$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggOF95v_KRsdNUR02K-GVKJvlDM.roa File: ggOF95v_KRsdNUR02K-GVKJvlDM.roa (raw, json) Hash identifier: VqbB1UDlOblHr/bvjWZosL7UEAQg3KsZJBk9PTekv1w= Subject key identifier: 82:03:85:F7:9B:FF:29:1B:1D:35:44:74:D8:AF:86:54:A2:6F:94:33 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A88 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggOF95v_KRsdNUR02K-GVKJvlDM.roa Signing time: Fri 01 Sep 2023 10:08:01 +0000 ROA not before: Fri 01 Sep 2023 10:08:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.144.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10888 (0x2a88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=820385F79BFF291B1D354474D8AF8654A26F9433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:24:e4:de:cd:fd:15:7e:a3:1b:33:46:cf: a2:09:d2:e7:c2:84:12:a5:a2:94:de:3e:13:c1:55: a1:1a:5a:26:b1:6b:3e:03:a1:42:8a:f5:10:ed:eb: 16:a1:75:27:b6:9f:93:6a:77:a6:4a:c8:cc:c8:03: ca:e0:c1:bf:44:30:da:b9:34:24:08:c5:3d:4a:75: a7:ed:59:b9:66:e7:fb:4b:f4:44:93:95:5f:d6:32: ad:c8:09:22:32:22:8e:14:81:41:a9:ee:1e:f8:a1: a0:26:98:59:fc:73:b9:88:4f:ad:ed:f7:7a:2f:38: 36:a2:2e:5e:ef:18:ca:7b:bb:dd:a1:0c:5f:86:ed: 14:13:e9:6c:39:0d:83:13:6a:60:49:8b:a5:c6:cb: 46:8a:5f:72:3d:4f:53:1b:52:da:eb:22:98:03:ec: 4c:a1:f8:ee:6c:62:66:f3:5c:51:0b:b1:66:f0:27: 09:3e:a4:45:4f:61:0a:f1:fb:d0:ca:1b:b7:52:29: 6f:29:98:83:d4:c5:dc:67:00:c2:fc:9b:c8:e8:42: 27:64:94:90:a6:48:bf:7f:75:62:2f:33:02:74:01: db:37:4e:f9:6e:55:bb:ca:02:b3:7c:1a:03:9e:bf: 57:e8:b9:aa:6d:73:15:dc:47:9a:f4:02:9e:ac:2f: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:03:85:F7:9B:FF:29:1B:1D:35:44:74:D8:AF:86:54:A2:6F:94:33 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggOF95v_KRsdNUR02K-GVKJvlDM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.128/26 Signature Algorithm: sha256WithRSAEncryption 44:a3:e5:73:f6:a8:88:ac:61:9d:ab:04:ed:e6:78:de:cc:09: 7d:df:c8:6d:0b:36:b1:f5:34:f5:9d:d0:76:39:1b:90:09:b7: 66:dc:39:bf:1c:c0:28:89:59:8f:12:49:de:66:10:da:72:d2: 1b:ac:cc:79:06:b9:0b:c1:24:7a:16:47:eb:1a:36:4c:9e:44: 6a:9e:86:69:db:40:40:b3:50:3f:a0:de:49:38:4b:7f:ab:31: 6e:40:ef:f3:b6:21:21:ac:3b:65:7f:cf:09:53:4b:d6:2a:73: a3:60:17:1a:62:72:21:11:9b:74:a5:11:8e:b8:3f:68:34:5f: 1b:8f:c9:2e:2a:30:b4:4d:05:22:88:46:c8:53:6f:43:53:88: ac:67:cf:38:43:13:bf:87:a1:23:2e:9b:95:6c:e8:5d:6d:ad: 6f:d5:58:b2:92:d0:fa:85:5a:de:df:a0:dc:30:95:ad:3b:24: d8:4d:23:6c:3e:3f:b4:75:cb:f2:71:dd:6d:69:b2:ab:ea:fe: d9:18:d5:52:b3:4f:bd:26:60:52:73:64:63:c9:78:64:b2:70: 6d:70:9b:4b:75:21:4a:19:ff:c3:20:4e:0b:e7:9f:7e:5b:7d: bd:67:b2:09:44:90:1e:7f:54:73:b2:8f:36:c5:de:88:61:25: 15:86:a7:f8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgyMDM4NUY3OUJGRjI5 MUIxRDM1NDQ3NEQ4QUY4NjU0QTI2Rjk0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmuiTk3s39FX6jGzNGz6IJ0ufChBKlopTePhPBVaEaWiaxaz4D oUKK9RDt6xahdSe2n5Nqd6ZKyMzIA8rgwb9EMNq5NCQIxT1KdaftWblm5/tL9EST lV/WMq3ICSIyIo4UgUGp7h74oaAmmFn8c7mIT63t93ovODaiLl7vGMp7u92hDF+G 7RQT6Ww5DYMTamBJi6XGy0aKX3I9T1MbUtrrIpgD7Eyh+O5sYmbzXFELsWbwJwk+ pEVPYQrx+9DKG7dSKW8pmIPUxdxnAML8m8joQidklJCmSL9/dWIvMwJ0Ads3Tvlu VbvKArN8GgOev1fouaptcxXcR5r0Ap6sL3UdAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUggOF95v/KRsdNUR02K+GVKJvlDMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dnT0Y5NXZfS1JzZE5VUjAy Sy1HVktKdmxETS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wJCAMA0GCSqGSIb3DQEBCwUAA4IBAQBEo+Vz9qiIrGGdqwTt5njezAl938htCzax 9TT1ndB2ORuQCbdm3Dm/HMAoiVmPEkneZhDactIbrMx5BrkLwSR6FkfrGjZMnkRq noZp20BAs1A/oN5JOEt/qzFuQO/ztiEhrDtlf88JU0vWKnOjYBcaYnIhEZt0pRGO uD9oNF8bj8kuKjC0TQUiiEbIU29DU4isZ884QxO/h6EjLpuVbOhdba1v1ViyktD6 hVre36DcMJWtOyTYTSNsPj+0dcvycd1tabKr6v7ZGNVSs0+9JmBSc2RjyXhksnBt cJtLdSFKGf/DIE4L559+W329Z7IJRJAef1Rzso82xd6IYSUVhqf4 -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org