$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa File: jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa (raw, json) Hash identifier: bIXHQkNvB0yj4ScMBuG6aH/lHJECyvqZJgmJYVnjmHw= Subject key identifier: 8D:5E:30:35:0F:16:0F:40:BF:8D:73:30:89:67:FA:76:D7:0F:57:26 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A7B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa Signing time: Fri 01 Sep 2023 10:07:57 +0000 ROA not before: Fri 01 Sep 2023 10:07:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10875 (0x2a7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8D5E30350F160F40BF8D73308967FA76D70F5726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:29:80:88:da:d2:82:f3:0f:09:cc:5a:05:71: 40:cf:74:af:bd:88:a2:e4:be:eb:82:7a:03:b9:47: f7:74:a8:28:68:a6:9c:22:67:05:94:c8:6a:79:97: 3a:39:42:16:f7:f7:db:b5:b2:63:7f:8f:c9:d5:57: 91:4b:7c:87:f2:e7:22:0d:97:3b:73:00:27:c5:68: b7:b4:a6:94:49:fe:53:63:b5:90:35:38:32:8a:03: 0b:d8:92:ae:85:f0:cc:2d:64:fc:bb:bb:3f:bb:f1: 86:fb:e2:e3:e4:ae:5d:50:af:c6:df:f0:3f:7f:04: a8:22:d4:4e:64:0d:e6:85:3f:41:99:b9:85:27:d4: 1f:7a:6a:86:6d:67:a3:b8:af:79:ec:8a:7b:69:b2: 7a:eb:56:3a:68:de:58:f8:25:fd:9e:5b:49:61:a1: d5:7d:17:3a:c6:c5:fa:d2:3d:27:5f:1e:f4:d6:e7: 0f:96:5d:d9:6b:4c:2f:d1:28:d5:f2:2e:2b:3e:90: ce:39:87:13:62:ec:9e:6b:40:88:61:be:cc:3a:50: 83:7f:ec:db:3c:ac:4e:ef:f9:d8:3d:46:b4:aa:ad: 2f:06:c3:a5:2c:d7:9c:4e:10:9b:3d:bc:19:f9:66: 80:57:dc:9d:80:d0:9f:9a:d7:b3:1f:d1:38:ab:a1: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:30:35:0F:16:0F:40:BF:8D:73:30:89:67:FA:76:D7:0F:57:26 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.64.0/20 Signature Algorithm: sha256WithRSAEncryption 19:81:5f:1a:fc:93:db:15:3b:b2:0a:ad:dc:57:26:65:d8:a0: 85:38:bf:cc:0d:37:4f:4e:33:d3:a0:65:b7:68:66:43:fd:f1: 40:56:a2:be:2c:6d:0e:a6:c4:b7:72:89:e9:eb:a5:7e:ff:72: 9a:79:2f:2e:fb:a0:b6:da:41:0e:7c:4e:a2:b1:f2:24:1b:e9: ed:76:bf:e0:b8:9a:c5:8f:40:4f:92:06:c6:35:e8:c2:c0:e4: 76:3b:b9:04:54:c7:f4:99:76:03:24:bf:f5:d9:87:dc:5e:4f: fc:b3:cb:2b:17:3b:52:1e:a7:ef:52:fe:81:89:7a:97:65:48: e7:3f:73:09:6d:30:74:fe:79:f5:35:f3:b0:3d:fa:5d:df:46: 60:ee:f8:e8:c5:bf:1a:4a:bb:17:20:71:c8:14:69:7d:f9:45: 02:98:45:f5:69:b0:c9:7c:7c:c2:ec:3d:7d:09:16:c6:fc:bd: 29:5a:d1:53:4f:a3:0b:e8:82:a7:5a:05:f4:43:e7:cb:0a:bc: 32:fd:42:ba:d4:3e:46:b9:dc:e5:22:c9:de:49:c2:a4:d2:73: b2:5a:57:32:ea:b0:57:04:07:f2:bf:5b:92:25:22:aa:c6:ed: ee:ee:e5:ba:ec:02:f7:12:f7:a1:80:3e:a3:45:b4:1f:74:9a: fe:fc:98:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhENUUzMDM1MEYxNjBG NDBCRjhENzMzMDg5NjdGQTc2RDcwRjU3MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlKYCI2tKC8w8JzFoFcUDPdK+9iKLkvuuCegO5R/d0qChoppwi ZwWUyGp5lzo5Qhb399u1smN/j8nVV5FLfIfy5yINlztzACfFaLe0ppRJ/lNjtZA1 ODKKAwvYkq6F8MwtZPy7uz+78Yb74uPkrl1Qr8bf8D9/BKgi1E5kDeaFP0GZuYUn 1B96aoZtZ6O4r3nsintpsnrrVjpo3lj4Jf2eW0lhodV9FzrGxfrSPSdfHvTW5w+W XdlrTC/RKNXyLis+kM45hxNi7J5rQIhhvsw6UIN/7Ns8rE7v+dg9RrSqrS8Gw6Us 15xOEJs9vBn5ZoBX3J2A0J+a17Mf0TiroXodAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjV4wNQ8WD0C/jXMwiWf6dtcPVyYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pWNHdOUThXRDBDX2pYTXdp V2Y2ZHRjUFZ5WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wEAwDQYJKoZIhvcNAQELBQADggEBABmBXxr8k9sVO7IKrdxXJmXYoIU4v8wNN09O M9OgZbdoZkP98UBWor4sbQ6mxLdyienrpX7/cpp5Ly77oLbaQQ58TqKx8iQb6e12 v+C4msWPQE+SBsY16MLA5HY7uQRUx/SZdgMkv/XZh9xeT/yzyysXO1Iep+9S/oGJ epdlSOc/cwltMHT+efU187A9+l3fRmDu+OjFvxpKuxcgccgUaX35RQKYRfVpsMl8 fMLsPX0JFsb8vSla0VNPowvogqdaBfRD58sKvDL9QrrUPka53OUiyd5JwqTSc7Ja VzLqsFcEB/K/W5IlIqrG7e7u5brsAvcS96GAPqNFtB90mv78mDU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org