$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcCL5bLbfI_oaSQyX2cO_X_8K7A.roa File: ZcCL5bLbfI_oaSQyX2cO_X_8K7A.roa (raw, json) Hash identifier: UMV3qy77ZMv18L35OcA2XYZq6Ri8OIFSKPDWvJF1ftE= Subject key identifier: 65:C0:8B:E5:B2:DB:7C:8F:E8:69:24:32:5F:67:0E:FD:7F:FC:2B:B0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 291B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcCL5bLbfI_oaSQyX2cO_X_8K7A.roa Signing time: Fri 01 Sep 2023 10:06:09 +0000 ROA not before: Fri 01 Sep 2023 10:06:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10523 (0x291b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=65C08BE5B2DB7C8FE86924325F670EFD7FFC2BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:69:7b:94:42:99:da:91:7c:23:df:d7:99: de:74:39:e4:4a:56:0a:5f:59:03:b7:07:ad:c4:47: 15:62:cd:e1:f1:76:cc:01:b8:f3:ce:82:f1:09:af: 14:b1:b1:a0:d9:62:82:09:a5:42:72:1e:0c:0c:7c: 3d:bf:d7:ab:73:56:42:67:29:b7:79:ea:73:20:46: 86:ff:b7:09:5c:be:9a:03:72:75:48:a1:48:e8:20: d3:07:38:7e:b9:b7:ef:4a:7e:ca:a4:62:ed:f0:9c: 55:b7:53:67:d4:57:8b:bf:09:ac:6b:08:1d:79:a8: 47:97:a3:6b:40:ce:38:b0:6d:3e:e7:23:38:93:25: 6c:97:24:47:36:4a:0a:c1:70:2b:c7:18:ee:53:55: c7:81:11:0d:ba:ee:9e:a3:1d:34:3a:bb:d0:28:11: da:4e:6f:26:09:9c:f8:3c:ba:4b:33:93:af:af:3b: e4:e5:5d:e4:5c:13:d8:c6:8c:2b:96:2b:a3:0f:b8: 52:61:19:df:29:f7:e5:17:12:42:a0:87:0a:db:2e: 6c:78:3a:1b:ed:47:86:90:e6:f4:9a:58:a0:39:64: 7f:21:d0:e6:71:7c:dc:17:68:65:08:1d:6e:38:39: d0:4c:0e:08:a4:24:9c:e3:3e:9b:77:6f:75:f8:88: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C0:8B:E5:B2:DB:7C:8F:E8:69:24:32:5F:67:0E:FD:7F:FC:2B:B0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcCL5bLbfI_oaSQyX2cO_X_8K7A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.0/24 Signature Algorithm: sha256WithRSAEncryption 22:0f:81:59:15:8a:f9:ca:f3:f0:bc:99:77:31:8b:67:63:d6: fa:bc:54:c6:3d:f9:fc:28:af:6d:7d:87:d4:10:0f:fe:38:13: df:1b:1c:53:b4:5c:0a:d6:8c:d2:1f:98:cd:20:3d:be:f6:c8: 79:8f:1e:89:b1:13:5a:99:40:43:6d:0d:33:c6:c9:ff:fe:6f: 2b:6e:84:5c:9a:c1:fe:b7:87:68:16:3d:33:43:b0:c7:2b:a3: 37:c7:25:d7:17:ae:86:18:3f:22:bc:f2:f6:40:5c:c2:f2:fe: f9:8a:f5:a2:d7:96:71:e1:03:a9:b1:fb:93:11:70:ee:35:e9: 78:e7:d9:84:ab:fc:21:8b:ec:cd:5c:26:7b:c2:28:7f:81:15: ad:d3:d7:98:58:2a:ab:04:4a:26:48:68:30:b2:5e:b6:ab:f3: 6c:6a:d9:36:85:ee:ff:ae:97:fa:68:3b:49:27:ec:78:29:10: 61:f1:f9:f3:d7:15:03:fd:ed:bc:88:ab:f7:89:20:de:74:69: a6:67:c5:63:81:5b:fe:90:b9:be:e8:68:61:99:c1:ce:ee:24: 08:1f:8f:d4:a9:77:94:a0:8a:9a:45:88:b4:86:9c:15:f9:36: 87:0e:f3:b7:fe:30:e5:f9:d6:4d:fc:b8:4c:db:af:dc:b8:99: bb:82:fd:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1QzA4QkU1QjJEQjdD OEZFODY5MjQzMjVGNjcwRUZEN0ZGQzJCQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi+ml7lEKZ2pF8I9/Xmd50OeRKVgpfWQO3B63ERxVizeHxdswB uPPOgvEJrxSxsaDZYoIJpUJyHgwMfD2/16tzVkJnKbd56nMgRob/twlcvpoDcnVI oUjoINMHOH65t+9KfsqkYu3wnFW3U2fUV4u/CaxrCB15qEeXo2tAzjiwbT7nIziT JWyXJEc2SgrBcCvHGO5TVceBEQ267p6jHTQ6u9AoEdpObyYJnPg8ukszk6+vO+Tl XeRcE9jGjCuWK6MPuFJhGd8p9+UXEkKghwrbLmx4OhvtR4aQ5vSaWKA5ZH8h0OZx fNwXaGUIHW44OdBMDgikJJzjPpt3b3X4iPFtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZcCL5bLbfI/oaSQyX2cO/X/8K7AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pjQ0w1YkxiZklfb2FTUXlY MmNPX1hfOEs3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+4wDQYJKoZIhvcNAQELBQADggEBACIPgVkVivnK8/C8mXcxi2dj1vq8VMY9+fwo r219h9QQD/44E98bHFO0XArWjNIfmM0gPb72yHmPHomxE1qZQENtDTPGyf/+bytu hFyawf63h2gWPTNDsMcrozfHJdcXroYYPyK88vZAXMLy/vmK9aLXlnHhA6mx+5MR cO416Xjn2YSr/CGL7M1cJnvCKH+BFa3T15hYKqsESiZIaDCyXrar82xq2TaF7v+u l/poO0kn7HgpEGHx+fPXFQP97byIq/eJIN50aaZnxWOBW/6Qub7oaGGZwc7uJAgf j9Spd5SgippFiLSGnBX5NocO87f+MOX51k38uEzbr9y4mbuC/SE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org