$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blsoYMlDkwQABFpwqgLvm6HlQos.roa File: blsoYMlDkwQABFpwqgLvm6HlQos.roa (raw, json) Hash identifier: qrQF+S0tD0x0zvffArTrqfF3aOO4sVttd34PdtX8mXg= Subject key identifier: 6E:5B:28:60:C9:43:93:04:00:04:5A:70:AA:02:EF:9B:A1:E5:42:8B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A5D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blsoYMlDkwQABFpwqgLvm6HlQos.roa Signing time: Fri 01 Sep 2023 10:07:49 +0000 ROA not before: Fri 01 Sep 2023 10:07:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10845 (0x2a5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6E5B2860C943930400045A70AA02EF9BA1E5428B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:b5:6a:1c:25:b9:e4:35:5d:78:25:bc:80: 64:a8:80:b7:e6:0b:62:a6:2b:97:9c:7f:6a:62:61: 2a:88:51:b6:f9:70:c4:48:86:04:1e:1e:17:44:8f: 11:d5:96:e6:d8:ec:d2:38:96:a3:52:55:d7:c1:e0: 7c:29:a9:29:22:32:b3:ff:ea:20:ef:e9:6e:51:b7: 2c:71:de:69:7d:ac:61:68:7a:cf:db:f0:77:a6:af: bb:f9:03:26:5a:0d:89:04:06:f6:dc:fe:ab:94:2d: 5d:e6:c9:a3:e3:93:db:ae:e7:40:62:4b:47:62:61: c2:37:56:36:6a:15:5c:1b:b1:26:70:4f:52:df:4e: 85:d9:ef:48:b2:2e:b3:d3:57:47:b7:4f:9e:40:7b: 9a:b7:db:3e:1b:3b:11:40:72:73:50:54:3e:0e:9a: ed:3b:e5:2a:2b:a3:e8:f9:6f:ca:48:18:a5:cc:34: ff:05:0a:5c:7b:14:e6:e1:1c:8a:ca:81:86:28:ca: 39:a3:86:68:48:fd:67:59:22:0d:a1:d7:91:6f:72: f3:67:2e:d0:23:e2:10:11:83:a5:40:be:9c:ea:1c: 42:f4:d1:23:ad:69:7b:f9:36:94:a1:09:fb:0f:83: cd:62:ea:24:16:1a:d5:a4:63:19:13:47:7d:62:7c: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5B:28:60:C9:43:93:04:00:04:5A:70:AA:02:EF:9B:A1:E5:42:8B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blsoYMlDkwQABFpwqgLvm6HlQos.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.8.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:2b:45:7d:fe:16:e0:28:08:c2:77:dc:e1:7d:47:eb:ff:4b: 32:21:3d:f6:2b:ed:a9:1b:46:74:04:85:b0:05:6b:2a:61:8a: ac:fc:cc:11:ab:6e:65:39:aa:8b:d0:b0:eb:8e:95:74:e5:f6: 74:19:b6:d2:cf:34:29:ee:10:e4:33:e9:9b:6b:2c:d9:ff:34: 72:35:b1:04:95:3e:c4:e6:3b:61:65:df:e1:da:fb:23:72:da: 52:d3:c5:e3:0e:ca:27:78:22:15:e0:1c:cf:fe:a8:d3:d3:e5: 31:3f:b1:c7:d0:6a:15:b1:61:8d:d4:18:b4:70:7b:59:67:76: 13:73:8a:c0:46:4e:5f:08:94:bd:0e:03:ec:9a:e5:7a:6f:a3: e8:7a:65:87:dc:46:d5:7b:74:7b:75:b0:f3:40:17:a6:b5:69: a5:ad:93:cf:34:df:a5:c4:d9:bc:db:86:40:c0:5f:16:a5:77: da:93:a8:c1:83:11:59:fe:23:ff:ce:43:5b:f7:8a:fe:b6:3b: 64:8e:89:bd:98:6d:d4:23:b9:ed:b6:57:36:fe:a8:6b:dc:18: 7b:c4:05:96:84:80:75:76:db:aa:e8:15:d6:d5:d7:c2:84:af: 19:e5:96:6b:7a:f1:ba:83:53:87:25:6a:85:26:02:f0:b0:34: 79:46:9b:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZFNUIyODYwQzk0Mzkz MDQwMDA0NUE3MEFBMDJFRjlCQTFFNTQyOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuxbVqHCW55DVdeCW8gGSogLfmC2KmK5ecf2piYSqIUbb5cMRI hgQeHhdEjxHVlubY7NI4lqNSVdfB4HwpqSkiMrP/6iDv6W5Rtyxx3ml9rGFoes/b 8Hemr7v5AyZaDYkEBvbc/quULV3myaPjk9uu50BiS0diYcI3VjZqFVwbsSZwT1Lf ToXZ70iyLrPTV0e3T55Ae5q32z4bOxFAcnNQVD4Omu075Soro+j5b8pIGKXMNP8F Clx7FObhHIrKgYYoyjmjhmhI/WdZIg2h15FvcvNnLtAj4hARg6VAvpzqHEL00SOt aXv5NpShCfsPg81i6iQWGtWkYxkTR31ifPPJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUblsoYMlDkwQABFpwqgLvm6HlQoswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Jsc29ZTWxEa3dRQUJGcHdx Z0x2bTZIbFFvcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wAgwDQYJKoZIhvcNAQELBQADggEBAD4rRX3+FuAoCMJ33OF9R+v/SzIhPfYr7akb RnQEhbAFayphiqz8zBGrbmU5qovQsOuOlXTl9nQZttLPNCnuEOQz6ZtrLNn/NHI1 sQSVPsTmO2Fl3+Ha+yNy2lLTxeMOyid4IhXgHM/+qNPT5TE/scfQahWxYY3UGLRw e1lndhNzisBGTl8IlL0OA+ya5Xpvo+h6ZYfcRtV7dHt1sPNAF6a1aaWtk88036XE 2bzbhkDAXxald9qTqMGDEVn+I//OQ1v3iv62O2SOib2YbdQjue22Vzb+qGvcGHvE BZaEgHV226roFdbV18KErxnllmt68bqDU4claoUmAvCwNHlGmzE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org