$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oc0scdPEhCB0kKYba9uaOEIthMw.roa File: Oc0scdPEhCB0kKYba9uaOEIthMw.roa (raw, json) Hash identifier: dyc03bud3DjMWj74uM7PQJsmfrqR8NIY87sNaavum3U= Subject key identifier: 39:CD:2C:71:D3:C4:84:20:74:90:A6:1B:6B:DB:9A:38:42:2D:84:CC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AA2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oc0scdPEhCB0kKYba9uaOEIthMw.roa Signing time: Fri 01 Sep 2023 10:08:07 +0000 ROA not before: Fri 01 Sep 2023 10:08:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10914 (0x2aa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=39CD2C71D3C484207490A61B6BDB9A38422D84CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:ed:50:e1:36:16:b1:38:95:9b:ed:2a:56: 67:13:41:12:64:25:4c:7d:96:23:fe:61:a3:37:3e: 46:41:f0:a7:ee:74:a0:e4:6c:47:67:d8:de:f3:3a: 4a:be:32:6f:34:7c:24:3c:07:be:8b:e0:cb:55:b9: 80:c8:ea:e0:0a:7e:55:fb:24:71:d1:d1:6e:86:28: 5d:9f:aa:52:f9:de:1a:b2:be:43:da:24:60:21:e4: a9:fe:25:38:8f:4b:3b:43:92:52:4d:29:13:19:8f: 7a:b3:64:06:7c:93:e0:81:c9:88:90:be:35:de:90: a3:10:2a:23:15:c2:36:31:32:36:50:6f:6a:18:c5: ea:7d:e6:3a:be:74:44:58:6d:2b:bf:59:ad:1f:65: ae:8f:cf:7d:98:c5:6e:2f:a9:09:e5:22:1b:b2:c6: 00:03:c6:4a:c9:68:f8:10:d8:5d:37:6a:5e:27:ff: ae:38:25:93:dd:96:fa:2f:26:11:1e:ee:c8:32:04: 0e:61:8a:79:12:64:d0:9d:5e:2b:77:e0:35:c8:b2: 47:5c:81:a0:c9:e4:65:54:60:9b:c4:0a:73:0b:f6: 08:e8:8f:81:89:be:e3:4e:53:ac:d1:fd:30:ee:56: a7:6d:fc:4d:34:0b:d7:bf:b8:fc:89:f1:37:0d:77: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:2C:71:D3:C4:84:20:74:90:A6:1B:6B:DB:9A:38:42:2D:84:CC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oc0scdPEhCB0kKYba9uaOEIthMw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.148.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:11:be:ab:4f:72:7a:38:f2:60:d2:d6:4b:85:0b:cb:b0:1a: dd:3f:06:cf:40:d1:d5:6d:bb:d0:6a:e2:db:30:ac:92:41:ba: 80:c4:35:05:c1:d2:8a:98:88:af:66:e6:41:04:36:32:01:0c: f8:4b:c4:44:4f:fa:09:26:0a:20:bb:91:59:01:30:a0:95:a3: 9d:c7:58:b6:b1:1e:7c:d3:73:88:a0:7d:5b:af:7a:57:cb:84: 53:b2:27:18:74:aa:f9:34:f4:e3:56:ce:f7:8e:56:7e:b4:33: d3:95:43:11:bb:6e:a1:b5:5d:86:1b:66:8d:bc:57:64:db:85: c1:a9:25:1c:5c:06:65:8d:8a:9d:5e:d1:79:e1:fe:95:4b:4f: ff:83:a8:1a:83:d7:67:2a:b8:be:3a:e1:56:95:4b:3c:58:60: ac:5c:fe:2d:60:0a:2f:90:98:57:77:bf:dd:fd:70:31:2e:1e: e4:c9:30:de:ad:48:fb:8a:d1:e9:88:a0:42:47:9a:8f:eb:f3: 97:5c:bd:4f:59:bf:6c:8c:ab:1d:55:f9:f1:90:71:ee:4a:c2: df:92:b0:5b:e9:6b:7f:07:a7:71:69:82:89:88:e4:35:19:f8: 21:36:42:3a:5d:4d:9b:19:f9:03:1f:7b:85:0c:5f:b0:83:f6: fb:8a:33:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM5Q0QyQzcxRDNDNDg0 MjA3NDkwQTYxQjZCREI5QTM4NDIyRDg0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCin+1Q4TYWsTiVm+0qVmcTQRJkJUx9liP+YaM3PkZB8KfudKDk bEdn2N7zOkq+Mm80fCQ8B76L4MtVuYDI6uAKflX7JHHR0W6GKF2fqlL53hqyvkPa JGAh5Kn+JTiPSztDklJNKRMZj3qzZAZ8k+CByYiQvjXekKMQKiMVwjYxMjZQb2oY xep95jq+dERYbSu/Wa0fZa6Pz32YxW4vqQnlIhuyxgADxkrJaPgQ2F03al4n/644 JZPdlvovJhEe7sgyBA5hinkSZNCdXit34DXIskdcgaDJ5GVUYJvECnML9gjoj4GJ vuNOU6zR/TDuVqdt/E00C9e/uPyJ8TcNd+cRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOc0scdPEhCB0kKYba9uaOEIthMwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09jMHNjZFBFaENCMGtLWWJh OXVhT0VJdGhNdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w5QwDQYJKoZIhvcNAQELBQADggEBADsRvqtPcno48mDS1kuFC8uwGt0/Bs9A0dVt u9Bq4tswrJJBuoDENQXB0oqYiK9m5kEENjIBDPhLxERP+gkmCiC7kVkBMKCVo53H WLaxHnzTc4igfVuvelfLhFOyJxh0qvk09ONWzveOVn60M9OVQxG7bqG1XYYbZo28 V2TbhcGpJRxcBmWNip1e0Xnh/pVLT/+DqBqD12cquL464VaVSzxYYKxc/i1gCi+Q mFd3v939cDEuHuTJMN6tSPuK0emIoEJHmo/r85dcvU9Zv2yMqx1V+fGQce5Kwt+S sFvpa38Hp3FpgomI5DUZ+CE2QjpdTZsZ+QMfe4UMX7CD9vuKM4M= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org