$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa File: hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa (raw, json) Hash identifier: SvYW5kcdPQnPsD3HQA0OscvNbuHgMjNff+yRe81vzZw= Subject key identifier: 85:36:81:11:7E:E9:70:0E:94:1B:E5:E7:CF:28:CE:E3:1F:C9:06:E4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28F0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa Signing time: Fri 01 Sep 2023 10:05:57 +0000 ROA not before: Fri 01 Sep 2023 10:05:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.111.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10480 (0x28f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=853681117EE9700E941BE5E7CF28CEE31FC906E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:75:20:f7:63:1c:18:dc:8c:3d:d6:51:5e: a4:3c:05:0b:aa:72:50:97:b1:5e:e9:b7:c3:bf:a3: 5c:9e:0d:d7:c2:36:5e:e3:52:2b:74:bd:a9:05:76: d2:0b:d6:f2:3e:3c:88:88:86:30:25:06:0e:26:02: b9:c0:32:bf:5c:ed:09:51:27:ea:6d:42:ce:79:6d: 07:71:5a:64:7b:a8:4e:2c:94:f6:24:ef:9d:e7:7d: 72:f2:80:37:0f:0d:f3:35:93:93:04:59:e1:c6:83: c3:14:01:35:f8:79:26:53:a6:85:7c:56:db:a0:71: fa:42:a1:dc:fd:fe:e4:76:74:15:4c:6e:69:6d:65: 6f:55:f9:20:19:fa:18:c1:0a:e0:0f:b0:62:6a:05: 2c:c6:74:c8:31:84:a5:96:de:05:14:c1:45:66:00: 3d:f6:b8:ec:a6:c2:e7:74:01:35:cf:83:d8:27:54: 5a:06:01:9a:d0:d7:19:20:1f:f0:a7:ba:5e:ab:2c: 87:e9:53:3b:38:66:6e:e3:13:fd:81:65:65:da:6d: 0d:55:10:3f:2b:c4:a6:da:60:12:35:96:1d:5f:d7: 3a:0c:03:0f:47:bf:9a:c9:aa:73:2e:10:82:aa:46: 80:70:ce:dd:6b:6c:14:07:0e:cd:2e:ee:28:ad:0e: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:36:81:11:7E:E9:70:0E:94:1B:E5:E7:CF:28:CE:E3:1F:C9:06:E4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.111.192/28 Signature Algorithm: sha256WithRSAEncryption 1e:6a:f0:df:46:fa:4d:89:c7:63:98:76:08:88:ba:d7:9a:91: 46:f7:be:32:08:91:8b:b6:4a:2a:c4:f2:51:dc:f6:80:70:34: 61:bc:28:d4:10:13:97:c4:94:80:8b:f9:d1:28:48:dd:b8:30: 61:c5:d5:19:39:40:52:73:d5:02:70:05:e9:59:13:8d:29:36: d9:8d:1a:f7:6f:d8:0b:53:a2:66:a5:14:67:b7:0a:8e:04:86: 7e:0f:ca:78:ba:b6:8f:a9:22:85:54:3e:f2:cd:45:1e:be:80: 70:96:6d:5d:bf:ce:f7:7b:ec:40:12:4a:67:be:a8:42:66:2c: 72:d4:8c:5b:44:96:9c:90:62:df:66:f5:ce:41:85:ed:8f:8b: 97:0f:e5:9c:fa:b1:5f:05:6a:3f:61:1c:f6:e7:ba:a7:05:0d: 48:34:fa:a2:7c:73:d2:03:31:21:0e:df:eb:11:a1:13:9e:42: 7f:f9:33:50:63:81:70:0e:b5:fd:0d:37:51:dc:57:90:45:28: 37:13:c1:8c:e9:7f:cf:b7:90:c6:c7:7d:01:fc:62:9c:3c:c0: e9:03:8d:0e:af:2e:cc:44:9d:5f:ef:1c:f0:b2:27:ab:ee:bd: 7a:ee:87:f1:13:ad:8e:19:05:67:62:62:cd:c6:62:fe:9a:53: 63:47:cb:9e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg1MzY4MTExN0VFOTcw MEU5NDFCRTVFN0NGMjhDRUUzMUZDOTA2RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzTHUg92McGNyMPdZRXqQ8BQuqclCXsV7pt8O/o1yeDdfCNl7j Uit0vakFdtIL1vI+PIiIhjAlBg4mArnAMr9c7QlRJ+ptQs55bQdxWmR7qE4slPYk 753nfXLygDcPDfM1k5MEWeHGg8MUATX4eSZTpoV8VtugcfpCodz9/uR2dBVMbmlt ZW9V+SAZ+hjBCuAPsGJqBSzGdMgxhKWW3gUUwUVmAD32uOymwud0ATXPg9gnVFoG AZrQ1xkgH/Cnul6rLIfpUzs4Zm7jE/2BZWXabQ1VED8rxKbaYBI1lh1f1zoMAw9H v5rJqnMuEIKqRoBwzt1rbBQHDs0u7iitDloXAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUhTaBEX7pcA6UG+XnzyjO4x/JBuQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hUYUJFWDdwY0E2VUctWG56 eWpPNHhfSkJ1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7 wW/AMA0GCSqGSIb3DQEBCwUAA4IBAQAeavDfRvpNicdjmHYIiLrXmpFG974yCJGL tkoqxPJR3PaAcDRhvCjUEBOXxJSAi/nRKEjduDBhxdUZOUBSc9UCcAXpWRONKTbZ jRr3b9gLU6JmpRRntwqOBIZ+D8p4uraPqSKFVD7yzUUevoBwlm1dv873e+xAEkpn vqhCZixy1IxbRJackGLfZvXOQYXtj4uXD+Wc+rFfBWo/YRz257qnBQ1INPqifHPS AzEhDt/rEaETnkJ/+TNQY4FwDrX9DTdR3FeQRSg3E8GM6X/Pt5DGx30B/GKcPMDp A40Ory7MRJ1f7xzwsier7r167ofxE62OGQVnYmLNxmL+mlNjR8ue -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org