$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WdTMBf_r_zPtfRv0OFnhptJRi1k.roa File: WdTMBf_r_zPtfRv0OFnhptJRi1k.roa (raw, json) Hash identifier: DmcEyKRdoKXktegavGGOywSPTquKEAkLdqsAHeSmaYo= Subject key identifier: 59:D4:CC:05:FF:EB:FF:33:ED:7D:1B:F4:38:59:E1:A6:D2:51:8B:59 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2866 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WdTMBf_r_zPtfRv0OFnhptJRi1k.roa Signing time: Fri 01 Sep 2023 10:05:17 +0000 ROA not before: Fri 01 Sep 2023 10:05:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 211.76.113.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10342 (0x2866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=59D4CC05FFEBFF33ED7D1BF43859E1A6D2518B59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:99:4b:6c:b1:e3:22:5c:00:73:78:e8:06: 92:3b:78:2a:64:33:71:a5:f5:8c:86:cf:ee:aa:aa: 11:00:bc:40:1f:a0:4a:33:d1:a7:dd:d6:df:5b:b4: 89:99:8d:d5:9d:11:60:9e:b5:fc:0f:13:17:78:32: 39:46:09:69:a8:53:a5:e3:88:79:97:df:6c:94:97: 2a:b8:a9:de:53:66:ee:d4:ae:80:b5:83:1d:79:69: da:23:eb:71:76:79:ba:4d:1e:dc:00:f9:00:a9:0c: a5:30:28:cd:93:81:49:c5:0b:f7:92:f5:2e:20:55: 79:17:a0:a5:f0:ac:c8:25:54:52:9e:09:ea:f8:56: 5f:4a:b7:a7:1b:84:7a:41:50:8d:f6:2d:f7:5b:e2: 5e:7b:8f:d8:24:13:7e:b9:f4:2b:38:d0:26:3c:47: 73:9b:c1:7b:80:10:62:ef:9c:1d:7a:97:07:e6:a2: 24:02:b1:2f:f0:91:fc:79:50:14:66:89:ed:4c:a1: 1f:3b:24:7a:25:f0:28:cd:2f:f5:cf:aa:10:e7:76: 73:ba:57:e8:3e:63:3d:b5:1d:52:ca:48:b6:e5:ea: 5d:b1:bc:4d:bf:c7:76:55:d5:06:ba:7e:f5:73:5e: 4f:ba:0b:14:4a:21:07:65:27:cc:15:f9:0d:dd:cc: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D4:CC:05:FF:EB:FF:33:ED:7D:1B:F4:38:59:E1:A6:D2:51:8B:59 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WdTMBf_r_zPtfRv0OFnhptJRi1k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.113.128/25 Signature Algorithm: sha256WithRSAEncryption 99:11:15:ef:61:c5:12:73:f0:e1:91:0d:a2:c5:be:c5:ff:98: 9b:62:64:de:f0:8d:57:ee:07:66:20:a6:2b:ef:08:b6:76:36: 46:3d:e0:0f:a9:20:c7:0c:06:bb:ac:7e:62:12:fc:1a:b6:21: 96:7a:37:c1:df:fb:56:de:95:80:ae:71:cd:97:89:dd:aa:7a: 4e:63:93:52:68:47:82:fa:43:23:a4:27:c2:f6:3d:96:95:28: 49:96:df:fc:e8:6c:04:44:4f:ed:c2:fc:2e:ea:0d:10:76:77: 75:28:88:50:f6:78:17:49:73:3c:8e:1d:3f:16:3d:a9:77:92: 52:90:72:5d:26:c0:e8:58:7b:4d:25:81:61:a3:5e:33:64:3a: 54:7f:43:30:9f:d0:d8:80:25:6b:05:6c:68:33:6f:b0:0b:c1: 17:6e:b5:d3:39:cf:68:df:b3:57:92:f3:5e:af:a8:69:78:ab: 33:97:e0:28:20:f3:69:43:0c:39:01:76:03:eb:24:d5:db:6b: f5:9a:92:bd:60:5d:e1:b6:fb:04:e2:43:96:26:97:64:f2:d1: ab:d9:0d:bc:14:c7:52:7f:e4:fe:8f:f2:df:ed:01:d6:ab:47: e4:0a:a5:86:5e:62:ff:95:08:c4:76:02:f2:1e:20:9f:7d:36: f5:bd:5a:f5 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKGYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU5RDRDQzA1RkZFQkZG MzNFRDdEMUJGNDM4NTlFMUE2RDI1MThCNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoNZlLbLHjIlwAc3joBpI7eCpkM3Gl9YyGz+6qqhEAvEAfoEoz 0afd1t9btImZjdWdEWCetfwPExd4MjlGCWmoU6XjiHmX32yUlyq4qd5TZu7UroC1 gx15adoj63F2ebpNHtwA+QCpDKUwKM2TgUnFC/eS9S4gVXkXoKXwrMglVFKeCer4 Vl9Kt6cbhHpBUI32Lfdb4l57j9gkE3659Cs40CY8R3ObwXuAEGLvnB16lwfmoiQC sS/wkfx5UBRmie1MoR87JHol8CjNL/XPqhDndnO6V+g+Yz21HVLKSLbl6l2xvE2/ x3ZV1Qa6fvVzXk+6CxRKIQdlJ8wV+Q3dzM/DAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUWdTMBf/r/zPtfRv0OFnhptJRi1kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dkVE1CZl9yX3pQdGZSdjBP Rm5ocHRKUmkxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THGAMA0GCSqGSIb3DQEBCwUAA4IBAQCZERXvYcUSc/DhkQ2ixb7F/5ibYmTe8I1X 7gdmIKYr7wi2djZGPeAPqSDHDAa7rH5iEvwatiGWejfB3/tW3pWArnHNl4ndqnpO Y5NSaEeC+kMjpCfC9j2WlShJlt/86GwERE/twvwu6g0Qdnd1KIhQ9ngXSXM8jh0/ Fj2pd5JSkHJdJsDoWHtNJYFho14zZDpUf0Mwn9DYgCVrBWxoM2+wC8EXbrXTOc9o 37NXkvNer6hpeKszl+AoIPNpQww5AXYD6yTV22v1mpK9YF3htvsE4kOWJpdk8tGr 2Q28FMdSf+T+j/Lf7QHWq0fkCqWGXmL/lQjEdgLyHiCffTb1vVr1 -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org