$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ftHThwSCOux14SF-9KY4FTbk-6g.roa File: ftHThwSCOux14SF-9KY4FTbk-6g.roa (raw, json) Hash identifier: sOHD4gm3/gx+fVYLmFxU89xE260+AUOzemTMZY2TQkE= Subject key identifier: 7E:D1:D3:87:04:82:3A:EC:75:E1:21:7E:F4:A6:38:15:36:E4:FB:A8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B29 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ftHThwSCOux14SF-9KY4FTbk-6g.roa Signing time: Fri 01 Sep 2023 10:09:55 +0000 ROA not before: Fri 01 Sep 2023 10:09:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.238.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11049 (0x2b29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7ED1D38704823AEC75E1217EF4A6381536E4FBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:fb:46:7c:aa:a2:10:7c:a3:de:30:38:ac: bd:52:60:40:de:37:26:a3:56:aa:bd:f6:2b:46:41: 30:1e:76:94:d4:99:41:fb:32:c3:98:72:74:fe:49: 06:01:58:e1:d3:ad:95:72:a6:c1:e8:10:9b:94:05: 8c:f5:57:29:c7:8d:d5:ac:46:1e:e1:6e:0a:44:6e: 43:d8:6d:b8:c5:d5:23:2a:de:9c:12:ed:c1:84:11: c9:4a:72:64:d6:eb:a9:f9:77:51:c8:6c:d3:41:ee: db:c0:d0:aa:7c:d5:f4:4b:13:7d:94:34:5e:85:28: 99:1f:ae:bf:20:42:08:5d:3f:39:b6:46:2b:5f:c0: 27:aa:11:96:33:91:99:ab:68:c2:0e:59:5c:46:90: da:d6:9b:3e:4e:de:71:c4:8d:72:d9:ac:6d:9a:75: 67:ff:2f:c5:b9:3e:16:7d:08:4a:94:15:1d:6a:2a: 31:ab:a0:2f:57:06:a5:76:29:b9:4c:6c:df:8c:4c: 22:1b:16:48:ed:f3:db:54:e6:d6:51:ed:5b:44:5a: af:40:62:12:34:7f:e2:bb:6f:6c:99:69:d0:22:dd: bf:55:81:04:fc:0f:82:11:23:6b:40:46:49:ab:55: bb:a9:59:37:39:85:73:8b:5e:66:c8:e0:1d:98:8a: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D1:D3:87:04:82:3A:EC:75:E1:21:7E:F4:A6:38:15:36:E4:FB:A8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ftHThwSCOux14SF-9KY4FTbk-6g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.128/25 Signature Algorithm: sha256WithRSAEncryption 58:b2:6d:b1:35:36:63:88:f1:6f:c5:d2:50:e1:33:4a:00:8d: 2b:e6:70:8d:f5:6c:91:91:e8:bd:45:b5:b9:23:f5:08:ab:5e: 52:aa:62:e3:90:18:95:b9:5a:c6:93:ee:54:3f:2f:83:4b:cf: df:1b:75:e3:3b:da:f2:1f:27:aa:a9:e7:28:1b:7c:0b:9f:c5: 1a:a9:80:85:a5:41:1b:97:19:e9:10:4c:22:09:02:2d:7c:eb: 70:a8:3d:18:be:87:cb:6b:43:a0:db:82:3e:e2:6a:30:4d:7e: 5c:e7:5a:38:02:e2:c3:64:a6:be:0e:7b:89:4b:ca:15:15:6d: 3b:e3:e5:43:f3:c3:af:b1:f4:a8:28:4e:43:2c:12:68:1b:0c: 66:88:a5:8c:12:0d:b4:97:59:e1:cb:de:33:25:5b:45:79:b3: fc:75:9f:aa:5e:68:01:71:c1:8c:7b:3e:3d:3a:51:e5:a1:96: a7:04:59:fe:40:6b:3b:85:1c:1a:78:4f:fc:f5:ac:d3:6a:26: 02:a4:74:da:6f:53:2a:3d:a1:d9:cf:c5:ea:47:b2:43:37:18: 41:75:62:48:83:57:5a:16:bd:42:93:5c:b4:a1:49:60:48:bd: 70:06:92:c3:76:99:a8:95:70:5d:c0:2c:8c:14:f9:c7:2c:20: 13:7c:c9:7b -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdFRDFEMzg3MDQ4MjNB RUM3NUUxMjE3RUY0QTYzODE1MzZFNEZCQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCd/vtGfKqiEHyj3jA4rL1SYEDeNyajVqq99itGQTAedpTUmUH7 MsOYcnT+SQYBWOHTrZVypsHoEJuUBYz1VynHjdWsRh7hbgpEbkPYbbjF1SMq3pwS 7cGEEclKcmTW66n5d1HIbNNB7tvA0Kp81fRLE32UNF6FKJkfrr8gQghdPzm2Ritf wCeqEZYzkZmraMIOWVxGkNrWmz5O3nHEjXLZrG2adWf/L8W5PhZ9CEqUFR1qKjGr oC9XBqV2KblMbN+MTCIbFkjt89tU5tZR7VtEWq9AYhI0f+K7b2yZadAi3b9VgQT8 D4IRI2tARkmrVbupWTc5hXOLXmbI4B2YiiZPAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUftHThwSCOux14SF+9KY4FTbk+6gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Z0SFRod1NDT3V4MTRTRi05 S1k0RlRiay02Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+6AMA0GCSqGSIb3DQEBCwUAA4IBAQBYsm2xNTZjiPFvxdJQ4TNKAI0r5nCN9WyR kei9RbW5I/UIq15SqmLjkBiVuVrGk+5UPy+DS8/fG3XjO9ryHyeqqecoG3wLn8Ua qYCFpUEblxnpEEwiCQItfOtwqD0YvofLa0Og24I+4mowTX5c51o4AuLDZKa+DnuJ S8oVFW074+VD88OvsfSoKE5DLBJoGwxmiKWMEg20l1nhy94zJVtFebP8dZ+qXmgB ccGMez49OlHloZanBFn+QGs7hRwaeE/89azTaiYCpHTab1MqPaHZz8XqR7JDNxhB dWJIg1daFr1Ck1y0oUlgSL1wBpLDdpmolXBdwCyMFPnHLCATfMl7 -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org