$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1aQlmGcgZmTwSmAC27xVGMW-cs.roa File: W1aQlmGcgZmTwSmAC27xVGMW-cs.roa (raw, json) Hash identifier: kqKTJqLD9ZVwNYSszNC2gtI6kJ4JvFHkCBjaL99/qJg= Subject key identifier: 5B:56:90:96:61:9C:81:99:93:C1:29:80:0B:6E:F1:54:63:16:F9:CB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2908 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1aQlmGcgZmTwSmAC27xVGMW-cs.roa Signing time: Fri 01 Sep 2023 10:06:04 +0000 ROA not before: Fri 01 Sep 2023 10:06:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10504 (0x2908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5B569096619C819993C129800B6EF1546316F9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:33:f5:36:bb:14:58:1e:24:58:e6:91:91: 19:d4:3a:a9:b7:21:7b:e0:f2:a7:e2:d0:e4:89:1f: ca:42:44:b6:3b:aa:94:cc:a2:96:ac:9f:2a:f3:d7: f8:f9:7e:d5:ee:6e:1b:11:6b:17:c8:9c:3b:b9:c2: c6:f5:cb:a3:fa:cf:9d:eb:86:1a:c0:1f:03:9f:e9: 66:cb:5c:b7:1a:de:bb:10:d1:3e:d6:22:69:7c:ab: ae:90:1e:e7:7a:53:dc:82:39:9a:c1:88:1c:a4:a5: b4:50:c4:7d:9d:e4:86:24:22:90:0d:4b:98:b3:a0: f7:4a:5b:98:b4:52:31:3a:35:64:d9:34:7f:b8:78: db:80:f9:55:c8:bb:dc:74:fa:e9:75:3c:7a:c0:4d: 10:d7:eb:99:91:22:38:9a:b3:88:72:68:f5:af:6f: d5:9f:54:ba:42:6d:f7:07:35:39:fd:12:2b:c9:d4: a1:30:7e:d2:b1:cd:38:70:49:34:22:03:1b:2e:5e: bd:4d:6d:84:70:6f:0c:6d:b0:bd:fa:bf:59:b8:82: d8:3d:b9:08:f7:3a:10:5f:88:d6:25:57:22:8f:92: 54:bf:bc:77:eb:f4:ab:30:9f:03:d2:45:03:a1:69: e3:88:3e:dc:4e:7a:ca:00:bf:8c:17:11:28:06:9b: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:56:90:96:61:9C:81:99:93:C1:29:80:0B:6E:F1:54:63:16:F9:CB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1aQlmGcgZmTwSmAC27xVGMW-cs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.160.0/22 Signature Algorithm: sha256WithRSAEncryption a3:16:51:6d:88:ea:ac:f0:53:d6:6e:95:9a:c5:c0:ed:39:dd: 53:5e:55:36:2c:ce:f4:a2:2c:81:14:6d:6a:7f:d7:dd:85:15: 59:96:f9:6f:1a:02:62:87:4e:6d:6f:7d:7b:9e:59:da:cf:b5: 57:79:67:2d:c7:fb:7a:ee:7b:6a:35:8e:19:0c:24:09:a8:03: 20:8f:4a:5d:12:66:1c:a5:c2:47:e2:12:9c:7e:f1:cd:28:b1: 17:87:9d:91:1b:0b:0e:a2:f9:94:a7:90:85:b2:a7:3f:53:a5: 4d:f8:db:f8:74:c7:e0:b9:47:a3:78:1f:04:e6:d9:0b:ef:f2: aa:d5:93:5f:4b:8b:c4:6e:2e:fe:c9:27:90:62:b8:de:cb:9e: c9:2e:77:18:e4:a6:90:88:25:3e:4d:0f:88:a5:3d:3a:b8:c7: 95:bb:18:f1:b9:fd:d0:18:4f:93:5d:64:15:1d:95:38:87:df: b0:32:84:3a:44:05:87:9a:00:f1:22:d9:f7:da:9d:0c:d4:c0: 03:9f:a1:67:e4:77:9b:b4:12:fb:62:db:56:51:38:32:2f:83: 71:b2:86:ec:70:db:7b:b0:4d:33:1b:14:6b:39:6a:8c:d6:39: f9:fc:2b:50:9b:45:8c:30:e4:8f:f2:a1:e3:06:dd:7a:de:ad: db:33:b5:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVCNTY5MDk2NjE5Qzgx OTk5M0MxMjk4MDBCNkVGMTU0NjMxNkY5Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGRzP1NrsUWB4kWOaRkRnUOqm3IXvg8qfi0OSJH8pCRLY7qpTM opasnyrz1/j5ftXubhsRaxfInDu5wsb1y6P6z53rhhrAHwOf6WbLXLca3rsQ0T7W Iml8q66QHud6U9yCOZrBiBykpbRQxH2d5IYkIpANS5izoPdKW5i0UjE6NWTZNH+4 eNuA+VXIu9x0+ul1PHrATRDX65mRIjias4hyaPWvb9WfVLpCbfcHNTn9EivJ1KEw ftKxzThwSTQiAxsuXr1NbYRwbwxtsL36v1m4gtg9uQj3OhBfiNYlVyKPklS/vHfr 9KswnwPSRQOhaeOIPtxOesoAv4wXESgGm6DVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUW1aQlmGcgZmTwSmAC27xVGMW+cswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1cxYVFsbUdjZ1ptVHdTbUFD Mjd4VkdNVy1jcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 waAwDQYJKoZIhvcNAQELBQADggEBAKMWUW2I6qzwU9ZulZrFwO053VNeVTYszvSi LIEUbWp/192FFVmW+W8aAmKHTm1vfXueWdrPtVd5Zy3H+3rue2o1jhkMJAmoAyCP Sl0SZhylwkfiEpx+8c0osReHnZEbCw6i+ZSnkIWypz9TpU342/h0x+C5R6N4HwTm 2Qvv8qrVk19Li8RuLv7JJ5BiuN7LnskudxjkppCIJT5ND4ilPTq4x5W7GPG5/dAY T5NdZBUdlTiH37AyhDpEBYeaAPEi2ffanQzUwAOfoWfkd5u0Evti21ZRODIvg3Gy huxw23uwTTMbFGs5aozWOfn8K1CbRYww5I/yoeMG3XrerdszteM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org