$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa File: ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa (raw, json) Hash identifier: qT2MNQbU5Ih0HT2OFb1tMqyZ/jX2D4cCvXw5HyhcGbE= Subject key identifier: 65:D1:98:70:85:37:A6:5D:FF:1E:91:D6:EC:2B:F0:7C:6A:B1:74:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A64 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa Signing time: Fri 01 Sep 2023 10:07:51 +0000 ROA not before: Fri 01 Sep 2023 10:07:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10852 (0x2a64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=65D198708537A65DFF1E91D6EC2BF07C6AB1741C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:48:d4:db:b7:62:1e:8b:b9:4d:be:f9:82: fe:2c:e8:d6:00:1c:ec:5b:87:e1:f0:64:a0:24:05: de:07:50:1e:cc:f8:90:59:5e:6d:4b:72:36:81:b5: 78:b5:4a:d9:87:d6:cc:82:01:b3:6a:b2:b7:c0:05: c9:57:ab:34:17:b6:a0:a8:f8:13:e9:0c:26:3a:da: d0:40:2e:1b:ac:24:1d:27:d0:54:74:a1:74:8f:0b: 0d:55:f8:9c:0e:9b:c6:71:d4:41:05:d9:bf:88:6a: 65:b5:2d:3d:02:96:e0:f9:42:e2:d3:5a:67:73:51: 26:fd:c1:ee:f1:b6:f2:d6:c0:77:61:83:b9:3f:21: 8a:f8:65:f4:3d:26:c3:3c:42:8f:99:ad:b3:ec:33: 45:36:6f:dd:84:de:29:e9:6f:19:3c:c7:f7:bd:22: 09:56:a1:16:26:b6:f1:91:51:34:b8:0c:e6:dd:6c: 57:49:ac:41:10:98:23:05:6d:75:4b:10:0f:96:6a: d8:0e:8d:aa:ad:f3:07:b9:4d:f4:8c:34:1b:6e:35: 82:4d:d2:68:d9:22:95:70:25:0f:b1:3a:ea:f1:5a: 5e:5a:81:4a:bd:73:4e:90:ca:c6:99:7f:8e:57:65: 83:68:73:af:7b:2a:d4:23:a7:e6:b7:4a:c5:0e:0e: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D1:98:70:85:37:A6:5D:FF:1E:91:D6:EC:2B:F0:7C:6A:B1:74:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.248.0/21 Signature Algorithm: sha256WithRSAEncryption 71:99:47:ad:5e:91:9c:2e:74:a5:f7:1f:ad:2b:c6:32:52:f5: 54:c2:4b:21:a0:da:0f:96:6f:a9:68:c1:09:73:56:1b:46:83: 7b:4d:0d:cf:38:cf:f3:6a:25:84:3f:ef:cc:dd:1c:60:b1:be: 6f:f3:96:50:a9:d6:2b:ed:72:fc:87:28:2a:49:7f:94:2a:4a: 62:e5:4b:14:81:35:94:f8:1e:e9:32:a8:5f:8a:ab:7c:00:6c: 1c:e0:d5:45:c7:c7:1c:e8:c1:17:ca:44:cd:c1:d8:9f:2d:05: 4a:66:30:30:e6:0d:71:28:16:06:47:bb:7a:2c:bd:ae:20:0e: 60:76:03:cd:b4:e6:03:53:99:0f:4f:0e:26:03:5f:7b:60:97: 01:7b:3c:b4:71:d5:88:cf:a2:fd:9a:6b:f8:d1:f3:22:f3:55: c4:f1:5f:28:aa:65:6d:08:a6:f1:c3:52:ef:ee:f4:07:4f:ca: 7e:65:94:b4:e4:9c:16:b9:4d:8e:9c:fa:6b:78:1b:8d:07:a2: 47:17:66:80:e5:44:04:1e:dd:40:89:9e:de:ed:2d:5e:49:e4: ac:e3:ca:0e:5f:59:fd:ad:11:e8:c4:3a:c4:05:34:9d:4b:99: b9:d3:31:5a:c5:5b:72:ce:1d:3e:87:c6:8b:f5:34:f6:d0:8e: aa:90:a9:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1RDE5ODcwODUzN0E2 NURGRjFFOTFENkVDMkJGMDdDNkFCMTc0MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjJEjU27diHou5Tb75gv4s6NYAHOxbh+HwZKAkBd4HUB7M+JBZ Xm1LcjaBtXi1StmH1syCAbNqsrfABclXqzQXtqCo+BPpDCY62tBALhusJB0n0FR0 oXSPCw1V+JwOm8Zx1EEF2b+IamW1LT0CluD5QuLTWmdzUSb9we7xtvLWwHdhg7k/ IYr4ZfQ9JsM8Qo+ZrbPsM0U2b92E3inpbxk8x/e9IglWoRYmtvGRUTS4DObdbFdJ rEEQmCMFbXVLEA+WatgOjaqt8we5TfSMNBtuNYJN0mjZIpVwJQ+xOurxWl5agUq9 c06QysaZf45XZYNoc697KtQjp+a3SsUODp1bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZdGYcIU3pl3/HpHW7CvwfGqxdBwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pkR1ljSVUzcGwzX0hwSFc3 Q3Z3ZkdxeGRCdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wfgwDQYJKoZIhvcNAQELBQADggEBAHGZR61ekZwudKX3H60rxjJS9VTCSyGg2g+W b6lowQlzVhtGg3tNDc84z/NqJYQ/78zdHGCxvm/zllCp1ivtcvyHKCpJf5QqSmLl SxSBNZT4HukyqF+Kq3wAbBzg1UXHxxzowRfKRM3B2J8tBUpmMDDmDXEoFgZHu3os va4gDmB2A8205gNTmQ9PDiYDX3tglwF7PLRx1YjPov2aa/jR8yLzVcTxXyiqZW0I pvHDUu/u9AdPyn5llLTknBa5TY6c+mt4G40HokcXZoDlRAQe3UCJnt7tLV5J5Kzj yg5fWf2tEejEOsQFNJ1LmbnTMVrFW3LOHT6Hxov1NPbQjqqQqSk= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:30 2024 by rpki-client on console-fra.rpki-client.org