$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7wjluwNXYRR88ykN9FPJTHh-3U.roa File: f7wjluwNXYRR88ykN9FPJTHh-3U.roa (raw, json) Hash identifier: i8S48SUftBpR61i3KlP+jKEy+H1hf7aSZ/r+ZqkGuHA= Subject key identifier: 7F:BC:23:96:EC:0D:5D:84:51:F3:CC:A4:37:D1:4F:25:31:E1:FB:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28BF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7wjluwNXYRR88ykN9FPJTHh-3U.roa Signing time: Fri 01 Sep 2023 10:05:43 +0000 ROA not before: Fri 01 Sep 2023 10:05:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.236.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10431 (0x28bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7FBC2396EC0D5D8451F3CCA437D14F2531E1FB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:3e:60:5b:13:22:b9:a7:96:c6:35:71:00: 57:14:a8:87:de:14:89:e0:f5:55:da:41:70:a5:2e: 1e:be:59:1d:b0:84:fe:1a:02:8f:30:e3:de:09:86: 16:c0:fc:fd:95:01:ab:a8:bc:e9:48:bd:e3:fb:1c: f3:02:ce:ab:01:33:39:99:08:b4:36:cb:91:b6:c3: 55:c3:01:fc:a9:14:50:82:d6:d9:d2:fa:30:b1:d8: 66:2f:5f:22:eb:8e:59:b4:8d:00:57:0e:42:31:dc: 93:55:a2:97:fe:bf:2d:bc:c4:83:88:6c:24:80:c5: e3:60:2b:ec:65:eb:10:e6:9c:2c:a7:f1:de:66:a7: a3:41:0e:ed:11:a5:db:cd:9d:39:0d:6f:c0:b1:fd: 13:08:65:5d:81:83:50:b6:c2:7e:6f:c9:d4:f5:c6: ec:ee:77:ae:95:a5:3c:68:3b:59:62:1f:da:de:89: 13:47:75:86:04:57:26:b8:f5:4e:3c:5d:3e:05:88: 4d:e7:19:bb:a7:eb:1f:2c:e0:a7:d3:14:1d:13:9c: 01:63:8e:ee:5c:cb:e1:28:5d:3a:e4:e9:a2:c5:53: 7f:94:3f:53:c6:6e:88:d4:29:e3:51:ee:50:c2:a0: a9:dd:fa:f6:2d:a0:e5:bf:d7:75:65:07:64:33:be: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BC:23:96:EC:0D:5D:84:51:F3:CC:A4:37:D1:4F:25:31:E1:FB:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7wjluwNXYRR88ykN9FPJTHh-3U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.236.128/25 Signature Algorithm: sha256WithRSAEncryption 05:b8:33:9a:64:e3:cf:2e:4c:55:fe:b5:e8:3f:27:24:f7:07: 2f:a9:3b:aa:bc:03:cb:8e:13:1f:96:ca:73:b5:84:eb:50:64: ce:c3:33:95:bb:cb:33:e6:0d:f0:bd:eb:8b:97:60:d3:73:a9: 59:18:cb:08:71:48:29:80:08:c7:1e:01:57:f3:87:4d:c4:15: 52:6e:7c:b3:97:9d:53:8e:75:f2:54:45:3a:03:30:59:35:d0: 69:b2:3c:9e:42:6b:88:7f:67:fe:ba:2e:f1:ba:d9:3d:46:5b: dd:25:b0:62:43:7c:72:9b:c1:2d:82:d5:83:33:e0:6f:ba:51: 1c:56:82:f1:3f:1d:22:f2:d1:18:ec:38:55:c3:3a:19:a3:5c: ca:3c:29:46:fd:dc:18:ab:b5:b5:97:dd:89:c0:8d:c8:35:c5: 74:f7:63:19:cf:17:d2:7e:f3:34:88:6e:21:f3:fa:fa:d3:0d: db:ff:70:31:be:e2:37:22:dd:8d:0a:5e:bf:7a:0f:4c:e9:2f: 3e:33:00:a2:e6:d0:0b:6c:4d:b6:35:dc:92:00:71:ac:de:b2: ed:bb:54:66:2a:60:17:24:17:36:8c:c5:1f:5c:42:81:42:ec: df:f5:ca:bb:5b:d7:f6:1c:b6:77:be:e4:0c:91:ca:f8:f2:61: 7d:41:25:66 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdGQkMyMzk2RUMwRDVE ODQ1MUYzQ0NBNDM3RDE0RjI1MzFFMUZCNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7vD5gWxMiuaeWxjVxAFcUqIfeFIng9VXaQXClLh6+WR2whP4a Ao8w494JhhbA/P2VAauovOlIveP7HPMCzqsBMzmZCLQ2y5G2w1XDAfypFFCC1tnS +jCx2GYvXyLrjlm0jQBXDkIx3JNVopf+vy28xIOIbCSAxeNgK+xl6xDmnCyn8d5m p6NBDu0RpdvNnTkNb8Cx/RMIZV2Bg1C2wn5vydT1xuzud66VpTxoO1liH9reiRNH dYYEVya49U48XT4FiE3nGbun6x8s4KfTFB0TnAFjju5cy+EoXTrk6aLFU3+UP1PG bojUKeNR7lDCoKnd+vYtoOW/13VlB2Qzvi4xAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUf7wjluwNXYRR88ykN9FPJTHh+3UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Y3d2psdXdOWFlSUjg4eWtO OUZQSlRIaC0zVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+yAMA0GCSqGSIb3DQEBCwUAA4IBAQAFuDOaZOPPLkxV/rXoPyck9wcvqTuqvAPL jhMflspztYTrUGTOwzOVu8sz5g3wveuLl2DTc6lZGMsIcUgpgAjHHgFX84dNxBVS bnyzl51TjnXyVEU6AzBZNdBpsjyeQmuIf2f+ui7xutk9RlvdJbBiQ3xym8EtgtWD M+BvulEcVoLxPx0i8tEY7DhVwzoZo1zKPClG/dwYq7W1l92JwI3INcV092MZzxfS fvM0iG4h8/r60w3b/3AxvuI3It2NCl6/eg9M6S8+MwCi5tALbE22NdySAHGs3rLt u1RmKmAXJBc2jMUfXEKBQuzf9cq7W9f2HLZ3vuQMkcr48mF9QSVm -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org