$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbcDECpAZe79O1h07FqmX_06h0.roa File: XbbcDECpAZe79O1h07FqmX_06h0.roa (raw, json) Hash identifier: IKaRLiUAg1geN2qhehLSGD6sDGChr2gJGSfu7mPCmSU= Subject key identifier: 5D:B6:DC:0C:40:A9:01:97:BB:F4:ED:61:D3:B1:6A:99:7F:F4:EA:1D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 297A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbcDECpAZe79O1h07FqmX_06h0.roa Signing time: Fri 01 Sep 2023 10:06:39 +0000 ROA not before: Fri 01 Sep 2023 10:06:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10618 (0x297a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5DB6DC0C40A90197BBF4ED61D3B16A997FF4EA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:fb:6d:3a:0b:a2:dc:75:e2:f1:c9:f8:ec: 21:d2:7c:45:76:b1:fa:c3:81:3c:3f:a8:f2:7f:56: 9b:ac:aa:d8:c2:b4:b4:e6:4b:a8:56:f4:74:03:c7: 31:80:d4:67:0c:e8:f1:76:fb:cb:86:8a:2f:1b:92: 18:25:1a:9a:a8:9b:2d:58:cd:21:03:5a:82:5c:db: 5c:b2:88:16:1b:b2:0c:83:03:be:b0:8e:5a:ef:2e: 82:b1:5b:b5:af:52:37:9c:14:16:c2:d0:b9:07:c6: 65:d5:eb:c8:7a:7d:79:05:c7:08:7a:33:bd:49:59: ef:41:a3:88:2f:f1:ab:ec:bc:b6:3c:23:d5:75:8d: 01:62:72:a1:9c:c2:f8:f3:b1:73:46:d5:5b:c5:ee: ef:f3:c5:5a:09:71:03:4a:f0:00:bb:f1:57:3c:eb: 05:59:a1:9b:8b:36:bb:8f:be:3e:aa:39:4d:52:ca: 24:1d:44:b6:a9:b2:80:df:06:b8:9e:01:68:81:ae: 06:05:13:fe:77:8b:d9:b4:13:df:6a:45:04:c2:fa: 7c:70:89:6d:ce:5f:f3:bd:01:62:5c:a7:22:fa:99: e8:e6:2d:ce:ec:72:d1:14:3a:ee:54:ed:20:99:ed: 37:9c:23:98:06:f1:a5:3b:9c:88:a8:41:b8:98:e1: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B6:DC:0C:40:A9:01:97:BB:F4:ED:61:D3:B1:6A:99:7F:F4:EA:1D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbcDECpAZe79O1h07FqmX_06h0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.183.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:f8:94:f9:cd:15:a8:5c:3a:a5:e8:ef:09:e3:f5:ec:f0:e8: d5:a5:1d:43:a9:7b:cf:38:dc:c9:b6:d4:81:29:7c:95:a6:d4: cc:b4:fc:81:26:d1:dc:03:98:3d:47:23:f7:f2:6f:f4:b2:d8: 04:bd:b7:d4:ed:5b:82:3c:d5:06:4b:79:e3:d4:6d:e8:48:c8: fe:5a:bc:c7:0f:1b:0b:e0:e1:63:67:ac:e8:f9:3c:e7:46:ec: ff:ab:15:a7:73:34:16:ec:df:78:d6:4f:d8:8d:c7:e8:db:1a: c3:1c:0f:70:32:de:f2:d4:88:51:4c:1c:3d:15:57:b5:27:7c: 76:29:00:f0:81:6e:12:8f:b4:66:b8:95:6a:cc:ac:cd:24:1f: 3e:47:aa:2e:5a:1b:7c:a2:f3:d1:22:23:3f:e4:9d:b0:69:80: 37:1a:0a:1b:35:ae:8d:7c:34:f2:b8:ec:9e:63:1a:15:35:8d: 05:19:fb:86:e3:dc:30:e1:cb:04:e2:ea:eb:fc:1b:51:00:4f: bb:cf:4f:ad:66:e0:d7:27:fc:86:89:8a:2c:c1:26:3b:78:1b: 73:a6:db:9c:a7:33:9b:cd:c6:34:44:64:28:6c:03:ab:4f:a1: dd:3f:66:de:37:f9:ac:3b:4c:5c:82:d5:ed:fc:b8:c0:62:f2: 1d:7e:87:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVEQjZEQzBDNDBBOTAx OTdCQkY0RUQ2MUQzQjE2QTk5N0ZGNEVBMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/DPttOgui3HXi8cn47CHSfEV2sfrDgTw/qPJ/VpusqtjCtLTm S6hW9HQDxzGA1GcM6PF2+8uGii8bkhglGpqomy1YzSEDWoJc21yyiBYbsgyDA76w jlrvLoKxW7WvUjecFBbC0LkHxmXV68h6fXkFxwh6M71JWe9Bo4gv8avsvLY8I9V1 jQFicqGcwvjzsXNG1VvF7u/zxVoJcQNK8AC78Vc86wVZoZuLNruPvj6qOU1SyiQd RLapsoDfBrieAWiBrgYFE/53i9m0E99qRQTC+nxwiW3OX/O9AWJcpyL6mejmLc7s ctEUOu5U7SCZ7TecI5gG8aU7nIioQbiY4Z/hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXbbcDECpAZe79O1h07FqmX/06h0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hiYmNERUNwQVplNzlPMWgw N0ZxbVhfMDZoMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w7cwDQYJKoZIhvcNAQELBQADggEBAA/4lPnNFahcOqXo7wnj9ezw6NWlHUOpe884 3Mm21IEpfJWm1My0/IEm0dwDmD1HI/fyb/Sy2AS9t9TtW4I81QZLeePUbehIyP5a vMcPGwvg4WNnrOj5POdG7P+rFadzNBbs33jWT9iNx+jbGsMcD3Ay3vLUiFFMHD0V V7UnfHYpAPCBbhKPtGa4lWrMrM0kHz5Hqi5aG3yi89EiIz/knbBpgDcaChs1ro18 NPK47J5jGhU1jQUZ+4bj3DDhywTi6uv8G1EAT7vPT61m4Ncn/IaJiizBJjt4G3Om 25ynM5vNxjREZChsA6tPod0/Zt43+aw7TFyC1e38uMBi8h1+hxk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org