$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBU-4VCpJnM0J4X95ds5wAhGYMU.roa File: aBU-4VCpJnM0J4X95ds5wAhGYMU.roa (raw, json) Hash identifier: onIIk3GLqbOIc6Qz2qBcl88eLRIBAl2i+brfDEEZUBM= Subject key identifier: 68:15:3E:E1:50:A9:26:73:34:27:85:FD:E5:DB:39:C0:08:46:60:C5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2874 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBU-4VCpJnM0J4X95ds5wAhGYMU.roa Signing time: Fri 01 Sep 2023 10:05:21 +0000 ROA not before: Fri 01 Sep 2023 10:05:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.195.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10356 (0x2874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=68153EE150A92673342785FDE5DB39C0084660C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:78:a4:9b:c4:66:75:c8:bb:32:c2:f3:2e: 06:14:dd:cf:fa:cb:e6:32:6f:06:94:82:f8:90:20: 71:c7:88:30:f7:8e:e3:3c:fa:1d:df:12:c6:72:4f: 59:85:d8:b0:7f:ec:0b:66:46:c9:02:29:6b:5a:de: 3b:d5:18:f0:d5:e3:95:a6:c1:da:46:c9:9d:2f:a9: a1:51:92:c0:e6:42:18:7d:30:d3:a0:18:bb:6a:60: db:f3:3c:f9:6a:53:8f:2e:dc:ee:7b:36:0e:f6:9e: bb:4b:68:8c:4c:bc:b0:16:3c:b4:7e:06:58:1c:76: 33:ff:fe:a6:ec:24:38:1a:3a:92:bb:26:70:5f:21: d3:e3:ec:25:61:99:d2:3e:06:84:f8:7b:6a:ec:e3: 68:5d:41:3b:7d:e6:ba:d0:95:85:7d:76:5d:d2:3e: 0b:43:d7:97:35:cb:16:55:c3:ef:15:1a:04:fa:07: 1a:1e:c2:db:56:55:cb:e3:a3:a2:94:d9:a8:be:28: 32:bf:17:a5:5e:c5:09:d6:84:a4:a5:81:2a:bd:d0: 26:64:6d:88:de:bc:09:96:ad:1a:98:92:aa:81:b5: a6:6c:7b:f8:79:6a:b4:48:05:f8:64:aa:57:8a:8e: 77:cf:73:5b:a3:65:23:2d:9b:f6:8b:d0:5e:a4:e4: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:15:3E:E1:50:A9:26:73:34:27:85:FD:E5:DB:39:C0:08:46:60:C5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBU-4VCpJnM0J4X95ds5wAhGYMU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.28.0/22 Signature Algorithm: sha256WithRSAEncryption 36:3e:ea:c7:5b:2e:5b:59:b9:8c:fd:d3:9c:3f:81:c6:a3:99: 00:c5:7e:3c:56:ad:78:af:e5:3d:e1:23:a2:01:9d:b7:86:88: b1:d1:3e:ae:ce:f7:16:2d:4f:27:76:2f:ea:df:de:f2:35:81: 44:f6:75:48:be:a6:81:d3:f3:db:7a:26:74:5d:27:27:a2:9c: 65:ae:55:46:82:fb:c0:90:c8:37:ed:eb:ab:55:19:82:0d:ca: cb:2f:4e:72:df:85:d9:78:73:85:63:08:61:b4:31:9a:a1:52: 1a:77:5a:f0:1e:ca:77:9c:09:09:75:c9:71:e8:a7:18:c7:78: f4:1a:72:b9:53:a2:e2:0a:31:dd:36:ae:e3:67:2e:a5:38:2a: cc:76:c4:e2:87:09:77:28:c1:19:6d:4c:3e:73:00:74:6d:c2: 42:a0:6a:a5:90:d6:cf:d6:11:a1:e0:e6:90:9f:c3:f0:2c:b9: fd:23:0c:2f:4b:e1:19:44:db:80:5c:43:ae:1a:a2:a6:e0:ca: fc:b5:bc:89:23:36:fa:40:0c:32:3f:aa:12:18:7d:ab:55:f5: 9c:f3:68:63:76:77:6a:4a:c0:80:f4:bd:7f:93:bf:4c:36:ca: f9:12:e2:09:e6:e8:a3:a6:f1:4b:9c:73:0e:61:0a:06:c3:fb: 5b:67:e7:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY4MTUzRUUxNTBBOTI2 NzMzNDI3ODVGREU1REIzOUMwMDg0NjYwQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2LXikm8Rmdci7MsLzLgYU3c/6y+YybwaUgviQIHHHiDD3juM8 +h3fEsZyT1mF2LB/7AtmRskCKWta3jvVGPDV45WmwdpGyZ0vqaFRksDmQhh9MNOg GLtqYNvzPPlqU48u3O57Ng72nrtLaIxMvLAWPLR+BlgcdjP//qbsJDgaOpK7JnBf IdPj7CVhmdI+BoT4e2rs42hdQTt95rrQlYV9dl3SPgtD15c1yxZVw+8VGgT6Bxoe wttWVcvjo6KU2ai+KDK/F6VexQnWhKSlgSq90CZkbYjevAmWrRqYkqqBtaZse/h5 arRIBfhkqleKjnfPc1ujZSMtm/aL0F6k5OIlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaBU+4VCpJnM0J4X95ds5wAhGYMUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FCVS00VkNwSm5NMEo0WDk1 ZHM1d0FoR1lNVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wxwwDQYJKoZIhvcNAQELBQADggEBADY+6sdbLltZuYz905w/gcajmQDFfjxWrXiv 5T3hI6IBnbeGiLHRPq7O9xYtTyd2L+rf3vI1gUT2dUi+poHT89t6JnRdJyeinGWu VUaC+8CQyDft66tVGYINyssvTnLfhdl4c4VjCGG0MZqhUhp3WvAeynecCQl1yXHo pxjHePQacrlTouIKMd02ruNnLqU4Ksx2xOKHCXcowRltTD5zAHRtwkKgaqWQ1s/W EaHg5pCfw/Asuf0jDC9L4RlE24BcQ64aoqbgyvy1vIkjNvpADDI/qhIYfatV9Zzz aGN2d2pKwID0vX+Tv0w2yvkS4gnm6KOm8Uuccw5hCgbD+1tn51g= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org