$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XljuMaLJ1erIGsNKh5WwPSk416A.roa File: XljuMaLJ1erIGsNKh5WwPSk416A.roa (raw, json) Hash identifier: qeuSm+yuSlrkOl3SvvH/uPkuQxrjrLlIntYBwWLpGRo= Subject key identifier: 5E:58:EE:31:A2:C9:D5:EA:C8:1A:C3:4A:87:95:B0:3D:29:38:D7:A0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A5A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XljuMaLJ1erIGsNKh5WwPSk416A.roa Signing time: Fri 01 Sep 2023 10:07:48 +0000 ROA not before: Fri 01 Sep 2023 10:07:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.194.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10842 (0x2a5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5E58EE31A2C9D5EAC81AC34A8795B03D2938D7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:c6:ab:14:d5:00:9e:57:53:c8:1b:e4:ae: 86:14:d3:0f:70:ef:04:c9:c8:95:76:2a:89:bd:a5: c8:c5:65:7d:b3:d2:09:c4:16:b4:3b:2e:d6:e3:37: c4:86:18:b3:07:22:bf:86:85:db:b0:65:b3:7b:87: 3a:00:05:81:e8:33:8d:97:79:27:71:91:79:c8:1f: 88:7a:37:ed:b3:e8:e6:79:c0:75:4e:5c:62:d1:6c: 68:bc:13:fc:c7:e1:bb:b3:1c:39:c6:06:ab:da:7a: bd:6c:47:1d:ad:2c:0b:cf:30:c4:6d:a9:76:5c:7a: 5a:56:82:a3:c4:a8:00:a9:11:82:65:74:80:17:57: db:20:be:2a:e3:b9:40:82:63:71:56:be:ae:7b:b4: 51:c5:da:88:44:d4:a6:5c:9e:b4:1c:3c:31:2a:39: 69:8c:0a:c3:54:ec:17:2f:41:09:38:03:3e:c6:c0: 71:5f:a2:23:48:5e:31:31:b6:e9:a1:61:33:d0:fd: c0:61:f7:5b:2d:3a:57:e3:0f:84:70:24:52:bc:7c: f3:c0:7b:0e:43:e8:42:15:dd:83:9b:e0:d1:a0:6c: c6:5e:a5:2d:fc:79:0c:8d:62:d6:c4:71:3b:b0:9f: 9c:31:65:38:56:7d:0d:d6:3b:d6:2d:a4:e6:80:c9: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:58:EE:31:A2:C9:D5:EA:C8:1A:C3:4A:87:95:B0:3D:29:38:D7:A0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XljuMaLJ1erIGsNKh5WwPSk416A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.254.0/23 Signature Algorithm: sha256WithRSAEncryption 08:74:b9:ab:31:9e:a3:33:f0:64:e4:ce:29:a1:e3:09:e5:64: e5:b4:27:a4:97:2f:af:70:60:9d:32:dd:3f:0f:d0:70:22:63: b3:63:eb:2c:7f:e7:91:78:65:da:36:a3:fd:2f:80:37:bf:3e: f2:0b:ff:d7:c9:75:09:44:75:19:d9:5d:af:13:5f:44:3a:2b: aa:9f:14:66:58:24:fb:a5:af:6c:1f:c9:55:d8:54:8e:be:d6: ef:a5:97:e4:d9:07:d7:27:4c:bb:67:e8:dc:51:07:55:56:e2: b4:20:d7:75:19:e6:7e:fe:1a:ba:55:b4:1b:d6:b9:34:64:ed: 0d:e4:cc:eb:1c:21:54:67:ee:6c:14:d3:50:f8:0b:c4:08:18: 17:b1:df:ff:1c:8b:ed:31:bb:cd:0b:89:bc:38:58:12:29:a1: 1e:07:be:35:ec:41:72:90:f6:fd:a8:2d:d5:49:e0:2a:e7:bf: 15:1f:95:fc:a1:ee:e4:a5:f3:ee:02:64:5d:cb:46:95:d4:0c: d2:45:a4:e9:3f:64:2e:b2:30:6d:cb:fd:cd:4a:2c:50:0b:86: bc:ce:73:43:45:b5:42:48:6f:de:67:f8:fc:51:f1:7f:e3:3b: 82:66:0d:6d:a5:d1:c7:9d:7e:8b:f9:4e:c8:ee:b0:a8:dd:fe: 69:85:d9:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVFNThFRTMxQTJDOUQ1 RUFDODFBQzM0QTg3OTVCMDNEMjkzOEQ3QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDG8arFNUAnldTyBvkroYU0w9w7wTJyJV2Kom9pcjFZX2z0gnE FrQ7LtbjN8SGGLMHIr+GhduwZbN7hzoABYHoM42XeSdxkXnIH4h6N+2z6OZ5wHVO XGLRbGi8E/zH4buzHDnGBqvaer1sRx2tLAvPMMRtqXZcelpWgqPEqACpEYJldIAX V9sgvirjuUCCY3FWvq57tFHF2ohE1KZcnrQcPDEqOWmMCsNU7BcvQQk4Az7GwHFf oiNIXjExtumhYTPQ/cBh91stOlfjD4RwJFK8fPPAew5D6EIV3YOb4NGgbMZepS38 eQyNYtbEcTuwn5wxZThWfQ3WO9YtpOaAyZKTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXljuMaLJ1erIGsNKh5WwPSk416AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hsanVNYUxKMWVySUdzTkto NVd3UFNrNDE2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wv4wDQYJKoZIhvcNAQELBQADggEBAAh0uasxnqMz8GTkzimh4wnlZOW0J6SXL69w YJ0y3T8P0HAiY7Nj6yx/55F4Zdo2o/0vgDe/PvIL/9fJdQlEdRnZXa8TX0Q6K6qf FGZYJPulr2wfyVXYVI6+1u+ll+TZB9cnTLtn6NxRB1VW4rQg13UZ5n7+GrpVtBvW uTRk7Q3kzOscIVRn7mwU01D4C8QIGBex3/8ci+0xu80Libw4WBIpoR4HvjXsQXKQ 9v2oLdVJ4CrnvxUflfyh7uSl8+4CZF3LRpXUDNJFpOk/ZC6yMG3L/c1KLFALhrzO c0NFtUJIb95n+PxR8X/jO4JmDW2l0cedfov5TsjusKjd/mmF2Q0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org