:3d:e4:e2:36:b5:a4: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:32:81:F6:59:0A:10:CB:FE:4F:9F:08:CC:41:80:59:75:85:33:EC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NDKB9lkKEMv-T58IzEGAWXWFM-w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.104.0/21 Signature Algorithm: sha256WithRSAEncryption 41:81:fb:89:d0:4b:14:20:02:9a:79:b0:45:39:d9:ff:0e:54: 5d:ef:3c:41:47:a8:0e:f1:ad:a8:0a:63:e0:c9:cc:d7:1b:ed: 55:f9:a8:e9:bb:41:76:d2:0a:a0:df:76:ab:e0:de:bc:21:8c: e9:5f:a6:77:bd:8c:96:9e:9d:3a:1c:7e:8f:33:9c:e8:83:c7: 85:16:5a:12:65:44:5c:d6:cb:b1:b6:c3:d3:3b:2c:f3:3d:d5: 39:61:3f:8e:61:87:d3:79:57:c6:8c:9b:41:7a:0d:bc:f5:a8: 02:c5:7f:40:e4:02:75:a3:7c:d2:05:2c:95:2a:76:1f:7a:ad: 01:6a:52:27:72:cd:d7:74:a3:ed:49:fe:bf:36:1b:73:6a:fd: b1:be:22:57:80:83:91:83:b0:9e:46:31:93:cd:54:49:22:86: cc:e1:b2:47:cb:7b:7d:4f:6b:7c:1d:79:04:f8:c3:fe:bd:db: c3:ea:b4:91:90:ab:9f:cd:fb:32:8f:6c:ba:ec:50:dc:bc:d8: 03:90:de:c7:be:36:81:3a:5d:10:49:0a:e7:9a:44:a8:84:d5: 1c:89:15:16:6e:99:5b:19:9f:78:d5:d9:0c:5e:bf:d3:ef:b4: 45:9f:d2:1a:85:cf:da:a3:74:c9:1b:2f:3e:1d:bb:ea:f8:6d: 81:17:5c:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0MzI4MUY2NTkwQTEw Q0JGRTRGOUYwOENDNDE4MDU5NzU4NTMzRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlLPlnsFLg+ih8Fy1z5BsBgNMOGIghlstXj+MPQRvTj0r5WRAV xfRLG342y7q3+bey8ad9FbdUpHwQB3qDVlYzKc7ubx9lzOELspg5JY7X/TSpChjD MB+lYB06G4UWRSf4ThCQ+n/yQLJdV0+g8tSppVD44Kn7/wpVREHNg033P0HXLcE8 AxlDIhX/HtOwly2MAbD5w6cm7raUHPbLvX/zyf+Vpx6xGovRnAal58cqu6Fwr1Km TpwpMipMMcNcYWsPaihPVxpvNO3k50ygqrPxg1LtD5BQSOhPsY2zmE/gB/C2m+TJ yWIxDB1jVvA6OvOcdgdm+41rvj3k4ja1pFcvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNDKB9lkKEMv+T58IzEGAWXWFM+wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05ES0I5bGtLRU12LVQ1OEl6 RUdBV1hXRk0tdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wmgwDQYJKoZIhvcNAQELBQADggEBAEGB+4nQSxQgApp5sEU52f8OVF3vPEFHqA7x ragKY+DJzNcb7VX5qOm7QXbSCqDfdqvg3rwhjOlfpne9jJaenTocfo8znOiDx4UW WhJlRFzWy7G2w9M7LPM91TlhP45hh9N5V8aMm0F6Dbz1qALFf0DkAnWjfNIFLJUq dh96rQFqUidyzdd0o+1J/r82G3Nq/bG+IleAg5GDsJ5GMZPNVEkihszhskfLe31P a3wdeQT4w/6928PqtJGQq5/N+zKPbLrsUNy82AOQ3se+NoE6XRBJCueaRKiE1RyJ FRZumVsZn3jV2Qxev9PvtEWf0hqFz9qjdMkbLz4du+r4bYEXXHA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org