$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa File: eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa (raw, json) Hash identifier: 2mAurnp/tR1o3HUxCKRrgYgxnbCtEBJZpywaTAae8aY= Subject key identifier: 78:9C:A8:2C:FB:7A:C0:58:F5:AF:C0:00:1D:36:3C:68:E7:57:26:8A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2991 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa Signing time: Fri 01 Sep 2023 10:06:46 +0000 ROA not before: Fri 01 Sep 2023 10:06:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 211.76.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10641 (0x2991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=789CA82CFB7AC058F5AFC0001D363C68E757268A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:c1:73:ca:d8:68:60:2c:2c:33:ba:de:9d: 6d:85:2d:01:8f:a7:7f:86:b2:7e:3e:65:66:f7:74: 5f:ca:26:4e:e7:03:f7:fe:b9:9c:6c:7d:4c:69:df: 41:7c:40:3e:d4:a4:c1:19:03:79:52:e1:45:69:6f: a3:71:55:40:cb:3b:32:81:16:5b:3f:d3:87:b0:a8: 77:e0:c9:23:30:19:3b:b3:81:dc:34:ef:9a:36:84: 1c:99:8e:7c:18:8c:2a:5f:4d:63:cb:bf:9a:66:9b: 63:f9:e9:96:a2:85:dd:28:6c:57:07:c1:4d:f3:2f: f3:6a:6a:d0:3d:a7:3d:b7:27:30:00:65:99:a2:4c: 40:64:13:c8:3b:df:7b:1e:7b:3a:bd:72:21:8a:6d: da:74:70:33:58:1c:f3:f2:98:cb:86:0d:7c:80:8e: ac:8e:64:f8:de:75:ba:c9:ec:08:d8:9d:6f:7f:6f: b9:ef:b3:c1:03:ea:8a:16:0b:78:56:6b:44:46:40: 0e:45:5b:d7:52:a9:e4:08:d4:75:4c:22:b4:d5:1e: 9f:bd:25:75:33:b9:16:f4:04:e2:49:43:6d:11:f9: 0d:65:58:dd:11:56:58:b1:8a:78:3f:2a:d3:15:ec: 31:39:cd:55:f3:ea:a3:4a:e0:a7:89:cc:14:1c:bf: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:A8:2C:FB:7A:C0:58:F5:AF:C0:00:1D:36:3C:68:E7:57:26:8A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.123.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:6e:54:04:51:d9:68:12:37:ee:a4:22:32:de:59:1c:15:3f: 2e:e1:04:40:e4:81:b6:94:93:1a:df:e9:ad:0e:ee:dd:d9:7e: 5b:b4:5a:95:05:9c:97:6e:b7:5c:1b:11:b9:ad:37:bc:f1:02: de:00:85:dc:d3:6b:52:98:e7:5e:32:ea:94:33:2d:12:3f:b6: 15:8d:c3:53:c1:8b:e5:13:dc:6c:33:33:9f:a1:31:f5:b2:a9: 49:61:d6:c0:86:7a:70:66:37:cb:38:e9:67:15:9a:5a:17:12: e1:31:33:dd:4d:c6:b6:15:3d:85:6d:b2:b7:6e:5b:1b:b8:95: 2d:e0:5d:a6:0d:e8:01:bd:4b:b0:5e:74:5e:83:9c:83:1f:e2: e8:c8:eb:85:7f:f2:a8:a1:b3:ce:39:6a:58:42:04:df:0f:26: e4:61:6f:f4:27:93:6e:18:0d:46:4b:9f:63:47:75:14:dc:16: d9:ab:97:42:66:c5:54:82:c5:aa:bc:39:0a:68:ec:e7:f5:b9: cc:1b:29:ca:2a:26:eb:e0:95:b9:29:84:b9:b0:ba:cf:ce:f3: ed:52:de:d1:23:02:38:18:db:00:dd:05:d2:70:4a:7e:9a:a5: 5b:e1:ef:88:93:e0:0b:90:5a:bd:ae:92:b6:69:61:55:c3:02: f4:46:10:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc4OUNBODJDRkI3QUMw NThGNUFGQzAwMDFEMzYzQzY4RTc1NzI2OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3gsFzythoYCwsM7renW2FLQGPp3+Gsn4+ZWb3dF/KJk7nA/f+ uZxsfUxp30F8QD7UpMEZA3lS4UVpb6NxVUDLOzKBFls/04ewqHfgySMwGTuzgdw0 75o2hByZjnwYjCpfTWPLv5pmm2P56Zaihd0obFcHwU3zL/NqatA9pz23JzAAZZmi TEBkE8g733seezq9ciGKbdp0cDNYHPPymMuGDXyAjqyOZPjedbrJ7AjYnW9/b7nv s8ED6ooWC3hWa0RGQA5FW9dSqeQI1HVMIrTVHp+9JXUzuRb0BOJJQ20R+Q1lWN0R Vlixing/KtMV7DE5zVXz6qNK4KeJzBQcv2oxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeJyoLPt6wFj1r8AAHTY8aOdXJoowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VKeW9MUHQ2d0ZqMXI4QUFI VFk4YU9kWEpvby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THswDQYJKoZIhvcNAQELBQADggEBAA9uVARR2WgSN+6kIjLeWRwVPy7hBEDkgbaU kxrf6a0O7t3Zflu0WpUFnJdut1wbEbmtN7zxAt4AhdzTa1KY514y6pQzLRI/thWN w1PBi+UT3GwzM5+hMfWyqUlh1sCGenBmN8s46WcVmloXEuExM91NxrYVPYVtsrdu Wxu4lS3gXaYN6AG9S7BedF6DnIMf4ujI64V/8qihs845alhCBN8PJuRhb/Qnk24Y DUZLn2NHdRTcFtmrl0JmxVSCxaq8OQpo7Of1ucwbKcoqJuvglbkphLmwus/O8+1S 3tEjAjgY2wDdBdJwSn6apVvh74iT4AuQWr2ukrZpYVXDAvRGEOY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org