$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa File: dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa (raw, json) Hash identifier: mX335/kKrw0eEChPKRQEM+vLG4TzW/57jJLwbEkQ/qY= Subject key identifier: 74:5D:54:CE:FA:10:E8:13:36:8D:FC:7A:9B:1A:2C:89:4C:B1:1B:45 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AE1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa Signing time: Fri 01 Sep 2023 10:08:23 +0000 ROA not before: Fri 01 Sep 2023 10:08:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10977 (0x2ae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=745D54CEFA10E813368DFC7A9B1A2C894CB11B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:3b:ab:89:0f:13:4b:50:b8:50:fc:37:3c: 12:ed:f0:1b:63:ae:b8:da:71:4a:b5:23:dd:0b:02: ea:d4:e0:e3:a1:35:48:60:aa:fb:c4:ad:d1:f6:64: 83:2d:01:9b:28:bd:0c:18:f4:21:cc:19:73:b6:df: 50:06:30:87:cc:ea:b0:d4:27:45:f3:90:7c:a5:fa: 73:e0:bf:0a:bb:04:ff:3c:3e:bd:cb:e7:8f:87:62: 9e:16:8b:96:fe:93:d7:96:9a:b8:50:7e:5f:a7:a0: 6e:d6:2e:d7:fc:e2:0a:91:76:26:0e:25:0a:8c:c6: 4a:dd:b1:86:61:a0:96:e6:b3:ba:8c:5b:36:99:f1: a8:b7:42:fd:fd:50:1d:e5:60:77:41:64:cb:c0:37: c9:3c:07:ad:7f:82:62:29:9b:e3:fe:da:79:31:4c: 4b:7f:aa:68:ff:03:23:9a:22:ae:06:29:72:54:29: 58:36:df:c0:0d:47:56:0c:bb:07:fa:6d:c7:cf:83: 3d:86:60:d1:a9:25:72:66:26:7d:28:a6:28:2b:df: 63:3a:9d:63:b0:87:91:87:27:cf:17:4a:2a:ba:42: fd:c4:5c:9b:24:07:43:04:6a:77:96:de:27:a0:fc: 07:47:3f:0e:77:ef:42:ec:c3:28:ad:eb:19:f9:2a: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5D:54:CE:FA:10:E8:13:36:8D:FC:7A:9B:1A:2C:89:4C:B1:1B:45 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.232.0/22 Signature Algorithm: sha256WithRSAEncryption 65:0c:5d:ba:32:f9:6b:2f:48:3f:bb:0c:3c:19:96:92:b4:02: 90:e8:42:bb:8f:00:dc:97:f6:a0:63:96:8f:53:20:01:4e:55: 06:42:be:ab:01:d7:c5:c1:33:7d:82:09:46:0d:7a:2a:4e:ee: 08:9c:51:e3:ab:98:6d:aa:9a:1d:a4:99:d3:b2:7a:7a:a6:51: 4a:e6:20:f6:3f:1d:93:31:71:ee:ca:92:21:82:3a:bc:62:37: 8f:1d:41:67:ba:4b:c4:fe:dc:d9:20:57:67:91:8e:a4:55:e4: da:40:74:d7:a7:3a:5c:f8:42:29:bc:91:0e:67:ac:30:41:e9: 81:f0:72:d3:e9:6a:b8:b7:d6:03:78:13:03:ab:7a:0a:fd:e7: a7:49:1b:b1:c5:62:ae:b2:c8:ff:a0:f1:0a:65:00:13:27:54: 52:7f:cc:12:29:02:94:50:97:95:81:ba:c0:e8:f2:75:df:68: 68:f3:df:8c:55:5f:4d:63:ee:67:af:8b:52:dd:d4:ff:7d:84: 74:a3:2d:41:1f:ad:0f:e1:cf:4e:ee:36:11:22:91:6b:ba:26: 99:5c:d2:ff:65:19:7d:b0:87:c2:2d:be:7c:ca:48:71:41:5a: db:51:5e:83:3b:ad:04:ec:e7:99:da:f4:f1:ad:d5:6a:f3:38: f8:87:45:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc0NUQ1NENFRkExMEU4 MTMzNjhERkM3QTlCMUEyQzg5NENCMTFCNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaDzuriQ8TS1C4UPw3PBLt8BtjrrjacUq1I90LAurU4OOhNUhg qvvErdH2ZIMtAZsovQwY9CHMGXO231AGMIfM6rDUJ0XzkHyl+nPgvwq7BP88Pr3L 54+HYp4Wi5b+k9eWmrhQfl+noG7WLtf84gqRdiYOJQqMxkrdsYZhoJbms7qMWzaZ 8ai3Qv39UB3lYHdBZMvAN8k8B61/gmIpm+P+2nkxTEt/qmj/AyOaIq4GKXJUKVg2 38ANR1YMuwf6bcfPgz2GYNGpJXJmJn0opigr32M6nWOwh5GHJ88XSiq6Qv3EXJsk B0MEaneW3ieg/AdHPw5370Lswyit6xn5Kqi1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdF1UzvoQ6BM2jfx6mxosiUyxG0UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RGMVV6dm9RNkJNMmpmeDZt eG9zaVV5eEcwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w+gwDQYJKoZIhvcNAQELBQADggEBAGUMXboy+WsvSD+7DDwZlpK0ApDoQruPANyX 9qBjlo9TIAFOVQZCvqsB18XBM32CCUYNeipO7gicUeOrmG2qmh2kmdOyenqmUUrm IPY/HZMxce7KkiGCOrxiN48dQWe6S8T+3NkgV2eRjqRV5NpAdNenOlz4Qim8kQ5n rDBB6YHwctPpari31gN4EwOregr956dJG7HFYq6yyP+g8QplABMnVFJ/zBIpApRQ l5WBusDo8nXfaGjz34xVX01j7mevi1Ld1P99hHSjLUEfrQ/hz07uNhEikWu6Jplc 0v9lGX2wh8ItvnzKSHFBWttRXoM7rQTs55na9PGt1WrzOPiHRaQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org