$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cCvvyOtDWxtobmuDooHJ0N4KSnM.roa File: cCvvyOtDWxtobmuDooHJ0N4KSnM.roa (raw, json) Hash identifier: fh2rGjmnBb2vhBNbVTEghTSDTWriN88h/vy+Y+cf454= Subject key identifier: 70:2B:EF:C8:EB:43:5B:1B:68:6E:6B:83:A2:81:C9:D0:DE:0A:4A:73 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 292B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cCvvyOtDWxtobmuDooHJ0N4KSnM.roa Signing time: Fri 01 Sep 2023 10:06:14 +0000 ROA not before: Fri 01 Sep 2023 10:06:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10539 (0x292b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=702BEFC8EB435B1B686E6B83A281C9D0DE0A4A73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:77:96:09:ac:e4:48:4b:8d:2e:b5:24:db: 08:8b:fa:cf:59:a9:6a:4a:f3:fd:f2:8a:41:18:a7: 1c:c3:b5:25:16:f0:88:e1:85:d2:ff:a4:ad:a7:be: e6:d7:5d:f9:32:04:d2:19:08:42:04:f3:69:21:d9: 73:b3:46:af:ab:65:11:d0:eb:1f:43:3d:7a:cf:d4: dc:31:af:13:78:66:3f:49:40:3f:19:7f:4c:41:ef: 78:03:c8:12:0a:d6:92:64:7f:5b:a1:14:e7:7a:86: bb:70:d1:0a:14:07:23:f4:6b:ab:13:b9:1c:70:29: 9e:2a:03:8c:87:00:5e:ce:04:cc:8b:40:29:55:24: eb:f6:dc:dd:04:8d:25:7e:5a:b6:b5:08:43:06:e7: 00:12:d2:b5:6a:87:00:76:27:13:c4:03:c7:ba:f7: 8e:c2:86:85:7d:d3:a8:cd:d5:13:24:da:25:ad:15: 9c:36:20:03:72:9f:c6:8d:b0:26:6a:c8:f1:82:fc: c6:c5:6f:19:e0:41:4c:1c:3f:a3:3a:8a:b9:45:8f: f2:08:4c:78:d6:40:88:85:1e:70:6e:b4:fb:e3:fb: 89:ab:fc:54:c6:e2:83:aa:82:f8:f5:3c:77:8f:0a: 5d:e6:e2:c8:6d:8d:e2:f7:d0:c9:98:cb:b0:bc:b7: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2B:EF:C8:EB:43:5B:1B:68:6E:6B:83:A2:81:C9:D0:DE:0A:4A:73 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cCvvyOtDWxtobmuDooHJ0N4KSnM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/22 Signature Algorithm: sha256WithRSAEncryption 02:6f:0a:c0:61:95:9e:99:0d:43:99:09:af:f4:b0:b4:25:4b: 05:20:e6:cd:f9:6f:ff:ed:1b:af:41:ae:e7:4d:3f:87:f7:37: 74:fc:c9:4d:ac:dd:3a:d2:be:ae:1b:03:80:91:1e:a9:c8:1a: f7:b8:d8:64:09:82:ac:69:40:ab:57:14:69:b5:88:25:ac:18: 86:c5:16:d9:26:bf:f0:03:32:8c:eb:1a:50:6d:14:7a:de:af: ce:33:1d:dd:a7:ea:68:1f:3f:55:35:e3:a1:31:6c:25:ce:2c: 0b:05:48:e4:76:cd:e0:8a:c5:1a:0f:1d:94:ef:3a:8f:ba:4c: 31:f5:3f:89:f3:4d:1c:75:1f:93:11:14:04:51:ec:cb:64:73: c4:59:06:ac:c8:54:01:0a:f7:81:ec:56:51:4d:81:19:59:60: 1a:e6:43:69:5d:b6:d0:c2:0d:12:91:8b:83:e1:27:ad:28:fd: 1e:b4:9e:45:05:f9:ce:96:76:21:17:46:16:33:37:2d:cf:87: e1:b9:af:6a:a7:fd:b1:40:9b:09:78:42:d3:e6:b2:ba:61:e8: 4e:ee:a6:36:98:1f:f8:03:d1:e1:97:b7:98:b7:cb:c8:3b:e9: 6a:b5:0e:a3:e2:b4:3b:20:df:3e:8e:8f:c6:92:c4:02:54:00: c4:4f:20:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwMkJFRkM4RUI0MzVC MUI2ODZFNkI4M0EyODFDOUQwREUwQTRBNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpFHeWCazkSEuNLrUk2wiL+s9ZqWpK8/3yikEYpxzDtSUW8Ijh hdL/pK2nvubXXfkyBNIZCEIE82kh2XOzRq+rZRHQ6x9DPXrP1NwxrxN4Zj9JQD8Z f0xB73gDyBIK1pJkf1uhFOd6hrtw0QoUByP0a6sTuRxwKZ4qA4yHAF7OBMyLQClV JOv23N0EjSV+Wra1CEMG5wAS0rVqhwB2JxPEA8e6947ChoV906jN1RMk2iWtFZw2 IANyn8aNsCZqyPGC/MbFbxngQUwcP6M6irlFj/IITHjWQIiFHnButPvj+4mr/FTG 4oOqgvj1PHePCl3m4shtjeL30MmYy7C8tyzzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcCvvyOtDWxtobmuDooHJ0N4KSnMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NDdnZ5T3REV3h0b2JtdURv b0hKME40S1NuTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w+AwDQYJKoZIhvcNAQELBQADggEBAAJvCsBhlZ6ZDUOZCa/0sLQlSwUg5s35b//t G69BrudNP4f3N3T8yU2s3TrSvq4bA4CRHqnIGve42GQJgqxpQKtXFGm1iCWsGIbF Ftkmv/ADMozrGlBtFHrer84zHd2n6mgfP1U146ExbCXOLAsFSOR2zeCKxRoPHZTv Oo+6TDH1P4nzTRx1H5MRFARR7Mtkc8RZBqzIVAEK94HsVlFNgRlZYBrmQ2ldttDC DRKRi4PhJ60o/R60nkUF+c6WdiEXRhYzNy3Ph+G5r2qn/bFAmwl4QtPmsrph6E7u pjaYH/gD0eGXt5i3y8g76Wq1DqPitDsg3z6Oj8aSxAJUAMRPIAw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org