$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k8rfRPqKib3LEzsT4fdK81ZLfnc.roa File: k8rfRPqKib3LEzsT4fdK81ZLfnc.roa (raw, json) Hash identifier: o1Rxr2V7ExE0MsTa7PX7OCNM+g/onieY9v+GbJZewLA= Subject key identifier: 93:CA:DF:44:FA:8A:89:BD:CB:13:3B:13:E1:F7:4A:F3:56:4B:7E:77 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AAB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k8rfRPqKib3LEzsT4fdK81ZLfnc.roa Signing time: Fri 01 Sep 2023 10:08:10 +0000 ROA not before: Fri 01 Sep 2023 10:08:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10923 (0x2aab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=93CADF44FA8A89BDCB133B13E1F74AF3564B7E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:f4:be:0c:e5:e6:a8:6f:3d:37:e6:3d:e5: ab:c7:2c:2f:58:15:41:19:45:d0:d7:9c:9c:45:08: 42:60:73:fc:81:48:f9:38:22:20:97:7b:49:c2:ec: c2:a8:e3:a4:53:8b:d0:df:35:cc:bd:e7:6a:64:77: a3:fa:4d:13:e6:b1:23:46:d3:8e:f1:6c:a4:a4:51: f1:8d:2e:33:b2:1c:84:dc:2f:53:b8:fd:d9:52:db: 55:83:71:0e:73:df:e7:37:e4:03:1c:53:be:25:b8: a9:2b:56:1f:27:0c:c6:f3:cc:0c:d4:c6:ff:54:ec: 71:ea:4e:dd:4c:a6:be:d3:51:5b:33:7d:db:cc:3a: e3:a9:ba:4a:2b:89:4c:b8:d5:c1:b4:be:80:d7:48: 3b:80:4a:f0:b6:a9:ad:73:6c:f0:c0:4a:4c:5f:6e: 6b:d2:ce:c1:bc:e7:cd:69:ea:1e:d1:15:86:f1:56: f8:8b:b0:06:9f:c0:a5:de:53:f0:11:40:46:56:d8: b5:34:1c:23:91:33:a2:f0:b6:c2:97:eb:f3:16:fd: 38:bf:17:6f:f5:57:6b:b9:31:31:8c:a6:a4:22:0f: 44:62:79:2a:61:91:9f:2c:d6:f9:b4:a1:f5:bc:3f: e2:3d:da:ba:06:3c:a2:b4:27:a8:54:6a:c0:71:9b: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CA:DF:44:FA:8A:89:BD:CB:13:3B:13:E1:F7:4A:F3:56:4B:7E:77 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k8rfRPqKib3LEzsT4fdK81ZLfnc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.160.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:be:3e:0c:f9:cc:57:d4:54:8e:7d:bd:88:e2:e7:40:c2:47: 6b:36:ac:a1:96:4d:11:21:71:1b:e2:97:75:9e:cb:90:48:3e: a3:01:f6:d6:31:7f:06:14:8c:0a:ca:42:16:9b:a0:c0:1c:ef: 92:4f:ce:4a:8a:63:cd:26:bf:54:7d:1e:28:ce:2d:24:7b:98: a4:2c:f5:78:ef:73:d3:88:02:f3:df:fd:32:7c:40:97:ed:49: 18:b1:54:de:6c:9b:9f:fc:26:c5:cb:bd:55:0c:ac:a8:4e:9b: d9:4d:99:b0:46:ec:7e:87:cb:ed:24:cf:43:eb:f1:bf:5d:8f: 6c:35:a3:03:4e:53:d6:2c:1d:67:eb:eb:8b:b0:ef:c4:62:52: 35:96:c0:bc:2e:c4:58:a3:02:d4:4f:d9:29:71:d2:22:3f:93: 58:d0:5e:ba:0c:c8:63:36:42:17:eb:2a:9c:46:95:fa:62:20: cf:02:78:4a:d6:5a:83:7d:dd:e8:3c:ff:a1:2b:74:22:de:22: 8e:d0:30:b2:6a:ae:a9:e3:5b:ec:32:d9:c5:eb:44:2c:9e:10: 72:b0:6e:fc:bd:d0:84:5f:2b:db:ae:82:a1:5c:4c:74:0e:34: d7:af:79:5b:cd:61:c7:91:9a:4a:24:4b:42:af:a0:09:35:72: 0a:c4:ee:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkzQ0FERjQ0RkE4QTg5 QkRDQjEzM0IxM0UxRjc0QUYzNTY0QjdFNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMSPS+DOXmqG89N+Y95avHLC9YFUEZRdDXnJxFCEJgc/yBSPk4 IiCXe0nC7MKo46RTi9DfNcy952pkd6P6TRPmsSNG047xbKSkUfGNLjOyHITcL1O4 /dlS21WDcQ5z3+c35AMcU74luKkrVh8nDMbzzAzUxv9U7HHqTt1Mpr7TUVszfdvM OuOpukoriUy41cG0voDXSDuASvC2qa1zbPDASkxfbmvSzsG8581p6h7RFYbxVviL sAafwKXeU/ARQEZW2LU0HCORM6LwtsKX6/MW/Ti/F2/1V2u5MTGMpqQiD0RieSph kZ8s1vm0ofW8P+I92roGPKK0J6hUasBxm5P9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUk8rfRPqKib3LEzsT4fdK81ZLfncwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2s4cmZSUHFLaWIzTEV6c1Q0 ZmRLODFaTGZuYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wKAwDQYJKoZIhvcNAQELBQADggEBAG2+Pgz5zFfUVI59vYji50DCR2s2rKGWTREh cRvil3Wey5BIPqMB9tYxfwYUjArKQhaboMAc75JPzkqKY80mv1R9HijOLSR7mKQs 9Xjvc9OIAvPf/TJ8QJftSRixVN5sm5/8JsXLvVUMrKhOm9lNmbBG7H6Hy+0kz0Pr 8b9dj2w1owNOU9YsHWfr64uw78RiUjWWwLwuxFijAtRP2Slx0iI/k1jQXroMyGM2 QhfrKpxGlfpiIM8CeErWWoN93eg8/6ErdCLeIo7QMLJqrqnjW+wy2cXrRCyeEHKw bvy90IRfK9uugqFcTHQONNeveVvNYceRmkokS0KvoAk1cgrE7pM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org