$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa File: cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa (raw, json) Hash identifier: H/ufT7XPnwHiWH03zuZfNdM65gZ2Qtp80LqQq/CDvDo= Subject key identifier: 70:18:49:E0:20:83:FF:59:B9:CC:F9:FD:36:CC:57:80:84:DD:2C:E1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3058 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa Signing time: Mon 26 Aug 2024 05:29:22 +0000 ROA not before: Mon 26 Aug 2024 05:29:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12376 (0x3058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=701849E02083FF59B9CCF9FD36CC578084DD2CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:d8:22:b2:57:7f:9d:2e:09:1d:fa:0a:d8: 08:3c:ae:68:f4:9c:89:d8:b0:4f:dc:19:f7:e3:29: 09:54:3c:19:b1:b1:ac:19:9f:f6:25:91:c3:8c:a9: b6:b0:1d:5f:1a:fb:db:4e:ac:98:4b:7f:6f:2b:2e: e6:4b:aa:6a:81:3e:5f:8e:6e:01:db:95:30:f7:d0: 5e:30:6e:42:7a:ac:62:50:30:8d:09:34:52:d2:54: 63:b6:65:03:62:64:1d:f1:19:5b:aa:c4:d5:8b:eb: eb:26:dd:4e:0e:5b:bd:90:3b:a4:46:33:f2:7e:3f: 90:e9:74:c0:8c:0d:bf:a9:0c:73:7b:0f:95:fe:ac: 57:5f:b5:17:93:b2:83:5b:72:90:db:b0:4e:41:33: 8f:69:db:67:41:dd:b5:9b:a8:0d:e1:7c:f6:70:95: 46:f2:84:d8:b0:d5:0e:17:e3:0a:15:60:71:82:f0: f3:56:e6:89:66:80:93:73:7a:54:f2:6b:e3:b2:8f: 32:2b:8c:94:6c:b7:83:cc:20:45:00:01:71:ec:32: b8:b4:83:43:55:a0:30:e9:0c:fb:7c:b3:a3:ed:3b: 09:32:fb:a1:15:04:62:f7:f2:f8:65:4a:e4:2e:c8: 72:09:30:74:09:a4:22:7a:35:2a:ba:b6:f5:36:7d: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:18:49:E0:20:83:FF:59:B9:CC:F9:FD:36:CC:57:80:84:DD:2C:E1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBhJ4CCD_1m5zPn9NsxXgITdLOE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.88.0/22 Signature Algorithm: sha256WithRSAEncryption 37:ba:96:18:60:53:ca:87:c3:5e:ca:8f:3b:c1:c2:30:85:81: 58:e6:8d:4a:58:a9:c8:71:92:2b:af:1d:f5:bf:b2:11:28:f2: 14:06:b3:b3:91:b0:0b:5f:fe:fc:ca:90:56:c7:d3:2d:79:78: a0:27:7a:83:1d:75:86:01:86:b1:44:5d:37:ac:46:0f:1b:1d: 1e:60:5c:53:cf:8b:31:94:19:3b:59:c0:2d:26:bc:54:0f:cd: d7:de:17:9c:cb:86:0a:1a:8e:fe:17:6c:d3:34:63:59:90:f6: 22:26:c6:59:af:2b:17:bd:28:e2:5a:0f:dd:d2:05:ca:82:02: 50:99:7e:a8:27:e5:2d:fc:e7:97:f5:4f:8e:84:a9:c2:3e:81: 9a:fe:0c:c1:3d:96:4d:93:a5:2b:a7:6f:0c:9a:4b:a7:9c:a9: 6a:59:6b:79:2c:fb:96:49:5e:ec:04:86:57:8a:c9:23:f9:15: 7d:a9:f1:f6:58:89:98:c1:ed:c8:5c:95:c6:ae:05:ad:f0:7f: 5c:df:8d:4a:63:aa:a8:3b:27:e9:4a:29:25:d6:df:7c:24:00: fb:05:d1:d2:a4:3d:dd:fe:ff:9a:36:af:00:2d:7c:fa:b7:a2: 2e:2b:4f:3c:17:75:a5:fb:c3:4b:76:f5:20:f9:0b:33:7a:88: ad:e0:63:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwMTg0OUUwMjA4M0ZG NTlCOUNDRjlGRDM2Q0M1NzgwODRERDJDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAiNgisld/nS4JHfoK2Ag8rmj0nInYsE/cGffjKQlUPBmxsawZ n/YlkcOMqbawHV8a+9tOrJhLf28rLuZLqmqBPl+ObgHblTD30F4wbkJ6rGJQMI0J NFLSVGO2ZQNiZB3xGVuqxNWL6+sm3U4OW72QO6RGM/J+P5DpdMCMDb+pDHN7D5X+ rFdftReTsoNbcpDbsE5BM49p22dB3bWbqA3hfPZwlUbyhNiw1Q4X4woVYHGC8PNW 5olmgJNzelTya+OyjzIrjJRst4PMIEUAAXHsMri0g0NVoDDpDPt8s6PtOwky+6EV BGL38vhlSuQuyHIJMHQJpCJ6NSq6tvU2fQijAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcBhJ4CCD/1m5zPn9NsxXgITdLOEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NCaEo0Q0NEXzFtNXpQbjlO c3hYZ0lUZExPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wVgwDQYJKoZIhvcNAQELBQADggEBADe6lhhgU8qHw17KjzvBwjCFgVjmjUpYqchx kiuvHfW/shEo8hQGs7ORsAtf/vzKkFbH0y15eKAneoMddYYBhrFEXTesRg8bHR5g XFPPizGUGTtZwC0mvFQPzdfeF5zLhgoajv4XbNM0Y1mQ9iImxlmvKxe9KOJaD93S BcqCAlCZfqgn5S3855f1T46EqcI+gZr+DME9lk2TpSunbwyaS6ecqWpZa3ks+5ZJ XuwEhleKySP5FX2p8fZYiZjB7chclcauBa3wf1zfjUpjqqg7J+lKKSXW33wkAPsF 0dKkPd3+/5o2rwAtfPq3oi4rTzwXdaX7w0t29SD5CzN6iK3gY/Q= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org