$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dAQkUQz2sioFPxI1nINB8NIvfm0.roa File: dAQkUQz2sioFPxI1nINB8NIvfm0.roa (raw, json) Hash identifier: Dq0tqMqc/jo5HmuodiF5pX/I0m0605LVXMXLuPLQa58= Subject key identifier: 74:04:24:51:0C:F6:B2:2A:05:3F:12:35:9C:83:41:F0:D2:2F:7E:6D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2964 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dAQkUQz2sioFPxI1nINB8NIvfm0.roa Signing time: Fri 01 Sep 2023 10:06:27 +0000 ROA not before: Fri 01 Sep 2023 10:06:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10596 (0x2964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=740424510CF6B22A053F12359C8341F0D22F7E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:ac:05:3b:ed:a3:7b:97:4b:0b:66:3d:e6: ff:cf:df:d4:dd:86:17:60:78:9e:0e:87:a5:ae:78: 9c:02:00:90:ba:17:6e:a0:ec:4f:26:c3:d2:3a:ed: d5:38:38:a0:d7:bb:b9:99:8f:45:6f:63:f6:f2:93: 0c:f9:70:76:75:05:59:ef:bb:1e:3c:6d:1c:c2:bf: 13:6a:99:23:7b:12:d4:9e:85:ac:7f:38:b4:ab:db: 1f:dd:de:09:32:3a:9e:6e:4a:11:0d:08:5c:99:3f: 58:4b:3a:0d:86:a6:aa:b4:77:7f:55:cc:50:d4:0e: a7:e8:c7:7a:40:7d:e3:c2:80:ca:ed:b7:ba:1c:e2: 2b:99:46:0e:00:0d:fb:7c:87:00:d5:d5:3e:eb:38: 5b:9f:59:47:33:f6:4a:e8:c9:e8:4b:c2:a3:f3:40: 6c:c1:b9:17:d4:a5:37:25:e9:83:17:ff:cf:e4:e2: c1:a3:4c:a3:92:b8:17:8d:a8:ae:50:af:99:ed:fa: 8f:83:24:c9:b4:69:30:bb:ea:14:2c:77:48:02:2c: 3e:37:22:0a:fe:41:d3:b2:41:a9:1b:fb:1a:68:ef: 53:2f:74:33:a2:e0:c8:78:c1:9a:e3:a4:a3:38:74: a5:c6:3f:cd:6e:65:69:6f:87:c9:c5:94:62:3b:55: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:24:51:0C:F6:B2:2A:05:3F:12:35:9C:83:41:F0:D2:2F:7E:6D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dAQkUQz2sioFPxI1nINB8NIvfm0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.32.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:f7:d9:2f:25:fa:af:f2:09:1a:d9:2f:81:3d:db:09:4c:b2: 0f:ba:70:f5:e0:b8:c3:bf:35:14:4d:61:91:68:75:58:7c:0f: f2:07:fb:65:98:94:7e:b4:ad:ae:f0:60:75:f0:ae:21:33:5c: bb:f0:d0:15:56:86:40:da:1c:e5:08:b3:50:de:5b:cc:98:80: 74:e9:46:1e:5e:e4:30:24:4a:82:c3:b3:e2:52:a7:92:d5:a1: 4a:7c:f5:5f:73:50:79:32:6a:ef:c1:df:a9:5e:dc:e1:26:e0: ee:b5:38:9a:62:e4:7d:9c:97:3a:c3:cd:37:72:a9:2c:a6:5e: 12:ae:e3:9f:cd:5f:a5:a2:9d:b7:64:fc:5a:ab:b6:4f:1a:c6: b9:ca:7d:6c:f1:63:88:95:26:53:db:e7:e5:0a:03:d4:08:62: 56:f2:82:fb:e7:60:d4:ca:2b:4e:61:66:b9:1d:3a:4c:76:30: 41:b8:62:2f:3e:2b:fb:60:4c:da:f9:4e:d0:8f:6f:c6:ca:85: 5d:e2:5b:b5:ac:90:00:f2:58:4c:cb:36:ae:42:ea:0c:cf:00: d9:8c:95:18:34:57:d8:9d:74:4f:4f:f3:4e:7d:df:c9:0e:bd: ef:a6:65:b4:ad:26:bc:2f:ca:ca:42:7f:44:f0:7c:73:5d:ae: 79:46:07:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc0MDQyNDUxMENGNkIy MkEwNTNGMTIzNTlDODM0MUYwRDIyRjdFNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK26wFO+2je5dLC2Y95v/P39TdhhdgeJ4Oh6WueJwCAJC6F26g 7E8mw9I67dU4OKDXu7mZj0VvY/bykwz5cHZ1BVnvux48bRzCvxNqmSN7EtSehax/ OLSr2x/d3gkyOp5uShENCFyZP1hLOg2Gpqq0d39VzFDUDqfox3pAfePCgMrtt7oc 4iuZRg4ADft8hwDV1T7rOFufWUcz9kroyehLwqPzQGzBuRfUpTcl6YMX/8/k4sGj TKOSuBeNqK5Qr5nt+o+DJMm0aTC76hQsd0gCLD43Igr+QdOyQakb+xpo71MvdDOi 4Mh4wZrjpKM4dKXGP81uZWlvh8nFlGI7VacTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdAQkUQz2sioFPxI1nINB8NIvfm0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RBUWtVUXoyc2lvRlB4STFu SU5COE5JdmZtMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wyAwDQYJKoZIhvcNAQELBQADggEBAF332S8l+q/yCRrZL4E92wlMsg+6cPXguMO/ NRRNYZFodVh8D/IH+2WYlH60ra7wYHXwriEzXLvw0BVWhkDaHOUIs1DeW8yYgHTp Rh5e5DAkSoLDs+JSp5LVoUp89V9zUHkyau/B36le3OEm4O61OJpi5H2clzrDzTdy qSymXhKu45/NX6Winbdk/Fqrtk8axrnKfWzxY4iVJlPb5+UKA9QIYlbygvvnYNTK K05hZrkdOkx2MEG4Yi8+K/tgTNr5TtCPb8bKhV3iW7WskADyWEzLNq5C6gzPANmM lRg0V9iddE9P805938kOve+mZbStJrwvyspCf0TwfHNdrnlGB5M= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org