$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIaRD1xLMdOiAcV12l_LfwYlDi4.roa File: jIaRD1xLMdOiAcV12l_LfwYlDi4.roa (raw, json) Hash identifier: NQqYcb86CrOYC3Dj3xY0y8qBE3n4r1TNRFjt1fHf63U= Subject key identifier: 8C:86:91:0F:5C:4B:31:D3:A2:01:C5:75:DA:5F:CB:7F:06:25:0E:2E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2ADA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIaRD1xLMdOiAcV12l_LfwYlDi4.roa Signing time: Fri 01 Sep 2023 10:08:21 +0000 ROA not before: Fri 01 Sep 2023 10:08:21 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10970 (0x2ada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:21 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8C86910F5C4B31D3A201C575DA5FCB7F06250E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:e6:52:c8:71:ef:6f:99:d1:cd:a3:bb:5e: 00:28:2a:af:b9:09:8d:0b:d3:44:c3:46:5d:7b:6f: 53:bf:f5:0f:15:88:0e:f1:2d:e9:1d:81:b7:59:8d: 23:f6:b9:1a:c1:02:4a:f5:24:f8:95:f0:50:fc:5d: c2:9c:1b:bd:c7:91:e2:6c:a5:45:83:41:53:9f:98: 05:5c:bb:0a:ce:2b:8e:af:f4:4b:58:11:1e:38:3e: 71:56:85:3f:bd:5a:72:9c:8e:6a:db:0a:55:da:0b: 2f:aa:f7:16:fd:7c:08:d1:1f:a9:2d:86:97:53:bf: 03:bb:c3:24:c2:cd:ba:31:45:af:a6:02:7a:4b:25: a2:cb:f9:f9:b3:12:62:8f:4c:79:a2:a6:23:2a:e2: f2:6c:ec:a4:9b:11:71:2e:29:b6:55:49:2b:43:6e: d9:0c:7b:c5:65:28:27:78:f9:1d:40:55:e2:d0:31: ee:c9:b3:df:56:ff:a6:45:93:c3:de:5f:32:d1:62: 95:d5:da:a1:50:c6:4e:df:c0:6f:8c:aa:34:e7:53: d3:99:32:c3:ec:08:3f:19:45:9f:b5:9a:64:09:df: 1d:fd:5f:44:44:9d:03:9d:03:dd:3e:34:c7:76:b9: 23:08:90:d5:a6:46:99:29:9d:85:5a:df:4e:27:f4: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:86:91:0F:5C:4B:31:D3:A2:01:C5:75:DA:5F:CB:7F:06:25:0E:2E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIaRD1xLMdOiAcV12l_LfwYlDi4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.196.0/22 Signature Algorithm: sha256WithRSAEncryption 34:53:f5:cd:42:44:30:99:76:2e:2e:35:25:20:78:de:ae:06: 01:dd:b5:9d:fa:0c:d2:fd:71:08:5d:8b:ec:a0:73:30:7f:a8: 91:10:96:c0:dc:7a:84:08:50:f1:23:2a:6b:48:59:74:ec:d7: a9:b9:b6:b4:f5:f0:70:7f:1e:5e:c8:9f:85:8b:13:2f:6e:aa: 14:04:af:2b:15:a5:c2:cc:bb:04:d6:a7:65:61:a3:8d:0a:1e: ea:ad:7f:80:c2:cf:33:fe:7c:1f:ec:2c:8c:85:99:00:43:c2: 4a:f9:10:51:78:8a:79:0e:f8:20:36:7b:eb:44:e3:3f:d7:5b: 3c:5a:aa:d9:42:c8:2e:ab:f3:49:d2:eb:a6:d6:1e:c9:f0:4c: da:12:44:40:ae:f2:80:22:0f:24:72:de:11:46:61:07:fd:36: 37:18:ec:6f:50:c9:b9:d6:9a:5b:be:ec:11:7f:61:c4:7e:f2: 36:02:22:13:11:62:b7:e9:65:47:18:08:bb:9d:8f:10:b7:36: 98:af:f4:3d:45:ff:8b:4f:1e:c3:46:ca:d8:a5:12:fc:90:d7: c6:6e:91:23:6c:ec:75:0a:b0:a7:2a:76:40:4e:b9:83:ed:c6: 9a:cd:d7:b1:7c:6d:66:58:58:b3:f7:a9:35:24:4c:72:a4:9a: 70:3e:95:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhDODY5MTBGNUM0QjMx RDNBMjAxQzU3NURBNUZDQjdGMDYyNTBFMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVkeZSyHHvb5nRzaO7XgAoKq+5CY0L00TDRl17b1O/9Q8ViA7x LekdgbdZjSP2uRrBAkr1JPiV8FD8XcKcG73HkeJspUWDQVOfmAVcuwrOK46v9EtY ER44PnFWhT+9WnKcjmrbClXaCy+q9xb9fAjRH6kthpdTvwO7wyTCzboxRa+mAnpL JaLL+fmzEmKPTHmipiMq4vJs7KSbEXEuKbZVSStDbtkMe8VlKCd4+R1AVeLQMe7J s99W/6ZFk8PeXzLRYpXV2qFQxk7fwG+MqjTnU9OZMsPsCD8ZRZ+1mmQJ3x39X0RE nQOdA90+NMd2uSMIkNWmRpkpnYVa304n9Fu3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjIaRD1xLMdOiAcV12l/LfwYlDi4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pJYVJEMXhMTWRPaUFjVjEy bF9MZndZbERpNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wsQwDQYJKoZIhvcNAQELBQADggEBADRT9c1CRDCZdi4uNSUgeN6uBgHdtZ36DNL9 cQhdi+ygczB/qJEQlsDceoQIUPEjKmtIWXTs16m5trT18HB/Hl7In4WLEy9uqhQE rysVpcLMuwTWp2Vho40KHuqtf4DCzzP+fB/sLIyFmQBDwkr5EFF4inkO+CA2e+tE 4z/XWzxaqtlCyC6r80nS66bWHsnwTNoSRECu8oAiDyRy3hFGYQf9NjcY7G9QybnW mlu+7BF/YcR+8jYCIhMRYrfpZUcYCLudjxC3Npiv9D1F/4tPHsNGytilEvyQ18Zu kSNs7HUKsKcqdkBOuYPtxprN17F8bWZYWLP3qTUkTHKkmnA+lXo= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org