$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa File: hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa (raw, json) Hash identifier: wdGooBt2YOANh+Py6je86u6JAsS8WuBIlUwWamuBqSM= Subject key identifier: 85:03:F8:BF:50:59:18:DA:5E:F1:EE:B3:21:73:37:45:3B:D9:D2:B5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29EC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa Signing time: Fri 01 Sep 2023 10:07:15 +0000 ROA not before: Fri 01 Sep 2023 10:07:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.0.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10732 (0x29ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8503F8BF505918DA5EF1EEB3217337453BD9D2B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:da:a0:d4:3e:49:41:b1:d0:8d:b6:ca:19: 49:9f:80:c6:8a:d3:da:24:de:28:8a:34:d7:ea:cc: 98:ae:62:47:3e:f1:fd:f7:52:ef:a8:f9:66:9c:4b: 58:18:94:ac:d9:51:64:3f:4a:8c:16:18:f8:d5:d1: ad:d8:7a:70:65:a2:51:85:91:c5:13:4a:04:c1:06: e5:dd:f2:58:5e:c7:cd:bc:22:2d:03:eb:8e:23:3a: 93:49:43:e4:72:dc:6a:9b:4b:8c:4d:11:03:7a:76: e6:59:80:47:6f:6f:ca:b7:8d:51:5d:6f:61:91:e8: b0:8d:59:68:5c:f3:c6:61:3c:f4:d9:91:7e:5d:16: 4d:68:5b:f5:d1:6d:88:a3:f2:85:f4:01:41:79:0a: d3:56:5a:54:13:ac:57:8c:b2:55:68:8e:e5:50:23: 46:e8:0b:81:43:75:25:54:15:14:49:c4:e4:0f:84: 9f:d1:06:d5:b8:1d:61:2f:b6:66:b9:14:d3:44:96: 95:e4:a5:09:ef:70:c5:a0:ce:dc:5a:e2:5b:3a:e9: 59:67:49:7e:9d:a9:bd:5b:98:4c:92:9c:85:5d:15: 41:fd:ae:ad:02:bf:5a:7c:90:f5:9d:02:ca:42:0b: cd:3f:1b:41:61:7c:08:1e:2d:45:da:13:72:26:97: 28:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:03:F8:BF:50:59:18:DA:5E:F1:EE:B3:21:73:37:45:3B:D9:D2:B5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.0.0/20 Signature Algorithm: sha256WithRSAEncryption b4:c6:fc:b2:7a:ff:ca:1d:01:7e:86:e4:b8:8e:5c:00:b2:89: 4a:ac:e4:cc:b1:d0:8f:9d:1e:7d:02:08:94:ba:8c:e3:9c:ea: 41:1d:62:bf:76:28:63:6f:7a:25:af:bd:0a:a5:9a:2e:2e:e6: 04:4a:31:aa:20:8c:90:5e:06:d4:0f:2a:b9:f2:a0:16:7a:33: 84:c1:f8:41:ed:1b:29:50:4e:c7:1d:dd:e0:81:a2:a1:84:bc: 0b:95:56:c2:15:53:6f:55:73:89:d4:7e:9e:d1:24:7f:7f:16: c1:a0:28:e8:de:4d:28:f3:39:24:a9:f0:63:b2:8a:dc:7b:d6: a5:db:c2:1c:fe:b3:50:71:72:2b:52:4c:33:66:5b:f0:59:5a: 6d:07:8d:ac:0d:96:6c:57:35:d8:17:85:8e:7d:46:8a:b2:05: 42:73:25:b4:a2:27:e8:51:9d:c3:5a:b5:c2:7f:44:d6:71:67: 7a:46:9b:80:47:b1:cd:52:a0:59:b8:b3:e9:49:ce:6e:84:ab: a1:37:2a:4e:58:74:e6:af:a5:52:ac:46:34:20:49:ac:94:f4: 68:72:4d:c1:16:d0:9e:24:69:07:a0:47:2b:23:13:60:2a:a8: d0:6d:94:90:cf:b0:39:9f:64:a4:80:b9:82:e9:0c:17:8c:e7: fc:d7:8b:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg1MDNGOEJGNTA1OTE4 REE1RUYxRUVCMzIxNzMzNzQ1M0JEOUQyQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLL9qg1D5JQbHQjbbKGUmfgMaK09ok3iiKNNfqzJiuYkc+8f33 Uu+o+WacS1gYlKzZUWQ/SowWGPjV0a3YenBlolGFkcUTSgTBBuXd8lhex828Ii0D 644jOpNJQ+Ry3GqbS4xNEQN6duZZgEdvb8q3jVFdb2GR6LCNWWhc88ZhPPTZkX5d Fk1oW/XRbYij8oX0AUF5CtNWWlQTrFeMslVojuVQI0boC4FDdSVUFRRJxOQPhJ/R BtW4HWEvtma5FNNElpXkpQnvcMWgztxa4ls66VlnSX6dqb1bmEySnIVdFUH9rq0C v1p8kPWdAspCC80/G0FhfAgeLUXaE3Imlyi3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhQP4v1BZGNpe8e6zIXM3RTvZ0rUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hRUDR2MUJaR05wZThlNnpJ WE0zUlR2WjByVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wgAwDQYJKoZIhvcNAQELBQADggEBALTG/LJ6/8odAX6G5LiOXACyiUqs5Myx0I+d Hn0CCJS6jOOc6kEdYr92KGNveiWvvQqlmi4u5gRKMaogjJBeBtQPKrnyoBZ6M4TB +EHtGylQTscd3eCBoqGEvAuVVsIVU29Vc4nUfp7RJH9/FsGgKOjeTSjzOSSp8GOy itx71qXbwhz+s1BxcitSTDNmW/BZWm0HjawNlmxXNdgXhY59RoqyBUJzJbSiJ+hR ncNatcJ/RNZxZ3pGm4BHsc1SoFm4s+lJzm6Eq6E3Kk5YdOavpVKsRjQgSayU9Ghy TcEW0J4kaQegRysjE2AqqNBtlJDPsDmfZKSAuYLpDBeM5/zXi6s= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org