$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d0KX5dEwBybL38NL5S8dZm4rPpk.roa File: d0KX5dEwBybL38NL5S8dZm4rPpk.roa (raw, json) Hash identifier: pgQH2+EmrPgvgswyma4JwiXT7wgLD9qHZD94g7kbovs= Subject key identifier: 77:42:97:E5:D1:30:07:26:CB:DF:C3:4B:E5:2F:1D:66:6E:2B:3E:99 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A6C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d0KX5dEwBybL38NL5S8dZm4rPpk.roa Signing time: Fri 01 Sep 2023 10:07:53 +0000 ROA not before: Fri 01 Sep 2023 10:07:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10860 (0x2a6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=774297E5D1300726CBDFC34BE52F1D666E2B3E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:32:78:a3:14:32:63:69:31:60:a8:73:0f: 27:9a:60:22:87:93:a2:e4:17:eb:29:dd:91:23:00: 26:af:da:e4:ed:01:c3:23:d1:6d:98:75:9d:d1:d9: 1d:3d:94:34:eb:b7:09:21:c9:b7:6c:6a:30:85:0b: 4b:76:1b:15:38:74:58:2a:6e:27:ad:27:33:06:48: c9:89:91:a8:35:8d:83:9a:93:3a:2e:e6:eb:2e:2d: 6c:b4:d9:73:01:46:56:7a:00:21:80:0e:9d:bb:d2: 89:d0:a0:35:ef:8e:9f:7c:7b:a9:42:3f:30:d1:6c: e9:8f:73:bc:09:6f:7f:e7:40:c4:7e:d3:6b:7c:b0: a5:23:3f:91:b7:6d:69:a0:27:8a:68:cd:96:99:60: 14:d4:e2:1e:c9:45:f6:d7:33:c8:23:93:ec:d0:e2: 63:81:0a:67:39:df:a9:c4:f5:4a:12:eb:52:79:77: 27:d5:39:70:3b:51:bd:d7:e6:db:22:bb:44:8e:98: d5:63:d6:95:47:6c:d9:4e:2d:17:82:f7:46:bc:e7: 94:46:14:36:da:15:96:47:6a:d9:4b:39:02:07:ae: ac:b1:f5:02:15:02:4d:c5:1d:5d:94:80:5f:be:5e: cc:14:8f:b9:cf:af:51:fb:e3:6f:06:c4:df:85:c6: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:42:97:E5:D1:30:07:26:CB:DF:C3:4B:E5:2F:1D:66:6E:2B:3E:99 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d0KX5dEwBybL38NL5S8dZm4rPpk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.80.0/21 Signature Algorithm: sha256WithRSAEncryption 59:6b:b5:f0:de:e3:97:5e:4a:6d:8a:03:16:22:e5:4b:3f:13: 04:ab:89:bd:03:c3:bd:ba:cf:6a:e6:41:45:91:e9:76:46:a4: e8:5e:d7:31:53:40:c5:cd:29:f3:9f:ba:f7:14:01:af:63:c8: 1a:91:06:6a:eb:d3:8a:6f:01:ea:1c:8e:0c:3f:b9:72:b7:ec: 33:74:d8:9d:b0:39:06:85:ee:a9:e5:65:eb:f4:33:d8:fc:31: 03:6f:8a:7b:91:15:40:7f:9c:be:a2:d2:2a:8c:9f:07:80:3e: 48:6e:63:8e:3f:ab:62:10:51:d8:eb:4d:75:04:f8:bb:cc:93: 56:d7:0f:db:09:a1:46:92:0d:47:34:49:fe:0b:fa:00:51:53: 41:4d:c5:15:69:79:d4:fa:58:a9:49:33:ba:07:fa:c8:e6:db: ac:19:b5:b5:8a:04:25:28:6d:51:b1:c1:e4:5e:86:ae:e2:f5: 31:3d:3e:82:04:e3:a9:59:92:39:93:65:85:7f:b0:58:43:bc: dd:41:e0:46:da:22:04:cf:1c:71:99:e6:0b:ac:e7:45:b7:5d: bd:46:fe:38:9a:da:b8:91:d7:14:01:a8:8d:fe:e1:5d:53:42: b7:5c:b7:a9:2e:68:2f:eb:29:25:e9:4a:e4:ba:9b:82:00:45: 20:5c:d5:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3NDI5N0U1RDEzMDA3 MjZDQkRGQzM0QkU1MkYxRDY2NkUyQjNFOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1yDJ4oxQyY2kxYKhzDyeaYCKHk6LkF+sp3ZEjACav2uTtAcMj 0W2YdZ3R2R09lDTrtwkhybdsajCFC0t2GxU4dFgqbietJzMGSMmJkag1jYOakzou 5usuLWy02XMBRlZ6ACGADp270onQoDXvjp98e6lCPzDRbOmPc7wJb3/nQMR+02t8 sKUjP5G3bWmgJ4pozZaZYBTU4h7JRfbXM8gjk+zQ4mOBCmc536nE9UoS61J5dyfV OXA7Ub3X5tsiu0SOmNVj1pVHbNlOLReC90a855RGFDbaFZZHatlLOQIHrqyx9QIV Ak3FHV2UgF++XswUj7nPr1H7428GxN+FxsDhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd0KX5dEwBybL38NL5S8dZm4rPpkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2QwS1g1ZEV3QnliTDM4Tkw1 UzhkWm00clBway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w1AwDQYJKoZIhvcNAQELBQADggEBAFlrtfDe45deSm2KAxYi5Us/EwSrib0Dw726 z2rmQUWR6XZGpOhe1zFTQMXNKfOfuvcUAa9jyBqRBmrr04pvAeocjgw/uXK37DN0 2J2wOQaF7qnlZev0M9j8MQNvinuRFUB/nL6i0iqMnweAPkhuY44/q2IQUdjrTXUE +LvMk1bXD9sJoUaSDUc0Sf4L+gBRU0FNxRVpedT6WKlJM7oH+sjm26wZtbWKBCUo bVGxweRehq7i9TE9PoIE46lZkjmTZYV/sFhDvN1B4EbaIgTPHHGZ5gus50W3Xb1G /jia2riR1xQBqI3+4V1TQrdct6kuaC/rKSXpSuS6m4IARSBc1do= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org