$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fm4v0f7MHPm3Dpyaf4FOby0cze4.roa File: fm4v0f7MHPm3Dpyaf4FOby0cze4.roa (raw, json) Hash identifier: UHh2QlafxVLCyTEnxQvoaqbrx/zw8yvZUz/0brPILAc= Subject key identifier: 7E:6E:2F:D1:FE:CC:1C:F9:B7:0E:9C:9A:7F:81:4E:6F:2D:1C:CD:EE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27CA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fm4v0f7MHPm3Dpyaf4FOby0cze4.roa Signing time: Fri 01 Sep 2023 10:04:32 +0000 ROA not before: Fri 01 Sep 2023 10:04:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.193.160.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10186 (0x27ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7E6E2FD1FECC1CF9B70E9C9A7F814E6F2D1CCDEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:f2:88:22:ad:b0:f9:f4:ca:7b:c8:e4:a3: bf:e4:27:89:7f:4d:7f:45:9a:26:82:6e:34:0f:ef: 1f:5a:07:22:a6:8a:68:5f:0e:38:50:1d:c8:c7:c7: c7:f8:60:f1:12:15:72:5d:b5:6c:3c:b7:88:9c:1c: 3c:a3:09:11:9a:4f:a2:f7:5f:ed:51:4d:67:55:05: 3e:5e:72:99:88:80:27:4c:1e:54:d5:71:98:ed:83: 72:46:ee:1b:8c:82:dd:79:55:19:1c:1f:ef:a3:a1: 87:55:1d:ff:a4:1f:4e:89:1c:3f:39:7f:63:5d:24: ee:e1:fc:86:8a:2e:0d:2e:f2:5f:f4:4e:f2:bd:fc: f2:bf:ae:7a:04:6e:e4:d9:8b:d2:2a:ac:a0:7d:64: 46:03:d7:ad:2a:0e:33:f7:3f:08:bc:e7:86:06:4b: 9e:ec:e1:30:0b:6e:c9:ff:b9:bc:9c:cf:17:a6:67: fb:01:ad:ba:6b:ee:1c:e7:c6:f5:f4:d7:3f:e7:50: 2d:18:f1:36:50:ad:21:7e:03:ca:bf:4e:db:30:47: d7:38:98:5b:88:d0:e4:20:8e:b9:5d:e4:d5:d5:1a: 4c:26:b1:52:b3:96:50:6e:6a:e4:cf:28:55:96:9d: 0b:e3:45:a8:59:f1:97:3d:cd:79:f0:41:db:66:56: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6E:2F:D1:FE:CC:1C:F9:B7:0E:9C:9A:7F:81:4E:6F:2D:1C:CD:EE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fm4v0f7MHPm3Dpyaf4FOby0cze4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.160.0/19 Signature Algorithm: sha256WithRSAEncryption 94:5c:78:46:a8:d8:d6:4d:37:87:07:9d:42:66:50:68:6c:3e: 5b:2d:5a:35:92:f6:27:96:59:ce:9c:ea:b5:7a:08:dd:89:96: dd:14:02:e1:5a:58:a1:2e:2d:03:30:03:5f:a7:63:b1:8d:ed: 6d:67:bd:c7:de:4e:82:90:ae:16:8c:23:7e:f5:94:f8:fb:fd: 22:3d:19:01:ac:f4:fa:9f:7c:a1:fb:c4:74:33:dd:c8:40:2a: c5:a7:69:ec:6b:5b:09:8c:36:b2:15:31:3f:7a:c8:fc:5f:ba: ab:37:84:e6:2a:85:eb:c5:07:18:8d:48:42:0b:b8:78:49:4c: d8:52:9d:ac:25:c4:d8:e5:a7:a3:d6:0e:3f:0c:d8:81:06:38: 31:f6:9b:d4:e1:a6:22:ba:f2:5a:ff:d3:ed:29:d8:c4:0f:a1: 22:45:43:77:cc:4f:c0:37:d5:cb:41:18:d5:28:9a:9e:53:55: 48:d0:c3:27:89:fa:6a:f7:4a:70:70:70:9b:9b:cd:b7:55:36: e2:46:48:8d:63:f2:9a:fc:ee:93:bf:6e:fd:99:09:f8:98:d3: 79:7c:ac:0e:95:4e:de:5c:a1:c7:88:a9:b7:09:d2:46:d2:f7: f9:32:55:d6:6b:85:d6:a8:be:d5:e0:a0:3d:94:f7:45:94:77: 3b:1d:18:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdFNkUyRkQxRkVDQzFD RjlCNzBFOUM5QTdGODE0RTZGMkQxQ0NERUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQj/KIIq2w+fTKe8jko7/kJ4l/TX9FmiaCbjQP7x9aByKmimhf DjhQHcjHx8f4YPESFXJdtWw8t4icHDyjCRGaT6L3X+1RTWdVBT5ecpmIgCdMHlTV cZjtg3JG7huMgt15VRkcH++joYdVHf+kH06JHD85f2NdJO7h/IaKLg0u8l/0TvK9 /PK/rnoEbuTZi9IqrKB9ZEYD160qDjP3Pwi854YGS57s4TALbsn/ubyczxemZ/sB rbpr7hznxvX01z/nUC0Y8TZQrSF+A8q/TtswR9c4mFuI0OQgjrld5NXVGkwmsVKz llBuauTPKFWWnQvjRahZ8Zc9zXnwQdtmVkErAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfm4v0f7MHPm3Dpyaf4FOby0cze4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZtNHYwZjdNSFBtM0RweWFm NEZPYnkwY3plNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 waAwDQYJKoZIhvcNAQELBQADggEBAJRceEao2NZNN4cHnUJmUGhsPlstWjWS9ieW Wc6c6rV6CN2Jlt0UAuFaWKEuLQMwA1+nY7GN7W1nvcfeToKQrhaMI371lPj7/SI9 GQGs9PqffKH7xHQz3chAKsWnaexrWwmMNrIVMT96yPxfuqs3hOYqhevFBxiNSEIL uHhJTNhSnawlxNjlp6PWDj8M2IEGODH2m9ThpiK68lr/0+0p2MQPoSJFQ3fMT8A3 1ctBGNUomp5TVUjQwyeJ+mr3SnBwcJubzbdVNuJGSI1j8pr87pO/bv2ZCfiY03l8 rA6VTt5coceIqbcJ0kbS9/kyVdZrhdaovtXgoD2U90WUdzsdGNo= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org