$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa File: NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa (raw, json) Hash identifier: zhXVpmMnitWnysDxKZmpoekH2jxz8UMyXeMCWe3pSSg= Subject key identifier: 37:34:9C:B6:AF:1E:19:C9:B6:7B:2E:33:C9:4D:CE:5B:4F:96:57:14 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 294D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa Signing time: Fri 01 Sep 2023 10:06:22 +0000 ROA not before: Fri 01 Sep 2023 10:06:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10573 (0x294d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=37349CB6AF1E19C9B67B2E33C94DCE5B4F965714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:55:c7:e7:db:7c:e3:ec:c0:7a:91:ff:29: c1:2a:a7:dc:db:c6:d7:70:90:cc:00:f5:ff:b5:c9: 06:c7:3e:d7:e8:b1:7d:72:be:e4:e0:60:90:4c:0a: 08:8b:40:39:52:1c:6a:fb:0d:38:bd:a9:aa:f5:d0: 08:ea:b7:0b:c4:a1:bf:fb:0e:5a:29:ae:f1:39:f8: 03:66:ba:5d:7f:e6:95:d1:71:a0:05:9f:a9:b7:a4: b6:8e:60:22:b7:8d:cd:f3:77:2d:d8:e5:a9:6c:22: 35:c1:cb:7b:3e:2c:f2:e8:8a:5c:e5:64:ff:f3:f4: 40:1a:1a:d2:be:a6:0c:ae:a6:5a:bc:a4:d1:c2:73: 92:3b:e9:5f:74:9d:de:98:21:81:9c:e8:21:1a:49: 03:db:cc:5a:96:9b:4d:2a:10:15:a3:15:38:1d:86: a9:bb:de:63:6a:23:85:ba:71:d7:2f:b8:eb:2f:b8: 1b:f3:e6:83:32:dc:3c:78:7a:a1:d2:27:21:da:c4: 27:a4:6a:a8:51:49:c6:56:85:3f:bb:bd:40:80:f2: 59:4c:0f:42:dc:02:aa:51:f3:1d:bd:ed:9c:d6:85: a0:30:76:0c:49:aa:3d:ec:90:19:1e:7b:a7:4a:72: f6:3a:f5:c9:13:b9:03:0c:e3:45:cc:d2:e8:a5:dd: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:34:9C:B6:AF:1E:19:C9:B6:7B:2E:33:C9:4D:CE:5B:4F:96:57:14 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.132.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:10:30:e2:db:40:5e:06:6a:b1:41:bd:92:6e:0a:f8:6e:ac: 99:55:81:f4:91:5d:d4:af:67:f7:d8:89:15:1f:91:5a:24:b4: 87:e1:6f:5f:6a:d2:8d:83:0c:a8:50:1b:ad:cb:04:cf:4f:5f: bb:e5:d1:46:39:d5:2f:8b:84:30:df:fa:2e:2d:64:ee:bf:e0: 13:26:88:01:84:f5:c0:58:33:0d:37:82:2f:15:40:7b:59:74: 32:b8:01:eb:db:82:13:5a:47:04:b4:fe:0f:fe:b3:b3:a0:e0: db:8e:9d:0c:c3:5a:1a:87:62:9c:1c:5a:ab:01:a9:2d:ef:17: 1e:06:05:ed:a2:2b:95:1a:0c:fa:c7:28:2f:12:8c:b2:f2:22: 3c:81:a6:76:e3:73:0f:ff:1b:52:8a:cd:6c:55:0a:5e:e6:d7: 4f:17:d2:66:69:e2:25:25:8f:4c:e5:46:c9:94:82:e2:1e:9a: e8:64:b1:1e:a6:8e:a4:3d:f6:38:7f:32:6e:40:00:f9:53:cb: 21:3e:a5:4d:b3:93:ed:ce:9c:bb:5f:9c:a4:61:e4:16:2c:1c: 62:b2:d2:37:a3:c7:c1:9f:9c:85:1c:85:35:15:72:11:1a:ac: ad:dd:95:7d:8b:43:ca:aa:4f:eb:62:21:5f:c3:48:68:96:b4: f8:ab:3e:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM3MzQ5Q0I2QUYxRTE5 QzlCNjdCMkUzM0M5NERDRTVCNEY5NjU3MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7FFXH59t84+zAepH/KcEqp9zbxtdwkMwA9f+1yQbHPtfosX1y vuTgYJBMCgiLQDlSHGr7DTi9qar10AjqtwvEob/7DloprvE5+ANmul1/5pXRcaAF n6m3pLaOYCK3jc3zdy3Y5alsIjXBy3s+LPLoilzlZP/z9EAaGtK+pgyuplq8pNHC c5I76V90nd6YIYGc6CEaSQPbzFqWm00qEBWjFTgdhqm73mNqI4W6cdcvuOsvuBvz 5oMy3Dx4eqHSJyHaxCekaqhRScZWhT+7vUCA8llMD0LcAqpR8x297ZzWhaAwdgxJ qj3skBkee6dKcvY69ckTuQMM40XM0uil3TE9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNzSctq8eGcm2ey4zyU3OW0+WVxQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL056U2N0cThlR2NtMmV5NHp5 VTNPVzAtV1Z4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wYQwDQYJKoZIhvcNAQELBQADggEBADsQMOLbQF4GarFBvZJuCvhurJlVgfSRXdSv Z/fYiRUfkVoktIfhb19q0o2DDKhQG63LBM9PX7vl0UY51S+LhDDf+i4tZO6/4BMm iAGE9cBYMw03gi8VQHtZdDK4AevbghNaRwS0/g/+s7Og4NuOnQzDWhqHYpwcWqsB qS3vFx4GBe2iK5UaDPrHKC8SjLLyIjyBpnbjcw//G1KKzWxVCl7m108X0mZp4iUl j0zlRsmUguIemuhksR6mjqQ99jh/Mm5AAPlTyyE+pU2zk+3OnLtfnKRh5BYsHGKy 0jejx8GfnIUchTUVchEarK3dlX2LQ8qqT+tiIV/DSGiWtPirPmo= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org