$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_soDs6Msd4noPf0m6rogyW8RKbc.roa File: _soDs6Msd4noPf0m6rogyW8RKbc.roa (raw, json) Hash identifier: 8zOvRpBHAWvsnH/k1ubfwzMVK5lpHtD5/4Z5iPNJFus= Subject key identifier: FE:CA:03:B3:A3:2C:77:89:E8:3D:FD:26:EA:BA:20:C9:6F:11:29:B7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A93 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_soDs6Msd4noPf0m6rogyW8RKbc.roa Signing time: Fri 01 Sep 2023 10:08:04 +0000 ROA not before: Fri 01 Sep 2023 10:08:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.144.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10899 (0x2a93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FECA03B3A32C7789E83DFD26EABA20C96F1129B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:73:6e:3e:50:4a:b1:9b:a4:db:6e:fc:10: cf:15:e6:fe:ac:5c:56:c0:99:3e:c4:48:a4:9b:62: 71:9f:6a:b6:a9:5d:af:fe:b2:a3:78:1e:00:88:1e: 50:2d:a4:cd:18:23:1a:2d:7b:01:c8:64:53:c0:82: ec:27:3d:2d:71:30:38:8e:46:92:6a:32:9c:cb:57: 9a:3d:12:a7:12:7a:0f:06:2d:35:b6:7a:f8:5b:ed: e6:43:a3:52:9d:83:1b:6a:08:63:1a:47:a4:b8:20: 49:51:7d:a0:7b:3b:d0:bb:2a:dd:90:15:d3:de:79: 33:47:0d:84:dc:26:c4:88:1c:1d:5f:0b:f8:4d:f1: d6:2a:0d:1f:0e:6c:5a:d1:8b:d6:28:1b:20:1d:0f: 51:5e:7e:f4:4b:f9:89:92:17:33:68:4b:dd:a6:72: 38:30:9d:95:10:da:9a:07:9e:42:73:cb:b2:9b:f9: 12:1e:69:8b:d6:78:8e:99:5e:af:55:7e:68:de:87: cd:4f:74:99:9f:0d:7f:3d:90:11:5f:c6:4f:fe:57: 9d:5d:05:91:27:9d:5a:44:98:77:03:0d:82:8c:4e: da:0e:2a:e2:6c:5d:d7:35:2c:50:c9:b9:8f:7e:4c: ef:50:36:72:a5:7c:a6:f9:14:22:b0:14:fd:98:74: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CA:03:B3:A3:2C:77:89:E8:3D:FD:26:EA:BA:20:C9:6F:11:29:B7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_soDs6Msd4noPf0m6rogyW8RKbc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.64/26 Signature Algorithm: sha256WithRSAEncryption 71:a7:c0:2b:97:aa:80:47:7f:c5:6b:fb:5f:49:d7:15:f3:a7: 79:42:bb:c6:c6:13:0f:13:6c:ab:55:4e:6d:4d:e2:c5:f8:71: 63:35:41:ac:f1:43:8a:94:ec:cb:74:9d:ff:49:36:e9:56:ee: 66:ed:60:ba:ea:cf:a3:d1:0f:16:0a:51:f4:4a:0e:39:2f:18: 94:87:ad:f9:1b:7c:44:ba:da:c5:79:d9:fb:71:e7:cb:31:34: 14:a8:f4:48:57:cd:59:42:69:a7:c6:13:fa:03:79:72:fb:05: 44:7e:7f:0d:db:bf:5a:a8:b7:c9:74:88:0f:95:d8:93:d1:2a: 2d:f2:eb:39:29:f8:db:0e:aa:30:73:09:1d:07:d6:52:91:ff: bb:00:dd:70:23:67:1f:47:55:f1:18:04:e3:12:e0:33:c8:8f: fd:5f:74:17:d9:10:82:8e:f2:9a:e2:ea:34:a5:06:7f:75:a9: 69:3d:c0:68:e7:4c:89:18:dc:fd:0c:61:72:19:14:e5:c5:11: 59:9f:73:3d:15:2d:b9:35:3c:32:77:80:d0:3c:5f:de:d4:4d: 20:ba:45:16:72:c7:4f:9c:9d:bb:a7:0d:52:10:94:8a:ec:8a: 27:30:dc:bc:2a:a6:e8:a6:91:cb:37:16:52:1f:ae:1a:77:27: 9f:24:ae:17 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFQ0EwM0IzQTMyQzc3 ODlFODNERkQyNkVBQkEyMEM5NkYxMTI5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/4XNuPlBKsZuk2278EM8V5v6sXFbAmT7ESKSbYnGfarapXa/+ sqN4HgCIHlAtpM0YIxotewHIZFPAguwnPS1xMDiORpJqMpzLV5o9EqcSeg8GLTW2 evhb7eZDo1KdgxtqCGMaR6S4IElRfaB7O9C7Kt2QFdPeeTNHDYTcJsSIHB1fC/hN 8dYqDR8ObFrRi9YoGyAdD1FefvRL+YmSFzNoS92mcjgwnZUQ2poHnkJzy7Kb+RIe aYvWeI6ZXq9Vfmjeh81PdJmfDX89kBFfxk/+V51dBZEnnVpEmHcDDYKMTtoOKuJs Xdc1LFDJuY9+TO9QNnKlfKb5FCKwFP2YdOIpAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU/soDs6Msd4noPf0m6rogyW8RKbcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19zb0RzNk1zZDRub1BmMG02 cm9neVc4UktiYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wJBAMA0GCSqGSIb3DQEBCwUAA4IBAQBxp8Arl6qAR3/Fa/tfSdcV86d5QrvGxhMP E2yrVU5tTeLF+HFjNUGs8UOKlOzLdJ3/STbpVu5m7WC66s+j0Q8WClH0Sg45LxiU h635G3xEutrFedn7cefLMTQUqPRIV81ZQmmnxhP6A3ly+wVEfn8N279aqLfJdIgP ldiT0Sot8us5KfjbDqowcwkdB9ZSkf+7AN1wI2cfR1XxGATjEuAzyI/9X3QX2RCC jvKa4uo0pQZ/dalpPcBo50yJGNz9DGFyGRTlxRFZn3M9FS25NTwyd4DQPF/e1E0g ukUWcsdPnJ27pw1SEJSK7IonMNy8KqboppHLNxZSH64adyefJK4X -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:58 2024 by rpki-client on console-ams.rpki-client.org