$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NIQvmHPRQlQtVSZovFxqjedVCZY.roa File: NIQvmHPRQlQtVSZovFxqjedVCZY.roa (raw, json) Hash identifier: U/xFlS1P2ioZxeP9PhjKywPLX5WjIu7RCYntkEOpYAs= Subject key identifier: 34:84:2F:98:73:D1:42:54:2D:55:26:68:BC:5C:6A:8D:E7:55:09:96 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AE9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NIQvmHPRQlQtVSZovFxqjedVCZY.roa Signing time: Fri 01 Sep 2023 10:08:26 +0000 ROA not before: Fri 01 Sep 2023 10:08:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.224.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10985 (0x2ae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=34842F9873D142542D552668BC5C6A8DE7550996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:85:b7:f4:36:bd:59:13:37:00:24:4d:3d:06: 5f:5b:4d:18:e3:c0:5c:86:7e:09:ef:7a:d8:1e:69: ef:5b:e4:8c:51:38:9c:46:7f:22:4f:7a:f7:4b:96: c3:72:f4:e4:ea:58:e3:54:2d:74:98:9c:f6:69:a6: 09:f2:79:a6:a7:57:a3:91:40:76:b1:42:29:3d:5f: 19:33:9f:f4:51:d8:47:96:03:76:93:90:0c:4e:c1: ee:9b:28:26:2c:dd:8d:26:6d:28:9e:94:b7:f7:12: 33:c3:2c:3e:0f:d0:6e:e3:c2:ba:ae:a7:52:8c:39: 8a:5e:92:c4:38:76:df:d6:9b:75:13:ca:fe:91:f2: af:60:6e:45:09:13:4f:a2:c5:17:1d:84:de:b3:69: 27:86:dc:99:64:a3:d1:20:6e:2b:e1:99:5d:81:a4: d2:4c:d4:00:06:0c:cc:23:7a:9a:25:7f:e9:40:79: 4f:61:26:91:e4:c5:c5:a4:d3:25:32:f9:cb:e7:8f: dd:10:56:b6:2a:36:3a:5b:7a:6d:e4:8b:65:2a:ae: 27:8d:40:17:09:94:bd:c8:66:2b:97:25:cb:42:7a: 12:d9:36:90:1c:77:c5:2c:1f:02:e3:44:fe:f5:6b: 3b:6e:02:82:c4:79:78:b8:c7:5c:19:fe:8b:b7:f1: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:84:2F:98:73:D1:42:54:2D:55:26:68:BC:5C:6A:8D:E7:55:09:96 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NIQvmHPRQlQtVSZovFxqjedVCZY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/21 Signature Algorithm: sha256WithRSAEncryption 42:5f:e8:0a:fc:66:c6:0a:f5:8f:06:37:93:58:87:a7:ac:13: da:f7:2d:be:14:22:e5:f7:62:ee:37:af:cb:de:83:fd:3c:f3: 50:35:03:49:2d:83:1e:3f:f3:17:c8:49:b1:7b:88:fc:9b:1e: 24:d9:3b:ee:50:2b:7c:f8:b3:8d:14:74:82:ea:4b:d5:74:74: 3f:16:31:53:cf:b8:75:4a:1f:aa:a4:64:51:9d:ad:9c:58:22: fe:bf:0d:25:50:cd:b1:5e:51:1c:e7:d1:05:1a:54:03:f2:1f: 73:8e:37:8f:df:23:33:8f:ca:df:6c:25:3c:86:e6:49:c3:8f: f5:24:b5:97:6c:9d:fd:b7:f1:32:f0:a3:fb:a7:64:6c:60:2e: 8e:83:b9:48:6e:20:41:a3:27:4e:fe:64:a4:a9:02:7f:51:02: 07:c8:06:2f:65:12:cf:89:61:97:cd:42:16:03:96:f1:a2:90: de:e8:d7:9b:12:3d:65:2c:1b:c6:8f:3b:39:f6:ab:95:b1:7d: 0d:b3:7a:18:9c:83:e8:ee:fc:ff:44:fa:79:31:97:0c:96:35: 03:a9:9c:b2:66:54:41:10:b4:0a:b7:70:5f:6f:ad:5d:79:04: 3a:da:01:12:db:53:ce:d9:80:ad:48:6e:0e:50:50:35:b0:1f: 8f:d4:16:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0ODQyRjk4NzNEMTQy NTQyRDU1MjY2OEJDNUM2QThERTc1NTA5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyhbf0Nr1ZEzcAJE09Bl9bTRjjwFyGfgnvetgeae9b5IxROJxG fyJPevdLlsNy9OTqWONULXSYnPZppgnyeaanV6ORQHaxQik9Xxkzn/RR2EeWA3aT kAxOwe6bKCYs3Y0mbSielLf3EjPDLD4P0G7jwrqup1KMOYpeksQ4dt/Wm3UTyv6R 8q9gbkUJE0+ixRcdhN6zaSeG3Jlko9EgbivhmV2BpNJM1AAGDMwjepolf+lAeU9h JpHkxcWk0yUy+cvnj90QVrYqNjpbem3ki2UqrieNQBcJlL3IZiuXJctCehLZNpAc d8UsHwLjRP71aztuAoLEeXi4x1wZ/ou38d6FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNIQvmHPRQlQtVSZovFxqjedVCZYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05JUXZtSFBSUWxRdFZTWm92 RnhxamVkVkNaWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w+AwDQYJKoZIhvcNAQELBQADggEBAEJf6Ar8ZsYK9Y8GN5NYh6esE9r3Lb4UIuX3 Yu43r8veg/0881A1A0ktgx4/8xfISbF7iPybHiTZO+5QK3z4s40UdILqS9V0dD8W MVPPuHVKH6qkZFGdrZxYIv6/DSVQzbFeURzn0QUaVAPyH3OON4/fIzOPyt9sJTyG 5knDj/UktZdsnf238TLwo/unZGxgLo6DuUhuIEGjJ07+ZKSpAn9RAgfIBi9lEs+J YZfNQhYDlvGikN7o15sSPWUsG8aPOzn2q5WxfQ2zehicg+ju/P9E+nkxlwyWNQOp nLJmVEEQtAq3cF9vrV15BDraARLbU87ZgK1Ibg5QUDWwH4/UFh0= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org