$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/itvvbl6mgHdsamlPzIJ7nStpDiw.roa File: itvvbl6mgHdsamlPzIJ7nStpDiw.roa (raw, json) Hash identifier: 72g8OHjxJSjFWFuk5tBUoCM5cLPip7XY7qohvMV3hkE= Subject key identifier: 8A:DB:EF:6E:5E:A6:80:77:6C:6A:69:4F:CC:82:7B:9D:2B:69:0E:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27BF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/itvvbl6mgHdsamlPzIJ7nStpDiw.roa Signing time: Fri 01 Sep 2023 10:04:29 +0000 ROA not before: Fri 01 Sep 2023 10:04:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10175 (0x27bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8ADBEF6E5EA680776C6A694FCC827B9D2B690E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:af:84:e0:f6:11:d4:c0:00:2a:7a:65:de: a7:d8:60:67:0f:b0:6c:10:f0:27:e3:f1:fd:15:02: 4c:f1:5a:da:a6:1b:ad:66:99:48:aa:d7:82:69:a7: 20:28:52:b6:c4:b2:7b:ee:d5:cd:2e:e9:9c:55:91: b1:0f:d4:ba:1b:79:96:9f:14:a7:7d:29:26:30:7c: b8:e7:df:a8:71:7b:dd:7e:08:77:06:98:62:70:b9: c6:a7:e3:a3:8e:2d:f3:8e:ec:90:ce:b8:8f:41:bf: 24:c4:a5:b6:78:f9:99:e6:d6:e3:bc:91:07:01:bd: bf:69:97:3d:ce:b0:04:c5:bc:dd:cd:a2:e5:bc:5b: 05:70:f9:48:cd:78:49:aa:cd:8d:a4:64:cb:1b:5f: 5c:bd:1f:fc:bd:ef:ca:80:fa:2c:24:e0:ef:b2:f4: 04:47:25:34:eb:73:32:64:41:6c:83:bc:07:04:ca: 14:fd:cc:35:89:d3:5f:86:1c:cd:dc:75:8e:c2:c8: 23:98:16:37:d1:4b:67:e2:c1:65:78:9f:62:67:78: a4:4d:77:61:ed:5c:8e:75:51:ab:f5:2c:28:03:d8: 93:8d:9d:84:0e:bf:40:eb:1e:b4:38:a0:f5:3f:59: 2a:25:3f:dc:75:a3:06:2b:c4:1c:4f:ac:bb:8e:ec: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DB:EF:6E:5E:A6:80:77:6C:6A:69:4F:CC:82:7B:9D:2B:69:0E:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/itvvbl6mgHdsamlPzIJ7nStpDiw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:93:e2:9c:07:ef:e0:f2:99:5f:46:57:92:f7:82:af:84:9c: 12:9a:b0:1a:b6:8c:3b:35:da:7b:b6:ce:0a:79:68:ad:7f:21: a7:aa:67:a7:a1:6d:d4:ec:e7:a2:55:3c:7a:74:b6:94:42:98: f7:46:bc:99:c3:03:b1:15:a6:0a:58:a3:75:37:21:0a:76:51: 84:fd:25:9d:d4:9d:72:02:46:d3:e2:83:f1:ea:02:c0:f7:8b: a2:ad:8b:2b:1a:20:20:28:da:64:8e:d2:c9:99:44:05:b7:92: 2e:27:4c:d6:4e:77:3f:aa:5e:26:a3:d4:f9:82:29:da:50:8c: 33:fd:45:27:ff:d8:45:1e:2c:7c:a8:c2:55:02:5c:0d:ae:62: 33:2c:68:e8:92:1d:bb:6b:19:43:a2:5c:26:4f:64:e7:ef:7c: 65:ac:83:37:11:91:0e:da:a5:01:45:1c:97:3b:8a:32:7e:90: 2d:20:75:f0:a4:b0:5f:e1:7a:a7:b5:a1:25:d8:dc:e7:52:85: ff:90:49:e3:34:c0:c3:34:57:92:9b:39:aa:ac:b2:8d:41:08: c3:c1:c2:be:d4:f9:3a:28:65:5e:7f:a4:ed:e5:09:70:52:1d: 5a:78:93:58:d5:ee:89:11:cf:65:9b:c0:0d:ff:1b:5e:de:71: 7c:51:39:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhBREJFRjZFNUVBNjgw Nzc2QzZBNjk0RkNDODI3QjlEMkI2OTBFMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdHq+E4PYR1MAAKnpl3qfYYGcPsGwQ8Cfj8f0VAkzxWtqmG61m mUiq14JppyAoUrbEsnvu1c0u6ZxVkbEP1LobeZafFKd9KSYwfLjn36hxe91+CHcG mGJwucan46OOLfOO7JDOuI9BvyTEpbZ4+Znm1uO8kQcBvb9plz3OsATFvN3NouW8 WwVw+UjNeEmqzY2kZMsbX1y9H/y978qA+iwk4O+y9ARHJTTrczJkQWyDvAcEyhT9 zDWJ01+GHM3cdY7CyCOYFjfRS2fiwWV4n2JneKRNd2HtXI51Uav1LCgD2JONnYQO v0DrHrQ4oPU/WSolP9x1owYrxBxPrLuO7CZ9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUitvvbl6mgHdsamlPzIJ7nStpDiwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2l0dnZibDZtZ0hkc2FtbFB6 SUo3blN0cERpdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwQwDQYJKoZIhvcNAQELBQADggEBAH2T4pwH7+DymV9GV5L3gq+EnBKasBq2jDs1 2nu2zgp5aK1/IaeqZ6ehbdTs56JVPHp0tpRCmPdGvJnDA7EVpgpYo3U3IQp2UYT9 JZ3UnXICRtPig/HqAsD3i6KtiysaICAo2mSO0smZRAW3ki4nTNZOdz+qXiaj1PmC KdpQjDP9RSf/2EUeLHyowlUCXA2uYjMsaOiSHbtrGUOiXCZPZOfvfGWsgzcRkQ7a pQFFHJc7ijJ+kC0gdfCksF/heqe1oSXY3OdShf+QSeM0wMM0V5KbOaqsso1BCMPB wr7U+TooZV5/pO3lCXBSHVp4k1jV7okRz2WbwA3/G17ecXxROXc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org