$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqvPFn43-p12HL_crZNTptpVJnU.roa File: iqvPFn43-p12HL_crZNTptpVJnU.roa (raw, json) Hash identifier: Gs0ambZaq5xg8wnazACYQd51ez7VZWhH+HyvfuNgk+g= Subject key identifier: 8A:AB:CF:16:7E:37:FA:9D:76:1C:BF:DC:AD:93:53:A6:DA:55:26:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2939 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqvPFn43-p12HL_crZNTptpVJnU.roa Signing time: Fri 01 Sep 2023 10:06:17 +0000 ROA not before: Fri 01 Sep 2023 10:06:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10553 (0x2939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8AABCF167E37FA9D761CBFDCAD9353A6DA552675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:c0:d2:ac:a9:d0:09:77:4a:c2:9d:3c:be: 93:eb:46:1d:29:aa:01:9a:d2:dd:b9:1d:05:f9:c0: 65:8e:ba:0c:b3:2b:4a:cf:f8:79:9b:7b:e4:b9:3f: 8a:65:27:79:bf:22:3d:50:78:ae:fe:a4:61:df:73: 68:32:09:c4:49:3d:e9:11:76:55:0c:b2:34:f4:1a: f2:14:d1:95:53:26:13:81:dc:95:8c:83:21:e7:e0: 06:5e:ba:7a:81:84:b4:5e:f6:f1:11:e0:82:1c:b7: 21:ef:4e:68:09:fb:99:1c:30:f0:77:ab:28:86:2f: 75:c9:a4:30:45:d3:ef:8d:50:53:46:22:29:4d:7f: 32:50:b1:59:e0:9b:12:e8:c5:bb:32:63:2a:7b:2c: b8:fb:43:f6:76:b9:a7:73:95:27:d0:90:80:48:8d: 11:56:48:95:36:1c:27:d3:88:77:01:07:86:00:62: bf:6a:bf:12:71:73:f0:d2:99:54:78:96:90:b3:f6: 9c:12:c9:5e:54:5c:65:49:ca:c3:ac:9b:ab:a0:ab: a1:0a:74:ab:eb:89:18:20:6d:56:17:7e:98:95:6f: d2:59:db:e6:b9:7b:2e:89:bf:69:32:44:cb:25:41: 2f:66:bc:81:a6:28:91:d6:5e:23:7a:4b:11:ea:f3: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AB:CF:16:7E:37:FA:9D:76:1C:BF:DC:AD:93:53:A6:DA:55:26:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqvPFn43-p12HL_crZNTptpVJnU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.32.0/22 Signature Algorithm: sha256WithRSAEncryption 19:04:a7:a4:84:49:b0:b6:90:cd:2c:07:f0:b7:c2:37:be:de: 0d:02:84:76:cf:f0:9d:34:f4:60:b9:c1:1a:73:82:03:c8:4c: 3e:a0:88:50:14:cc:98:cb:04:c7:f7:e1:8c:26:b0:ed:cb:48: 46:fd:96:7c:e9:94:01:01:fb:18:df:42:79:e7:71:c0:0c:cd: 41:cf:18:7d:55:86:f8:48:85:1f:d1:13:09:73:4e:65:87:04: 00:d5:4e:45:2f:b2:14:85:d3:91:4a:af:22:ca:0e:7d:db:e6: 02:29:a9:fc:f6:7a:32:3c:3a:a2:69:9a:7c:b6:09:1a:dd:bb: 9d:9f:d6:df:e4:f4:7d:52:dd:1f:f1:b4:b2:3c:9e:6f:73:29: 74:1f:9c:7e:c8:ab:06:5d:b8:60:4c:0f:c2:db:8f:e1:6b:63: 40:dd:85:c1:1e:2a:a0:6c:42:2a:fc:59:4b:84:aa:8f:29:f3: a7:64:b7:bc:82:78:a9:aa:1a:56:95:9e:49:c6:5f:c1:cb:c9: ea:7e:03:35:d1:c2:db:62:87:fd:a6:7b:e9:b8:ae:87:e7:68: 57:95:98:07:5a:2b:d1:4e:e0:dd:f3:be:9c:00:19:1a:dc:f3: 60:8c:de:2c:a5:15:1f:d9:29:97:29:5d:0a:93:29:21:64:bd: c8:e2:9d:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhBQUJDRjE2N0UzN0ZB OUQ3NjFDQkZEQ0FEOTM1M0E2REE1NTI2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+M8DSrKnQCXdKwp08vpPrRh0pqgGa0t25HQX5wGWOugyzK0rP +Hmbe+S5P4plJ3m/Ij1QeK7+pGHfc2gyCcRJPekRdlUMsjT0GvIU0ZVTJhOB3JWM gyHn4AZeunqBhLRe9vER4IIctyHvTmgJ+5kcMPB3qyiGL3XJpDBF0++NUFNGIilN fzJQsVngmxLoxbsyYyp7LLj7Q/Z2uadzlSfQkIBIjRFWSJU2HCfTiHcBB4YAYr9q vxJxc/DSmVR4lpCz9pwSyV5UXGVJysOsm6ugq6EKdKvriRggbVYXfpiVb9JZ2+a5 ey6Jv2kyRMslQS9mvIGmKJHWXiN6SxHq82gRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiqvPFn43+p12HL/crZNTptpVJnUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lxdlBGbjQzLXAxMkhMX2Ny Wk5UcHRwVkpuVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wiAwDQYJKoZIhvcNAQELBQADggEBABkEp6SESbC2kM0sB/C3wje+3g0ChHbP8J00 9GC5wRpzggPITD6giFAUzJjLBMf34YwmsO3LSEb9lnzplAEB+xjfQnnnccAMzUHP GH1VhvhIhR/REwlzTmWHBADVTkUvshSF05FKryLKDn3b5gIpqfz2ejI8OqJpmny2 CRrdu52f1t/k9H1S3R/xtLI8nm9zKXQfnH7IqwZduGBMD8Lbj+FrY0DdhcEeKqBs Qir8WUuEqo8p86dkt7yCeKmqGlaVnknGX8HLyep+AzXRwttih/2me+m4rofnaFeV mAdaK9FO4N3zvpwAGRrc82CM3iylFR/ZKZcpXQqTKSFkvcjinVM= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:59 2024 by rpki-client on console-ams.rpki-client.org