$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-hqi0KJlMxcW2-JVtY9O1TJLXg.roa File: U-hqi0KJlMxcW2-JVtY9O1TJLXg.roa (raw, json) Hash identifier: 62EiwxniH3IkIOqO+en+renPjXPPxxOn2lU96Lu/V9E= Subject key identifier: 53:E8:6A:8B:42:89:94:CC:5C:5B:6F:89:56:D6:3D:3B:54:C9:2D:78 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2F98 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-hqi0KJlMxcW2-JVtY9O1TJLXg.roa Signing time: Mon 26 Aug 2024 05:28:39 +0000 ROA not before: Mon 26 Aug 2024 05:28:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12184 (0x2f98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=53E86A8B428994CC5C5B6F8956D63D3B54C92D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:74:90:6c:ab:79:83:a8:ee:3f:67:ea:3a: 49:d3:14:e0:b2:84:60:a6:21:35:d4:18:f9:35:e2: e0:79:dc:bf:44:f3:29:c5:5c:9e:67:70:5a:b4:94: 02:ec:c8:59:ba:88:3f:b2:34:64:42:c2:08:cc:b3: a1:7b:92:4f:35:24:b1:dd:74:48:50:c4:a8:72:2c: 76:e4:db:a1:ae:a3:79:49:37:2c:34:bb:10:6b:8a: 8f:61:3c:36:3d:0c:3f:1f:d8:78:49:0e:f3:99:b2: 0e:e7:1d:e6:b6:dd:4e:d8:db:65:55:5c:2b:8b:af: 13:2a:71:a0:74:2f:1d:57:98:f0:de:c1:51:33:02: b2:cb:00:91:9b:cc:b0:d2:6a:04:e7:e4:9d:27:84: 73:71:bd:b5:ac:6e:17:81:d9:99:9e:22:4f:3a:db: e2:42:64:f7:12:d5:13:d8:09:c0:66:9a:cd:41:8a: 6f:f8:9c:c3:8f:72:d0:56:01:ad:d7:ad:82:9f:66: 5e:24:5a:02:60:3d:70:4e:30:bd:ea:64:b8:12:2f: 5f:9b:ee:d2:a6:ab:59:de:eb:c4:81:d4:29:36:3c: 3f:81:34:d2:aa:9d:a8:2d:4d:1b:c3:5c:b2:40:6d: 39:fc:f1:d7:e0:42:e8:fd:d3:96:f6:b0:78:a0:6c: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E8:6A:8B:42:89:94:CC:5C:5B:6F:89:56:D6:3D:3B:54:C9:2D:78 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-hqi0KJlMxcW2-JVtY9O1TJLXg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.128.0/22 Signature Algorithm: sha256WithRSAEncryption bb:03:43:6f:34:aa:95:68:f2:29:4f:6b:c6:2d:67:2d:dd:0f: fa:07:04:d7:34:c6:43:15:f8:cc:a8:bb:58:55:1f:50:85:60: 09:d8:8f:7c:c6:24:83:3f:2b:cb:7f:36:7f:4a:de:62:2c:b0: ae:69:5c:e3:75:92:d2:35:45:b5:20:f3:d4:b3:6b:6a:aa:d7: 9a:10:44:9c:8f:e2:c5:23:12:17:60:e2:0e:30:22:e5:e9:ee: 88:8d:ff:c6:0a:af:a5:10:f1:db:f0:94:71:04:c9:e2:f9:e3: aa:ac:95:90:26:9d:47:d0:39:1d:2f:01:ff:7b:7a:8c:85:5b: 56:53:3d:ea:ba:a4:48:f3:f7:ef:35:30:14:46:db:b9:a8:b4: 3b:c2:28:af:0b:42:fb:16:9b:6b:fd:56:ec:45:12:65:eb:c4: 68:06:63:a7:fe:24:6d:15:e4:dd:9d:e9:4f:1e:4f:cd:23:b9: 5d:2d:55:c1:b7:ce:2a:c0:7e:b8:69:79:33:27:f2:98:78:0e: 55:7f:fc:d2:93:42:d3:76:db:ee:d8:85:f6:c0:f1:9e:f9:7f: 47:e1:52:7e:14:26:64:6a:be:4a:41:d7:51:4a:69:eb:d4:16: 2b:a3:e0:34:2f:79:d0:fb:c6:bf:5d:4b:12:45:a9:d6:0b:54: 0d:d7:86:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUzRTg2QThCNDI4OTk0 Q0M1QzVCNkY4OTU2RDYzRDNCNTRDOTJENzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJaXSQbKt5g6juP2fqOknTFOCyhGCmITXUGPk14uB53L9E8ynF XJ5ncFq0lALsyFm6iD+yNGRCwgjMs6F7kk81JLHddEhQxKhyLHbk26Guo3lJNyw0 uxBrio9hPDY9DD8f2HhJDvOZsg7nHea23U7Y22VVXCuLrxMqcaB0Lx1XmPDewVEz ArLLAJGbzLDSagTn5J0nhHNxvbWsbheB2ZmeIk862+JCZPcS1RPYCcBmms1Bim/4 nMOPctBWAa3XrYKfZl4kWgJgPXBOML3qZLgSL1+b7tKmq1ne68SB1Ck2PD+BNNKq nagtTRvDXLJAbTn88dfgQuj905b2sHigbDhJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUU+hqi0KJlMxcW2+JVtY9O1TJLXgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1UtaHFpMEtKbE14Y1cyLUpW dFk5TzFUSkxYZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w4AwDQYJKoZIhvcNAQELBQADggEBALsDQ280qpVo8ilPa8YtZy3dD/oHBNc0xkMV +Myou1hVH1CFYAnYj3zGJIM/K8t/Nn9K3mIssK5pXON1ktI1RbUg89Sza2qq15oQ RJyP4sUjEhdg4g4wIuXp7oiN/8YKr6UQ8dvwlHEEyeL546qslZAmnUfQOR0vAf97 eoyFW1ZTPeq6pEjz9+81MBRG27motDvCKK8LQvsWm2v9VuxFEmXrxGgGY6f+JG0V 5N2d6U8eT80juV0tVcG3zirAfrhpeTMn8ph4DlV//NKTQtN22+7YhfbA8Z75f0fh Un4UJmRqvkpB11FKaevUFiuj4DQvedD7xr9dSxJFqdYLVA3Xhpk= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org