$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4ml1t1oArXRaNizhb4QOViEqlI.roa File: i4ml1t1oArXRaNizhb4QOViEqlI.roa (raw, json) Hash identifier: sJAru8JRyiFtyy3Qyc0bUnhFguf0dAYw7sKy+f1CJZ0= Subject key identifier: 8B:89:A5:D6:DD:68:02:B5:D1:68:D8:B3:85:BE:10:39:58:84:AA:52 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2840 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4ml1t1oArXRaNizhb4QOViEqlI.roa Signing time: Fri 01 Sep 2023 10:05:08 +0000 ROA not before: Fri 01 Sep 2023 10:05:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10304 (0x2840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8B89A5D6DD6802B5D168D8B385BE10395884AA52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:da:8e:36:72:67:0c:42:ec:63:87:52:e1: d9:cc:53:b0:15:1e:00:97:ed:ff:14:4d:44:40:a6: f7:34:b3:26:08:e6:c6:af:2f:3a:2d:15:d3:89:59: b6:79:4a:b2:54:6a:9d:43:80:3f:75:0c:2a:36:c2: 09:69:81:51:0f:f7:89:d7:0b:67:4d:6a:db:59:73: 1a:3a:3b:05:aa:33:ff:7e:d8:84:a3:1e:f3:a3:6a: 21:19:c5:fb:1f:d7:0f:91:6a:1b:db:c4:97:b7:86: b3:b2:09:75:d0:9a:7c:a3:eb:82:e1:b5:a3:73:2c: 07:f7:31:48:df:1f:2a:b2:c7:56:45:b4:89:50:a4: 02:aa:44:d5:78:1a:24:9b:7d:0f:92:4f:14:ed:76: 19:24:96:6e:df:45:58:28:d3:4c:35:5f:44:8b:aa: c3:f6:70:79:ec:2f:18:c9:3f:07:80:f2:15:b9:28: ea:76:46:b8:a5:fb:33:19:6b:61:a3:66:3f:8c:43: 9a:11:a2:77:e3:65:0e:b5:dc:09:45:4b:d5:51:9f: a0:e7:df:22:5b:59:6d:87:76:57:41:ff:63:1c:ca: 72:a6:47:dd:b8:bc:82:f7:db:ad:f5:67:9c:60:35: 81:d6:ec:f3:d3:32:63:36:64:91:76:77:2e:ea:cd: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:89:A5:D6:DD:68:02:B5:D1:68:D8:B3:85:BE:10:39:58:84:AA:52 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4ml1t1oArXRaNizhb4QOViEqlI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.104.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:5c:da:a3:1d:ab:e8:fa:de:8e:e5:39:39:48:a3:ef:d2:e2: e4:ef:fe:46:15:f0:b6:36:29:6d:f0:b1:f0:65:ab:5c:c8:cf: 4f:5c:26:ff:e3:36:5d:37:36:4d:5b:1b:eb:a0:d4:91:22:85: 05:81:4b:77:28:6e:63:0b:45:e7:47:9a:a8:dc:0c:93:1e:4a: 0a:af:3b:18:78:f8:3b:ad:24:bf:b4:c6:f4:07:dc:fd:b2:65: eb:65:01:fd:a9:28:d0:b3:f0:ff:0e:fe:47:d0:91:62:c0:7f: 82:b5:55:65:a2:fd:50:db:6f:f5:3b:c0:f4:26:45:6a:b0:d2: 9c:f1:05:cc:34:cc:9e:06:a5:7b:92:73:e7:75:89:17:5a:7d: 4a:5d:7c:8e:91:cd:9b:ec:0d:40:2b:9e:92:a3:cc:3b:e7:68: c1:74:b6:f6:d6:fc:f2:9c:13:37:0d:fd:ea:ab:19:11:85:ef: 54:73:b9:f2:8d:e0:64:d1:8a:45:d9:ff:81:9c:d3:e6:2c:ed: ad:3f:5d:54:e6:f4:6a:d8:21:de:02:37:6a:af:b0:4b:d1:5c: 7e:71:2c:ce:b9:8b:d6:8d:71:b6:fe:9b:78:7b:88:af:ca:1b: 0e:17:e2:77:76:1b:5f:ce:b2:ac:27:31:ec:44:58:c2:94:62: 12:77:40:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCODlBNUQ2REQ2ODAy QjVEMTY4RDhCMzg1QkUxMDM5NTg4NEFBNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCT2NqONnJnDELsY4dS4dnMU7AVHgCX7f8UTURApvc0syYI5sav LzotFdOJWbZ5SrJUap1DgD91DCo2wglpgVEP94nXC2dNattZcxo6OwWqM/9+2ISj HvOjaiEZxfsf1w+RahvbxJe3hrOyCXXQmnyj64LhtaNzLAf3MUjfHyqyx1ZFtIlQ pAKqRNV4GiSbfQ+STxTtdhkklm7fRVgo00w1X0SLqsP2cHnsLxjJPweA8hW5KOp2 Rril+zMZa2GjZj+MQ5oRonfjZQ613AlFS9VRn6Dn3yJbWW2HdldB/2McynKmR924 vIL32631Z5xgNYHW7PPTMmM2ZJF2dy7qzTo3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUi4ml1t1oArXRaNizhb4QOViEqlIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2k0bWwxdDFvQXJYUmFOaXpo YjRRT1ZpRXFsSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wGgwDQYJKoZIhvcNAQELBQADggEBAC1c2qMdq+j63o7lOTlIo+/S4uTv/kYV8LY2 KW3wsfBlq1zIz09cJv/jNl03Nk1bG+ug1JEihQWBS3cobmMLRedHmqjcDJMeSgqv Oxh4+DutJL+0xvQH3P2yZetlAf2pKNCz8P8O/kfQkWLAf4K1VWWi/VDbb/U7wPQm RWqw0pzxBcw0zJ4GpXuSc+d1iRdafUpdfI6RzZvsDUArnpKjzDvnaMF0tvbW/PKc EzcN/eqrGRGF71RzufKN4GTRikXZ/4Gc0+Ys7a0/XVTm9GrYId4CN2qvsEvRXH5x LM65i9aNcbb+m3h7iK/KGw4X4nd2G1/OsqwnMexEWMKUYhJ3QHw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org