$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa File: i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa (raw, json) Hash identifier: hetllYOqpWhtLlhaqUhFpSKM9ieQcWKBB1YfrYPOKmQ= Subject key identifier: 8B:DB:F5:CD:FF:4B:0C:41:C6:4B:A0:11:66:54:50:3B:11:04:37:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2862 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa Signing time: Fri 01 Sep 2023 10:05:17 +0000 ROA not before: Fri 01 Sep 2023 10:05:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10338 (0x2862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8BDBF5CDFF4B0C41C64BA0116654503B110437B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:dc:f4:5f:ba:91:b3:af:e5:02:fd:14:9b: 83:3d:78:84:81:0a:48:dc:c3:a1:2b:62:14:4f:77: 0d:13:04:d2:72:b8:f9:16:3c:4c:4a:66:ec:5a:df: 1a:86:b4:c0:fe:86:3a:de:c4:e7:8d:fb:86:ad:68: 05:33:6a:bc:df:c5:4c:a2:47:5b:ad:f3:3c:36:0c: 3f:05:a2:85:ee:c1:d8:29:7e:ce:52:e4:e5:f3:51: f9:38:e0:14:f8:27:66:d2:2f:2e:ed:5c:ac:fd:1f: 18:70:9d:9f:19:09:5e:79:16:32:3a:c4:bb:06:2e: 70:f8:a3:74:d2:5a:db:fb:87:10:0c:5f:86:d6:7f: dc:7f:88:59:b2:66:3e:f1:bb:44:66:96:c6:81:92: 24:d4:73:87:2d:12:f6:50:a0:8a:ad:ee:79:60:93: 18:f4:b4:7e:33:6d:a5:88:4e:3c:7f:b8:26:97:0a: 2b:f5:dd:5b:2e:af:87:49:2e:23:0c:df:12:03:e7: a0:c0:31:64:fb:58:c1:9e:4f:4c:4a:dc:45:6e:95: 88:59:e4:c2:a6:13:2a:ab:7c:d3:ca:4f:05:74:17: 8c:0a:6f:25:53:cd:33:23:64:ee:6e:b2:8b:8a:a0: e3:df:94:9f:de:f4:56:03:d1:f9:38:39:a4:57:0c: e4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DB:F5:CD:FF:4B:0C:41:C6:4B:A0:11:66:54:50:3B:11:04:37:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.220.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:de:9f:89:39:04:dd:a3:c8:29:00:c8:d4:42:fe:81:22:99: 31:c7:88:e4:bd:13:6e:4b:fc:c3:44:71:b8:83:2c:a1:ae:e1: 34:cc:e0:0a:c6:26:5f:95:c1:c1:cc:c7:e9:53:f1:0d:85:95: a4:e6:03:08:fa:ba:1a:60:d0:a2:18:07:a0:0c:7f:34:ff:5f: 69:5c:fe:12:fd:ff:86:ee:c9:aa:33:57:80:0f:19:99:9a:00: 3e:8c:84:80:bd:31:b3:ac:d7:9a:3c:41:36:ca:8d:12:28:24: 52:20:0b:a3:57:16:33:21:7c:20:17:05:02:07:e9:ef:13:e3: c2:ad:a9:45:cf:30:5a:9e:cb:8d:0f:32:c8:3d:3b:da:c6:67: 25:3b:a2:00:fd:f4:15:f0:ef:8c:17:be:1b:50:62:3d:e0:0c: 6d:f4:5d:29:3e:ec:9c:f7:7f:11:b6:37:c5:bd:b7:f3:78:c4: 03:32:00:b5:e7:29:f8:61:90:2d:2d:dd:c4:c5:f2:e5:9e:30: 5f:2a:58:68:57:4b:8d:ac:e1:e0:d3:9c:e6:f3:b0:3d:9d:4a: 94:2f:14:c5:eb:b7:68:c1:d4:fa:f6:a6:7e:71:de:e5:99:8a: e9:41:d8:64:cd:04:3d:a8:16:5f:f9:74:e2:d4:23:ca:cd:f6: 8a:08:f9:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCREJGNUNERkY0QjBD NDFDNjRCQTAxMTY2NTQ1MDNCMTEwNDM3QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmwNz0X7qRs6/lAv0Um4M9eISBCkjcw6ErYhRPdw0TBNJyuPkW PExKZuxa3xqGtMD+hjrexOeN+4ataAUzarzfxUyiR1ut8zw2DD8FooXuwdgpfs5S 5OXzUfk44BT4J2bSLy7tXKz9HxhwnZ8ZCV55FjI6xLsGLnD4o3TSWtv7hxAMX4bW f9x/iFmyZj7xu0RmlsaBkiTUc4ctEvZQoIqt7nlgkxj0tH4zbaWITjx/uCaXCiv1 3Vsur4dJLiMM3xID56DAMWT7WMGeT0xK3EVulYhZ5MKmEyqrfNPKTwV0F4wKbyVT zTMjZO5usouKoOPflJ/e9FYD0fk4OaRXDOQFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUi9v1zf9LDEHGS6ARZlRQOxEEN7kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2k5djF6ZjlMREVIR1M2QVJa bFJRT3hFRU43ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wNwwDQYJKoZIhvcNAQELBQADggEBAHzen4k5BN2jyCkAyNRC/oEimTHHiOS9E25L /MNEcbiDLKGu4TTM4ArGJl+VwcHMx+lT8Q2FlaTmAwj6uhpg0KIYB6AMfzT/X2lc /hL9/4buyaozV4APGZmaAD6MhIC9MbOs15o8QTbKjRIoJFIgC6NXFjMhfCAXBQIH 6e8T48KtqUXPMFqey40PMsg9O9rGZyU7ogD99BXw74wXvhtQYj3gDG30XSk+7Jz3 fxG2N8W9t/N4xAMyALXnKfhhkC0t3cTF8uWeMF8qWGhXS42s4eDTnObzsD2dSpQv FMXrt2jB1Pr2pn5x3uWZiulB2GTNBD2oFl/5dOLUI8rN9ooI+bI= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org