$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pgahn6iM3HCR4pYNzA2r_DL9vRo.roa File: Pgahn6iM3HCR4pYNzA2r_DL9vRo.roa (raw, json) Hash identifier: 3eYah6rgmL85t6ok1oy5hJN/A7mNU7bN8StC1dBxj4Y= Subject key identifier: 3E:06:A1:9F:A8:8C:DC:70:91:E2:96:0D:CC:0D:AB:FC:32:FD:BD:1A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2937 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pgahn6iM3HCR4pYNzA2r_DL9vRo.roa Signing time: Fri 01 Sep 2023 10:06:17 +0000 ROA not before: Fri 01 Sep 2023 10:06:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10551 (0x2937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3E06A19FA88CDC7091E2960DCC0DABFC32FDBD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:9e:82:f6:e5:3e:76:54:03:57:de:41:53: 8d:c1:33:2e:12:6f:1e:8e:5d:6e:e2:c0:bc:fa:10: b1:af:c6:7e:f2:04:b0:2e:4d:e0:02:0d:29:a3:7e: 34:eb:a0:bb:eb:37:b3:1e:1c:a3:01:07:6e:69:4a: a2:5a:6d:cd:c4:79:3b:ab:6c:67:51:db:84:69:e7: 23:c2:18:d0:3d:57:3a:71:c6:44:1a:8c:ac:09:da: ce:40:4e:d0:98:9c:3e:11:d1:9c:8e:1f:6f:aa:4b: e1:83:54:9e:ca:0f:fc:15:26:d1:4e:0d:5b:48:39: 87:12:0f:f4:34:ab:15:89:31:f0:28:5a:eb:c0:a5: 26:e8:b5:65:24:c3:96:2e:17:71:11:3d:54:39:21: d5:b1:14:4a:3a:01:5c:cb:c6:d2:46:79:6f:46:c1: a5:09:78:f4:85:bb:0b:69:c0:1a:85:31:ad:b0:68: a4:3b:56:28:03:69:14:e9:65:a7:29:c2:3a:e1:52: 1c:a7:8d:0e:16:0b:0a:0f:28:d6:6c:54:ff:89:86: 3b:3e:29:19:e3:2e:be:3d:ca:e1:f0:47:45:58:a2: c6:f8:d6:08:19:95:69:56:3a:9d:b4:90:af:47:8a: 2a:f4:ed:14:5a:0b:e9:26:25:29:00:5f:08:a2:ed: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:06:A1:9F:A8:8C:DC:70:91:E2:96:0D:CC:0D:AB:FC:32:FD:BD:1A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pgahn6iM3HCR4pYNzA2r_DL9vRo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.60.0/22 Signature Algorithm: sha256WithRSAEncryption 49:0f:2c:b6:fd:ed:8b:eb:80:64:eb:ce:e1:fb:c4:21:93:97: f5:5a:32:a9:69:bd:60:52:18:02:6b:75:58:43:0d:5a:f6:35: 29:0d:27:82:e1:4d:01:09:fa:79:e2:99:3e:7d:17:92:5d:b0: e6:47:22:2b:86:c0:25:45:9b:4c:30:5c:55:ac:88:6d:fe:23: 08:85:04:34:b9:9e:9d:44:92:1d:c4:76:38:36:d8:34:c9:2a: 59:5a:13:8d:e4:a1:7a:40:58:ea:0d:e2:6a:73:a4:8f:c0:9b: 49:c8:9a:7b:78:af:69:28:db:37:c4:93:fe:c8:82:9c:32:ba: 3b:93:8b:b3:9f:45:e9:e5:d0:38:d3:a8:f0:a2:40:12:07:03: 27:a9:f5:94:97:9c:85:4d:a2:d5:3b:24:a4:f4:3a:af:7c:4a: 5b:f1:87:c3:d1:17:e8:df:88:08:b1:63:55:aa:77:d9:e5:6a: a4:d1:43:39:49:68:8c:96:ea:68:b7:79:cb:d1:ec:98:f4:d3: fb:0d:4d:de:63:2b:67:98:cb:a9:23:cc:35:af:05:d6:9e:43: 29:e7:4d:da:ca:a7:01:d7:6e:99:28:b5:d4:7b:5e:33:98:74: 34:83:9e:47:58:9b:6f:82:5a:b5:30:17:eb:b1:61:26:09:eb: bf:31:f9:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKTcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNFMDZBMTlGQTg4Q0RD NzA5MUUyOTYwRENDMERBQkZDMzJGREJEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0M56C9uU+dlQDV95BU43BMy4Sbx6OXW7iwLz6ELGvxn7yBLAu TeACDSmjfjTroLvrN7MeHKMBB25pSqJabc3EeTurbGdR24Rp5yPCGNA9VzpxxkQa jKwJ2s5ATtCYnD4R0ZyOH2+qS+GDVJ7KD/wVJtFODVtIOYcSD/Q0qxWJMfAoWuvA pSbotWUkw5YuF3ERPVQ5IdWxFEo6AVzLxtJGeW9GwaUJePSFuwtpwBqFMa2waKQ7 VigDaRTpZacpwjrhUhynjQ4WCwoPKNZsVP+Jhjs+KRnjLr49yuHwR0VYosb41ggZ lWlWOp20kK9Hiir07RRaC+kmJSkAXwii7RMfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPgahn6iM3HCR4pYNzA2r/DL9vRowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BnYWhuNmlNM0hDUjRwWU56 QTJyX0RMOXZSby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wTwwDQYJKoZIhvcNAQELBQADggEBAEkPLLb97YvrgGTrzuH7xCGTl/VaMqlpvWBS GAJrdVhDDVr2NSkNJ4LhTQEJ+nnimT59F5JdsOZHIiuGwCVFm0wwXFWsiG3+IwiF BDS5np1Ekh3Edjg22DTJKllaE43koXpAWOoN4mpzpI/Am0nImnt4r2ko2zfEk/7I gpwyujuTi7OfRenl0DjTqPCiQBIHAyep9ZSXnIVNotU7JKT0Oq98Slvxh8PRF+jf iAixY1Wqd9nlaqTRQzlJaIyW6mi3ecvR7Jj00/sNTd5jK2eYy6kjzDWvBdaeQynn TdrKpwHXbpkotdR7XjOYdDSDnkdYm2+CWrUwF+uxYSYJ678x+WQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org