$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfBr0DL7tFE0uHBfTm_0wD9300I.roa File: VfBr0DL7tFE0uHBfTm_0wD9300I.roa (raw, json) Hash identifier: 1bDyn9PFbnvv/erhfdShGsPgZUxGZtjFFTpABA3pAa4= Subject key identifier: 55:F0:6B:D0:32:FB:B4:51:34:B8:70:5F:4E:6F:F4:C0:3F:77:D3:42 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A09 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfBr0DL7tFE0uHBfTm_0wD9300I.roa Signing time: Fri 01 Sep 2023 10:07:24 +0000 ROA not before: Fri 01 Sep 2023 10:07:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10761 (0x2a09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=55F06BD032FBB45134B8705F4E6FF4C03F77D342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:e3:04:6f:30:8c:ee:d2:0b:74:d4:5c:da: ff:71:99:67:2e:0b:4c:b9:56:0d:f7:26:63:10:66: c1:67:fc:99:02:3a:95:cd:68:04:6f:a5:f6:8b:23: af:8c:e8:5d:6a:4d:94:89:27:0e:5c:6f:11:bd:27: 7e:e1:db:a4:02:7c:7e:e2:35:0a:4c:90:c5:a1:f9: 0c:ad:e9:09:a3:17:c4:8e:8f:06:8f:e4:1e:8c:33: 7b:f9:35:7d:5f:bf:63:76:0f:a8:a4:68:63:12:af: 3e:99:f7:86:9c:84:83:4c:28:75:2d:eb:be:a8:ea: f7:07:33:f4:35:ca:bb:89:54:37:0e:99:61:f0:96: 3a:81:95:b0:32:77:9b:8c:a4:72:79:0b:5e:7d:44: a2:5e:3c:cd:23:01:5b:b6:9e:78:4f:56:a7:cb:2d: 2a:fd:6a:94:17:ef:50:b3:06:5b:80:45:ab:4d:4a: ce:87:89:2c:b0:bc:2a:c3:34:20:f7:22:15:5d:2e: 99:72:90:6d:3c:c9:0b:d7:4a:65:e4:a3:2e:6a:a8: ec:ea:29:4e:20:cd:87:c2:4c:22:8e:bb:d3:9f:c2: c3:3a:55:fb:fd:b8:f9:da:b6:7f:72:14:1a:c5:50: a7:54:ef:f9:2e:c9:c4:e1:21:3a:3d:38:6c:0a:cf: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F0:6B:D0:32:FB:B4:51:34:B8:70:5F:4E:6F:F4:C0:3F:77:D3:42 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfBr0DL7tFE0uHBfTm_0wD9300I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.0/24 Signature Algorithm: sha256WithRSAEncryption 47:95:2c:28:3c:2d:a0:07:bf:9c:18:52:30:f3:09:6c:89:0e: bb:a7:6a:9e:d6:c7:54:8d:ca:5d:df:5e:c5:03:80:de:4f:55: 38:d3:e9:e6:35:f6:83:a8:1e:f7:68:01:31:56:e7:2d:77:c6: b3:29:33:61:59:79:c4:dc:73:f8:3a:df:a2:9b:c8:fe:4e:fe: 6f:3e:3a:49:b8:57:d9:d4:42:b5:0e:87:1f:48:e6:65:fb:c1: 7b:8f:0e:a3:9b:f4:fe:35:4c:1a:21:57:65:70:c6:27:5b:44: e8:94:61:17:71:97:7d:f8:cb:d2:ec:fa:73:01:ed:0b:38:50: 31:4d:0b:b2:fe:0b:6c:55:25:c8:99:5d:dc:03:e5:1a:e3:21: 3f:ba:58:59:82:0d:e6:92:02:93:f1:21:17:ef:68:6b:1f:e0: 52:bc:87:7d:0e:bf:18:fe:9d:57:4f:5a:3a:ea:07:7a:96:62: c4:82:4a:ad:1d:40:f3:c3:f8:13:51:ad:f3:c4:20:40:84:ea: 5f:80:50:be:46:cb:90:24:2f:85:86:29:db:a0:2b:65:a3:4f: 3d:d1:a9:97:4e:5a:f5:e3:91:15:83:82:f2:bb:a8:80:a2:e1: 5d:76:0d:8f:3a:3b:7f:39:7a:4e:f6:39:b4:37:0d:6f:32:62: 1a:96:25:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU1RjA2QkQwMzJGQkI0 NTEzNEI4NzA1RjRFNkZGNEMwM0Y3N0QzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzVeMEbzCM7tILdNRc2v9xmWcuC0y5Vg33JmMQZsFn/JkCOpXN aARvpfaLI6+M6F1qTZSJJw5cbxG9J37h26QCfH7iNQpMkMWh+Qyt6QmjF8SOjwaP 5B6MM3v5NX1fv2N2D6ikaGMSrz6Z94achINMKHUt676o6vcHM/Q1yruJVDcOmWHw ljqBlbAyd5uMpHJ5C159RKJePM0jAVu2nnhPVqfLLSr9apQX71CzBluARatNSs6H iSywvCrDNCD3IhVdLplykG08yQvXSmXkoy5qqOzqKU4gzYfCTCKOu9OfwsM6Vfv9 uPnatn9yFBrFUKdU7/kuycThITo9OGwKz+fBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVfBr0DL7tFE0uHBfTm/0wD9300IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZmQnIwREw3dEZFMHVIQmZU bV8wd0Q5MzAwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+0wDQYJKoZIhvcNAQELBQADggEBAEeVLCg8LaAHv5wYUjDzCWyJDrunap7Wx1SN yl3fXsUDgN5PVTjT6eY19oOoHvdoATFW5y13xrMpM2FZecTcc/g636KbyP5O/m8+ Okm4V9nUQrUOhx9I5mX7wXuPDqOb9P41TBohV2VwxidbROiUYRdxl334y9Ls+nMB 7Qs4UDFNC7L+C2xVJciZXdwD5RrjIT+6WFmCDeaSApPxIRfvaGsf4FK8h30Ovxj+ nVdPWjrqB3qWYsSCSq0dQPPD+BNRrfPEIECE6l+AUL5Gy5AkL4WGKdugK2WjTz3R qZdOWvXjkRWDgvK7qICi4V12DY86O385ek72ObQ3DW8yYhqWJWE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org