$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X4Zv5JKpowVDBBMZ3E-wZupMPBY.roa File: X4Zv5JKpowVDBBMZ3E-wZupMPBY.roa (raw, json) Hash identifier: 4Nyi9T1nsmvN5sQdulmXlGtaQSAjK9pmx+iD1bwaByQ= Subject key identifier: 5F:86:6F:E4:92:A9:A3:05:43:04:13:19:DC:4F:B0:66:EA:4C:3C:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AF8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X4Zv5JKpowVDBBMZ3E-wZupMPBY.roa Signing time: Fri 01 Sep 2023 10:08:30 +0000 ROA not before: Fri 01 Sep 2023 10:08:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.248.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11000 (0x2af8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5F866FE492A9A30543041319DC4FB066EA4C3C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:4f:0d:23:f2:5b:48:d3:7d:3e:f7:3b:65: c1:4b:b3:52:ca:9e:dc:91:65:2c:23:92:38:c3:8d: 9c:50:a5:0a:56:26:37:eb:e3:b2:da:50:c5:f4:11: 4c:39:76:03:68:8e:c5:5a:37:a0:1c:4e:92:da:a4: e4:0d:9a:29:90:17:4c:a0:0d:6f:1a:c2:6e:bf:30: 9d:90:92:a7:2b:ba:ab:37:59:ff:a7:b6:7f:ae:b2: a3:54:b2:75:f3:8c:17:45:ff:a9:35:f3:df:2e:e5: 44:38:a0:1b:d9:17:b2:8a:14:e0:68:a2:c3:db:d2: 86:04:7d:04:d3:d7:5b:99:6a:38:d2:bd:cf:f4:2b: f6:4f:3a:62:21:50:de:44:1f:6e:33:e1:af:78:0c: 19:a8:2f:b1:f5:25:bf:e1:bd:68:05:ed:d6:3c:2b: 3a:b7:fc:e5:7f:d9:44:b5:67:4d:11:08:ac:77:50: 79:30:a5:58:52:15:0c:ce:21:c8:0b:20:67:e6:8f: d7:34:e1:35:eb:76:6e:0a:aa:4a:d7:6e:63:d1:bf: 95:d5:42:a6:c1:bc:d8:d2:bd:d2:77:da:c9:5f:4d: 87:26:c5:bf:9b:12:fa:48:97:c6:71:f6:56:43:18: 38:07:56:64:be:4a:98:dc:8b:0e:1e:6d:4c:2a:ae: 38:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:6F:E4:92:A9:A3:05:43:04:13:19:DC:4F:B0:66:EA:4C:3C:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X4Zv5JKpowVDBBMZ3E-wZupMPBY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.248.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:a1:25:6c:42:47:6c:b4:18:81:74:bc:0e:c2:cb:6c:2a:dc: 6d:e6:64:7c:4b:5d:16:32:08:97:a9:da:0f:32:e9:3f:e9:dc: 72:30:60:e0:c7:b1:95:c6:75:7c:b8:21:e8:82:e0:11:f4:43: ad:0d:4e:41:73:e1:a6:e6:6b:4a:cf:86:8a:06:81:e3:46:12: d6:8e:e0:da:18:e4:fd:52:ef:4e:b1:49:a7:4d:54:31:20:65: bc:c3:ff:30:f3:1c:ca:6a:13:72:34:8f:a7:ae:84:a0:47:ee: 27:30:b7:35:98:01:fc:7e:d5:9d:c9:0d:06:e2:48:ff:8f:f5: ab:8c:b1:1f:96:9c:2a:d0:fa:c8:ed:78:70:b9:5b:68:ec:f4: 1b:7c:90:99:5f:67:a5:0a:e0:46:f5:eb:14:e8:31:69:ab:0a: 16:15:a2:96:4f:0f:a9:2e:d3:1f:9c:c7:e4:ec:0e:3c:d8:6b: f4:96:e9:87:a2:ec:8b:3f:aa:0c:ca:fe:38:bb:04:c4:61:04: 8a:52:17:67:fa:22:4c:98:96:1b:f7:cd:20:dc:f1:7e:cc:e2: c9:8b:05:ae:da:1a:c1:cc:9e:ba:d5:7f:e5:36:db:18:e1:ac: 9d:5e:62:15:64:81:6e:02:08:e0:61:d3:ba:ed:f9:f9:ec:82: 41:b6:7f:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVGODY2RkU0OTJBOUEz MDU0MzA0MTMxOURDNEZCMDY2RUE0QzNDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMWU8NI/JbSNN9Pvc7ZcFLs1LKntyRZSwjkjjDjZxQpQpWJjfr 47LaUMX0EUw5dgNojsVaN6AcTpLapOQNmimQF0ygDW8awm6/MJ2Qkqcruqs3Wf+n tn+usqNUsnXzjBdF/6k1898u5UQ4oBvZF7KKFOBoosPb0oYEfQTT11uZajjSvc/0 K/ZPOmIhUN5EH24z4a94DBmoL7H1Jb/hvWgF7dY8Kzq3/OV/2US1Z00RCKx3UHkw pVhSFQzOIcgLIGfmj9c04TXrdm4KqkrXbmPRv5XVQqbBvNjSvdJ32slfTYcmxb+b EvpIl8Zx9lZDGDgHVmS+Spjciw4ebUwqrjhRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUX4Zv5JKpowVDBBMZ3E+wZupMPBYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1g0WnY1Sktwb3dWREJCTVoz RS13WnVwTVBCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wvgwDQYJKoZIhvcNAQELBQADggEBAF+hJWxCR2y0GIF0vA7Cy2wq3G3mZHxLXRYy CJep2g8y6T/p3HIwYODHsZXGdXy4IeiC4BH0Q60NTkFz4abma0rPhooGgeNGEtaO 4NoY5P1S706xSadNVDEgZbzD/zDzHMpqE3I0j6euhKBH7icwtzWYAfx+1Z3JDQbi SP+P9auMsR+WnCrQ+sjteHC5W2js9Bt8kJlfZ6UK4Eb16xToMWmrChYVopZPD6ku 0x+cx+TsDjzYa/SW6Yei7Is/qgzK/ji7BMRhBIpSF2f6IkyYlhv3zSDc8X7M4smL Ba7aGsHMnrrVf+U22xjhrJ1eYhVkgW4CCOBh07rt+fnsgkG2f4o= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org