$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aib5BWJ7S-cHcdwvrNwLNerNo7k.roa File: aib5BWJ7S-cHcdwvrNwLNerNo7k.roa (raw, json) Hash identifier: 0M2mlbJGS7tkLsjkVF4OaW+gw53fCP9VLy9p3koFPTg= Subject key identifier: 6A:26:F9:05:62:7B:4B:E7:07:71:DC:2F:AC:DC:0B:35:EA:CD:A3:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2969 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aib5BWJ7S-cHcdwvrNwLNerNo7k.roa Signing time: Fri 01 Sep 2023 10:06:34 +0000 ROA not before: Fri 01 Sep 2023 10:06:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10601 (0x2969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6A26F905627B4BE70771DC2FACDC0B35EACDA3B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4e:41:71:95:ff:36:bb:19:2d:ca:f8:fa:59: 63:7b:09:83:87:53:57:69:32:fe:37:31:ea:52:16: ab:a8:8d:48:d6:af:46:04:0b:88:b3:bd:cf:b9:33: 27:06:9b:58:db:9c:3e:3f:fa:5a:7d:6d:e7:d7:e1: b3:d1:de:10:a0:3b:11:ce:d2:a2:c8:27:df:2e:4a: f3:63:a6:ed:c0:a4:47:02:05:b2:ce:a4:bd:b7:8a: cf:04:3e:1b:2f:b3:73:07:10:97:e1:80:43:ca:fb: d6:64:62:d3:50:2c:14:19:a3:1f:76:8f:b2:61:08: 1f:bd:ff:f8:98:bf:4d:d0:ba:6e:ce:b4:b4:9a:67: 9f:43:f6:bb:2c:7e:82:e6:f0:59:2a:53:dc:b9:d6: d4:58:60:03:cb:ab:65:9d:68:e9:1c:f4:17:2a:57: 54:ec:d1:65:e5:a7:02:15:a8:3b:54:1e:22:03:bf: 65:52:5d:36:2c:28:6e:b0:e0:2a:41:16:c5:9c:48: 3b:41:ca:59:e0:da:72:92:6a:ce:f0:41:2f:78:66: cf:2b:be:be:04:1f:bd:21:30:b4:46:d8:7c:ba:b4: 22:69:f1:c0:af:af:9e:4e:cf:24:85:71:bf:8e:63: 4d:e6:3b:77:06:6a:2f:51:44:c4:28:c2:e4:6b:c5: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:26:F9:05:62:7B:4B:E7:07:71:DC:2F:AC:DC:0B:35:EA:CD:A3:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aib5BWJ7S-cHcdwvrNwLNerNo7k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.56.0/21 Signature Algorithm: sha256WithRSAEncryption 54:73:16:7e:e6:be:ef:dd:13:1f:24:ff:db:8a:2e:3b:de:7b: c0:7d:52:c5:f8:ae:49:aa:40:10:d5:ee:af:86:d1:8c:28:df: 88:19:f1:25:a6:3f:34:b8:48:f2:8c:c3:55:fb:ff:e1:e1:b4: 07:c1:d6:a6:e9:97:b0:30:96:85:b2:6c:00:fc:bd:e1:ad:7b: 70:d1:65:14:3a:b0:ef:f2:b3:b8:67:7d:c6:4f:a8:99:42:91: 26:ba:3f:b7:cf:1b:64:fe:98:7f:b4:75:6b:44:d9:77:58:0d: 69:c4:70:a2:a7:f3:8f:fa:f9:38:25:40:95:ea:22:00:4a:f7: f5:e8:8a:9c:e4:40:bc:1e:95:1f:04:9b:9c:51:1a:4b:c7:1e: 5f:8f:1a:bf:5d:fe:8a:ad:20:5b:18:47:31:99:25:be:3f:46: 1b:14:6d:f0:f7:3f:c4:e9:bf:d7:7a:22:d7:1c:98:fa:5e:87: 6c:b5:29:dc:11:62:92:33:31:32:45:9a:8b:47:17:59:25:e3: 90:a2:21:c1:6d:dc:b6:b5:b6:c2:5b:da:8e:73:98:99:5d:0f: c0:77:cb:60:33:d4:ef:ea:61:e7:c3:e2:0e:41:a3:57:d4:04: e5:c8:25:b4:2f:f8:de:14:c3:b8:26:9e:f7:84:d3:82:0b:86: 52:3f:eb:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZBMjZGOTA1NjI3QjRC RTcwNzcxREMyRkFDREMwQjM1RUFDREEzQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzTkFxlf82uxktyvj6WWN7CYOHU1dpMv43MepSFquojUjWr0YE C4izvc+5MycGm1jbnD4/+lp9befX4bPR3hCgOxHO0qLIJ98uSvNjpu3ApEcCBbLO pL23is8EPhsvs3MHEJfhgEPK+9ZkYtNQLBQZox92j7JhCB+9//iYv03Qum7OtLSa Z59D9rssfoLm8FkqU9y51tRYYAPLq2WdaOkc9BcqV1Ts0WXlpwIVqDtUHiIDv2VS XTYsKG6w4CpBFsWcSDtBylng2nKSas7wQS94Zs8rvr4EH70hMLRG2Hy6tCJp8cCv r55OzySFcb+OY03mO3cGai9RRMQowuRrxXetAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUaib5BWJ7S+cHcdwvrNwLNerNo7kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FpYjVCV0o3Uy1jSGNkd3Zy TndMTmVyTm83ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wzgwDQYJKoZIhvcNAQELBQADggEBAFRzFn7mvu/dEx8k/9uKLjvee8B9UsX4rkmq QBDV7q+G0Ywo34gZ8SWmPzS4SPKMw1X7/+HhtAfB1qbpl7AwloWybAD8veGte3DR ZRQ6sO/ys7hnfcZPqJlCkSa6P7fPG2T+mH+0dWtE2XdYDWnEcKKn84/6+TglQJXq IgBK9/XoipzkQLwelR8Em5xRGkvHHl+PGr9d/oqtIFsYRzGZJb4/RhsUbfD3P8Tp v9d6ItccmPpeh2y1KdwRYpIzMTJFmotHF1kl45CiIcFt3La1tsJb2o5zmJldD8B3 y2Az1O/qYefD4g5Bo1fUBOXIJbQv+N4Uw7gmnveE04ILhlI/68A= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org