$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eaXwCQUFC-MIaXvchcN3NLwHDhY.roa File: eaXwCQUFC-MIaXvchcN3NLwHDhY.roa (raw, json) Hash identifier: 8h5BmPVgkWYjsppsnwubZWErIX9MkcV9oAfTYqA03lc= Subject key identifier: 79:A5:F0:09:05:05:0B:E3:08:69:7B:DC:85:C3:77:34:BC:07:0E:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28A0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eaXwCQUFC-MIaXvchcN3NLwHDhY.roa Signing time: Fri 01 Sep 2023 10:05:35 +0000 ROA not before: Fri 01 Sep 2023 10:05:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10400 (0x28a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=79A5F00905050BE308697BDC85C37734BC070E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:d0:41:8a:3d:0a:21:b2:87:d0:87:12:d6: 67:f7:10:db:0c:b5:16:0a:b4:ff:43:55:aa:a1:1a: 52:27:25:38:1b:a2:ee:74:d1:77:c9:c5:7e:73:d1: a6:bd:b7:f5:4a:05:cf:c1:06:16:2d:78:8a:1b:80: f0:c0:06:5c:4c:35:cf:59:60:b4:ed:89:8a:83:60: f1:f9:4d:1d:8b:6f:4f:64:41:d9:64:df:be:65:7d: 2c:2f:c8:e4:08:d7:f2:3a:0e:cf:e1:cb:00:0a:e9: e1:58:36:0b:b3:95:89:28:e4:85:a5:7e:09:13:99: 14:28:8d:ef:0c:38:55:21:c9:ec:30:a3:48:f3:97: 1a:58:ce:16:e2:7f:87:a6:df:4c:fa:6d:08:11:0f: b8:7a:b7:c4:e5:01:5e:4d:42:f8:77:c3:87:e9:eb: 19:2f:c9:3b:38:be:4a:4e:28:e9:1a:b8:7b:07:b0: dc:7f:44:fc:d3:19:84:c8:79:cb:2e:78:d8:60:29: d4:bb:32:1f:72:9a:92:61:90:7a:fd:73:5f:70:c9: 33:2b:90:9b:aa:e9:90:85:60:29:7d:19:d0:84:08: 1a:cf:c9:c0:c3:6c:08:6c:f9:45:c4:63:49:4e:05: 19:f0:2d:1a:38:95:9f:ab:cd:a0:7c:69:14:60:6a: d0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A5:F0:09:05:05:0B:E3:08:69:7B:DC:85:C3:77:34:BC:07:0E:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eaXwCQUFC-MIaXvchcN3NLwHDhY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.110.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:50:0d:db:b9:28:1b:44:9d:f4:70:fa:bf:2a:b1:6e:c2:4f: 9b:40:d3:57:6b:70:f8:87:24:ae:5f:66:19:0e:25:cf:3e:04: 9f:93:8a:6b:87:ea:f5:90:2e:0e:0d:50:41:57:8d:6a:b9:4f: b9:c0:f6:a5:6c:dd:40:62:be:5b:3e:c2:63:b4:a2:84:57:20: 78:77:3b:a6:01:a5:06:c3:ba:42:aa:15:37:6d:65:01:bf:8f: 67:2a:10:e6:e5:68:39:a0:0b:74:88:77:7a:5b:24:c8:23:d7: d3:3f:9a:9c:ba:d8:33:c2:ad:d8:94:fb:49:9c:88:1d:e3:71: b8:8e:39:1f:f1:7c:73:b8:4d:d6:df:b9:5a:1a:72:9a:27:b1: 1c:46:7e:79:4a:78:b3:ce:eb:46:54:2c:fa:2b:ce:a9:11:5a: d5:4a:eb:23:9e:bd:bc:2d:6d:9f:b0:42:bd:98:04:d1:ad:ed: a3:f3:96:ec:68:06:bd:02:46:34:89:c3:f0:f9:6b:5a:80:44: a6:b1:b9:46:89:9d:32:71:2a:0a:7a:8f:16:be:61:69:3c:ce: ac:e9:eb:5f:98:3d:f4:d8:ab:d5:be:77:c2:47:2d:af:52:a2: a8:03:71:17:1d:11:0c:31:bf:82:26:bd:83:a7:e7:9c:a2:7e: c3:d8:11:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc5QTVGMDA5MDUwNTBC RTMwODY5N0JEQzg1QzM3NzM0QkMwNzBFMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMUtBBij0KIbKH0IcS1mf3ENsMtRYKtP9DVaqhGlInJTgbou50 0XfJxX5z0aa9t/VKBc/BBhYteIobgPDABlxMNc9ZYLTtiYqDYPH5TR2Lb09kQdlk 375lfSwvyOQI1/I6Ds/hywAK6eFYNguzlYko5IWlfgkTmRQoje8MOFUhyewwo0jz lxpYzhbif4em30z6bQgRD7h6t8TlAV5NQvh3w4fp6xkvyTs4vkpOKOkauHsHsNx/ RPzTGYTIecsueNhgKdS7Mh9ympJhkHr9c19wyTMrkJuq6ZCFYCl9GdCECBrPycDD bAhs+UXEY0lOBRnwLRo4lZ+rzaB8aRRgatC9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeaXwCQUFC+MIaXvchcN3NLwHDhYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VhWHdDUVVGQy1NSWFYdmNo Y04zTkx3SERoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wW4wDQYJKoZIhvcNAQELBQADggEBAI9QDdu5KBtEnfRw+r8qsW7CT5tA01drcPiH JK5fZhkOJc8+BJ+TimuH6vWQLg4NUEFXjWq5T7nA9qVs3UBivls+wmO0ooRXIHh3 O6YBpQbDukKqFTdtZQG/j2cqEOblaDmgC3SId3pbJMgj19M/mpy62DPCrdiU+0mc iB3jcbiOOR/xfHO4TdbfuVoacponsRxGfnlKeLPO60ZULPorzqkRWtVK6yOevbwt bZ+wQr2YBNGt7aPzluxoBr0CRjSJw/D5a1qARKaxuUaJnTJxKgp6jxa+YWk8zqzp 61+YPfTYq9W+d8JHLa9SoqgDcRcdEQwxv4ImvYOn55yifsPYEQQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org