$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNVDSErCrm6zeiscOiCXRNz_ymk.roa File: QNVDSErCrm6zeiscOiCXRNz_ymk.roa (raw, json) Hash identifier: dV62jtG6v0oZe/u+AiWixeuTLpVjWAD5nw8kH6+N5+c= Subject key identifier: 40:D5:43:48:4A:C2:AE:6E:B3:7A:2B:1C:3A:20:97:44:DC:FF:CA:69 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2944 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNVDSErCrm6zeiscOiCXRNz_ymk.roa Signing time: Fri 01 Sep 2023 10:06:20 +0000 ROA not before: Fri 01 Sep 2023 10:06:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10564 (0x2944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=40D543484AC2AE6EB37A2B1C3A209744DCFFCA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:52:29:c6:3e:a4:8a:70:3c:61:ce:a0:ac: 05:75:90:92:3a:08:a6:30:25:50:dc:eb:c1:65:25: 9f:65:2b:62:fd:d5:f5:79:5e:e8:c3:7a:a6:d1:80: 21:f0:28:cf:3d:9a:af:62:8d:2a:1a:14:67:0c:fe: e5:79:19:2b:cb:26:16:55:49:cb:be:43:3b:0c:0f: 67:3b:76:48:d6:29:ad:fb:f6:e6:f0:ee:ae:86:c3: d8:3d:36:44:d9:b5:a1:78:2d:f0:6f:d1:d5:8b:12: 67:43:1a:10:d5:d7:64:34:3e:e5:e4:af:1d:3f:79: 4b:f1:b8:8e:16:ad:f9:1b:59:51:f2:92:94:a5:a5: 13:10:df:e5:58:01:b3:ad:ea:67:b6:08:34:f2:6a: 07:8d:c6:dc:53:b7:52:1f:66:c7:90:b5:9c:59:74: 28:c6:0b:ce:d0:3c:dd:ce:17:e9:35:40:d6:8c:c5: a9:fe:f5:a0:c3:c7:69:f9:9e:98:59:2a:34:fb:6c: 97:b4:ee:94:2f:8e:51:bd:61:95:73:db:ad:33:a4: bb:d7:4b:47:cb:a6:dd:94:bc:a9:34:09:2d:e5:f5: b1:aa:d5:29:44:c2:0a:b3:e0:cb:01:b6:1f:04:ff: 41:c4:62:17:89:5b:80:74:9c:a3:ee:80:f8:21:46: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:43:48:4A:C2:AE:6E:B3:7A:2B:1C:3A:20:97:44:DC:FF:CA:69 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNVDSErCrm6zeiscOiCXRNz_ymk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.152.0/22 Signature Algorithm: sha256WithRSAEncryption 80:18:af:92:7d:9b:b6:71:15:68:03:24:98:f9:41:a5:bf:ec: ee:78:79:c1:0c:8f:3d:52:d9:2c:64:c3:05:0a:5d:da:6d:f9: 27:9a:09:7b:ab:65:53:0f:32:23:b1:d6:a2:38:9f:f7:19:ca: 58:b0:3b:c2:2d:aa:11:0d:4b:20:0f:72:98:ab:d6:45:e8:fa: 7e:13:94:09:a7:6d:ef:db:d9:1d:b5:2e:74:57:58:83:79:ea: c6:fd:4f:c9:1a:38:da:93:bc:3b:7d:7f:05:d5:f8:a2:9f:56: 8d:16:60:64:dd:58:83:79:d9:b8:58:fb:5f:95:91:76:82:4e: ad:b4:f6:92:85:77:4e:d7:65:8f:0c:06:44:3f:32:d3:35:07: 2a:84:28:26:fe:7c:0a:da:5d:dd:87:6d:f7:54:e3:f7:98:c4: 1e:5e:69:ea:2c:23:97:90:e2:f4:5b:e0:bc:bd:ac:d5:5b:43: ea:29:a7:be:f6:0c:bf:2f:33:ce:28:f5:79:10:2d:05:e0:f6: 5a:d3:98:0b:38:cb:f0:f5:dd:bb:b2:f0:a2:06:d4:aa:40:4d: b0:64:02:e1:6f:2c:b3:dd:2e:9b:34:3a:5d:51:39:3e:c5:3a: 29:78:0f:64:09:54:d1:4f:fd:1a:4a:f8:be:9e:0d:c5:58:a7: 5e:0b:17:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwRDU0MzQ4NEFDMkFF NkVCMzdBMkIxQzNBMjA5NzQ0RENGRkNBNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa5FIpxj6kinA8Yc6grAV1kJI6CKYwJVDc68FlJZ9lK2L91fV5 XujDeqbRgCHwKM89mq9ijSoaFGcM/uV5GSvLJhZVScu+QzsMD2c7dkjWKa379ubw 7q6Gw9g9NkTZtaF4LfBv0dWLEmdDGhDV12Q0PuXkrx0/eUvxuI4WrfkbWVHykpSl pRMQ3+VYAbOt6me2CDTyageNxtxTt1IfZseQtZxZdCjGC87QPN3OF+k1QNaMxan+ 9aDDx2n5nphZKjT7bJe07pQvjlG9YZVz260zpLvXS0fLpt2UvKk0CS3l9bGq1SlE wgqz4MsBth8E/0HEYheJW4B0nKPugPghRsQjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQNVDSErCrm6zeiscOiCXRNz/ymkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FOVkRTRXJDcm02emVpc2NP aUNYUk56X3ltay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wZgwDQYJKoZIhvcNAQELBQADggEBAIAYr5J9m7ZxFWgDJJj5QaW/7O54ecEMjz1S 2SxkwwUKXdpt+SeaCXurZVMPMiOx1qI4n/cZyliwO8ItqhENSyAPcpir1kXo+n4T lAmnbe/b2R21LnRXWIN56sb9T8kaONqTvDt9fwXV+KKfVo0WYGTdWIN52bhY+1+V kXaCTq209pKFd07XZY8MBkQ/MtM1ByqEKCb+fAraXd2HbfdU4/eYxB5eaeosI5eQ 4vRb4Ly9rNVbQ+opp772DL8vM84o9XkQLQXg9lrTmAs4y/D13buy8KIG1KpATbBk AuFvLLPdLps0Ol1ROT7FOil4D2QJVNFP/RpK+L6eDcVYp14LF2A= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org