$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa File: S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa (raw, json) Hash identifier: ltxjNQYeMK7AjqhlUhS5797/Nd8kRCTCZbcKYSHqDos= Subject key identifier: 4B:5C:63:35:F9:2A:91:CC:91:C1:5D:A3:85:98:BC:A3:F7:29:1A:A4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 291D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa Signing time: Fri 01 Sep 2023 10:06:09 +0000 ROA not before: Fri 01 Sep 2023 10:06:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10525 (0x291d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4B5C6335F92A91CC91C15DA38598BCA3F7291AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:fb:d3:40:d6:3c:28:40:87:94:fe:75:36: 94:de:ba:55:12:7c:c0:d7:a2:36:73:05:f0:f0:82: 76:4e:9d:95:5a:73:d2:50:cc:07:04:1e:3e:1e:26: 6d:31:9b:7e:79:52:a9:a8:f7:64:e7:18:28:03:97: 89:b1:d1:f5:87:b2:e2:22:5e:36:fb:8f:0c:69:d3: f6:55:60:ef:d4:e6:05:69:fd:20:57:d6:5b:f3:0a: 55:5f:18:d6:8d:31:a6:6e:38:ca:00:66:b8:7d:2e: 31:01:3e:f4:53:71:63:84:bf:bf:64:c2:c9:cb:af: fa:43:c9:ab:51:c8:0c:e5:0b:f5:f4:65:bd:dc:8b: 6e:18:ec:3d:87:8c:bd:d9:ae:fb:be:cb:91:a7:d4: 45:82:7d:c1:19:cb:74:d9:d2:de:16:96:9e:61:73: e7:d1:7b:44:72:39:88:c9:73:1f:29:25:48:6f:9f: 3c:44:04:d7:e0:bd:e0:e6:89:ff:47:b2:02:98:40: 07:0c:c3:ac:bb:e0:58:b3:1e:18:8a:e6:b8:7b:78: 16:22:52:8b:d9:7f:e6:95:eb:89:e1:9e:6b:ce:2f: ad:24:f3:a5:25:fe:b6:04:b3:0e:a6:32:b0:dd:ac: a5:a7:be:b9:7a:45:a8:b7:a0:9a:c0:a3:54:75:47: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5C:63:35:F9:2A:91:CC:91:C1:5D:A3:85:98:BC:A3:F7:29:1A:A4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.252.0/24 Signature Algorithm: sha256WithRSAEncryption 41:92:ac:dd:35:74:70:ca:3a:51:f1:4e:29:f7:84:1b:09:68: 0c:5d:2b:e3:8b:f7:0f:13:95:b1:fb:69:d2:39:90:ee:43:0d: c8:da:e9:43:19:00:78:6f:69:bc:25:3f:9e:08:e2:43:2c:1d: 8c:c8:d2:be:4a:a2:f0:74:13:a0:b6:a3:c6:e1:f4:c4:a1:55: be:aa:b5:4c:d7:80:c8:28:f2:37:d7:15:8e:d0:a8:87:8b:a1: 6b:f7:63:c4:41:d3:50:07:73:fe:44:df:7d:ab:87:89:6a:2d: 6d:b9:5c:7a:04:43:2f:3b:4d:e0:d5:b2:a7:4b:1e:19:9f:3a: 2c:6a:6e:90:13:6e:00:7a:8a:5f:d7:61:0b:ef:89:0f:a4:ae: 71:f9:79:25:b7:89:f7:cb:4d:e3:d4:7c:c0:a1:f6:05:50:39: 52:74:6c:9f:8c:68:f8:a7:ee:ba:5f:51:3e:75:78:dc:86:75: f1:d2:76:3d:37:20:98:38:0e:20:20:50:3f:8f:26:82:1c:2f: c3:c3:a3:56:19:0f:ad:80:98:4a:e9:25:89:e8:e8:59:18:c9: 74:d2:79:70:f3:e9:0f:af:a4:a7:ab:1b:c6:c7:73:37:56:c4: 20:91:06:24:89:79:54:ed:48:c5:88:08:68:3e:55:51:e9:1f: f3:25:6a:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRCNUM2MzM1RjkyQTkx Q0M5MUMxNURBMzg1OThCQ0EzRjcyOTFBQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfOvvTQNY8KECHlP51NpTeulUSfMDXojZzBfDwgnZOnZVac9JQ zAcEHj4eJm0xm355Uqmo92TnGCgDl4mx0fWHsuIiXjb7jwxp0/ZVYO/U5gVp/SBX 1lvzClVfGNaNMaZuOMoAZrh9LjEBPvRTcWOEv79kwsnLr/pDyatRyAzlC/X0Zb3c i24Y7D2HjL3Zrvu+y5Gn1EWCfcEZy3TZ0t4Wlp5hc+fRe0RyOYjJcx8pJUhvnzxE BNfgveDmif9HsgKYQAcMw6y74FizHhiK5rh7eBYiUovZf+aV64nhnmvOL60k86Ul /rYEsw6mMrDdrKWnvrl6Rai3oJrAo1R1RxPfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUS1xjNfkqkcyRwV2jhZi8o/cpGqQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1MxeGpOZmtxa2N5UndWMmpo Wmk4b19jcEdxUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wvwwDQYJKoZIhvcNAQELBQADggEBAEGSrN01dHDKOlHxTin3hBsJaAxdK+OL9w8T lbH7adI5kO5DDcja6UMZAHhvabwlP54I4kMsHYzI0r5KovB0E6C2o8bh9MShVb6q tUzXgMgo8jfXFY7QqIeLoWv3Y8RB01AHc/5E332rh4lqLW25XHoEQy87TeDVsqdL HhmfOixqbpATbgB6il/XYQvviQ+krnH5eSW3iffLTePUfMCh9gVQOVJ0bJ+MaPin 7rpfUT51eNyGdfHSdj03IJg4DiAgUD+PJoIcL8PDo1YZD62AmErpJYno6FkYyXTS eXDz6Q+vpKerG8bHczdWxCCRBiSJeVTtSMWICGg+VVHpH/Mlagw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org