$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_vE42jxcHTutFbliCwfTDNsts5I.roa File: _vE42jxcHTutFbliCwfTDNsts5I.roa (raw, json) Hash identifier: FztKt6t6HzdAC2v9QK7VOIT4ZLi1KYRyO+sdqVbZHYA= Subject key identifier: FE:F1:38:DA:3C:5C:1D:3B:AD:15:B9:62:0B:07:D3:0C:DB:2D:B3:92 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29E9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_vE42jxcHTutFbliCwfTDNsts5I.roa Signing time: Fri 01 Sep 2023 10:07:14 +0000 ROA not before: Fri 01 Sep 2023 10:07:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 211.76.121.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10729 (0x29e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FEF138DA3C5C1D3BAD15B9620B07D30CDB2DB392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:dd:e4:1e:99:7d:17:ae:1d:7e:b9:22:1d: 2d:92:9f:70:72:3f:52:e2:d4:c6:42:6c:d2:e4:46: 3a:dd:93:f8:df:fb:f3:99:d3:55:15:1f:38:a8:9e: 19:76:42:34:71:72:08:72:7c:02:20:1f:e6:74:b0: 89:a3:a7:53:84:8a:87:bc:06:f4:4b:d5:ad:b9:da: 4a:a2:29:71:43:5f:34:1b:ff:68:da:dd:25:f7:fc: e9:f7:1b:3b:a3:a1:fe:87:24:4c:8c:bc:f7:8f:d6: 66:cc:3e:ca:c0:6b:de:82:20:43:41:e5:af:73:f8: 29:8e:20:91:58:13:df:f8:37:67:e8:70:cf:cc:82: 2f:9c:1e:65:1f:41:92:89:1b:63:04:03:7d:4a:0d: 42:98:ae:ff:d1:2d:91:6c:7c:cf:57:d1:67:56:39: 10:b5:66:10:5e:81:01:41:24:fb:66:61:44:08:3e: 9f:ec:dd:b8:3d:12:9a:51:83:10:f4:d8:0e:db:3c: ce:12:5b:44:7c:5d:03:90:c8:b4:e6:8c:fe:b3:63: ef:23:82:bc:38:14:70:24:98:a0:72:51:e9:0c:94: 71:2d:7c:d4:c6:3c:01:56:35:ae:6b:8c:74:62:da: f8:f5:58:06:f3:90:e4:2f:86:cc:2a:ee:3c:80:36: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:38:DA:3C:5C:1D:3B:AD:15:B9:62:0B:07:D3:0C:DB:2D:B3:92 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_vE42jxcHTutFbliCwfTDNsts5I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.121.128/25 Signature Algorithm: sha256WithRSAEncryption 3a:05:91:56:57:ad:85:b9:0c:68:b7:20:1d:50:0f:39:33:d0: 3a:0f:2d:d8:b6:d6:b2:43:64:d9:d1:7a:a8:5d:12:e5:76:c1: 67:8f:0c:68:1b:24:84:c0:12:67:7b:8b:d1:30:8c:26:47:25: 32:3f:a6:1b:4d:23:dd:4d:ea:f7:91:b7:6f:3f:a1:f0:77:09: d5:41:1b:52:6e:11:c2:a3:45:cf:f2:12:f4:df:f2:f1:6f:f1: e5:04:59:3d:1a:cb:9b:f0:90:d9:17:09:9f:64:e3:4d:26:8d: c6:79:15:b4:16:50:0f:93:45:a1:4a:63:8d:bd:b2:bd:37:1c: 76:d0:5b:4a:d0:47:6c:8a:45:43:bf:9d:1c:94:fb:41:2a:d6: 8b:ee:b0:5c:b4:35:7e:c8:4e:1a:f5:45:38:d6:7e:79:b2:6a: 6a:97:16:47:b1:23:01:ed:f7:91:f8:1e:b0:eb:b9:ce:cb:5f: 51:15:d6:95:76:10:a8:1e:48:5c:c8:d2:97:29:29:18:4f:4d: 31:90:33:3d:90:a3:7e:42:f9:09:3b:1e:5c:4b:a5:d8:81:34: 58:b5:52:78:d5:a4:28:2e:05:25:89:01:d0:6d:07:4e:0a:b0: e5:28:f4:d8:89:33:1f:32:a9:0a:dc:dc:85:74:fa:a7:41:40: f5:d1:02:0f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFRjEzOERBM0M1QzFE M0JBRDE1Qjk2MjBCMDdEMzBDREIyREIzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDot3kHpl9F64dfrkiHS2Sn3ByP1Li1MZCbNLkRjrdk/jf+/OZ 01UVHzionhl2QjRxcghyfAIgH+Z0sImjp1OEioe8BvRL1a252kqiKXFDXzQb/2ja 3SX3/On3Gzujof6HJEyMvPeP1mbMPsrAa96CIENB5a9z+CmOIJFYE9/4N2focM/M gi+cHmUfQZKJG2MEA31KDUKYrv/RLZFsfM9X0WdWORC1ZhBegQFBJPtmYUQIPp/s 3bg9EppRgxD02A7bPM4SW0R8XQOQyLTmjP6zY+8jgrw4FHAkmKByUekMlHEtfNTG PAFWNa5rjHRi2vj1WAbzkOQvhswq7jyANts1AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU/vE42jxcHTutFbliCwfTDNsts5IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL192RTQyanhjSFR1dEZibGlD d2ZURE5zdHM1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THmAMA0GCSqGSIb3DQEBCwUAA4IBAQA6BZFWV62FuQxotyAdUA85M9A6Dy3Yttay Q2TZ0XqoXRLldsFnjwxoGySEwBJne4vRMIwmRyUyP6YbTSPdTer3kbdvP6HwdwnV QRtSbhHCo0XP8hL03/Lxb/HlBFk9Gsub8JDZFwmfZONNJo3GeRW0FlAPk0WhSmON vbK9Nxx20FtK0EdsikVDv50clPtBKtaL7rBctDV+yE4a9UU41n55smpqlxZHsSMB 7feR+B6w67nOy19RFdaVdhCoHkhcyNKXKSkYT00xkDM9kKN+QvkJOx5cS6XYgTRY tVJ41aQoLgUliQHQbQdOCrDlKPTYiTMfMqkK3NyFdPqnQUD10QIP -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org