$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kaoesruxRxZka6hqHwU8Qn9S3fM.roa File: kaoesruxRxZka6hqHwU8Qn9S3fM.roa (raw, json) Hash identifier: dQJFfJJ0KSMvxa37k+oVVunjy3n28ZUGT6JtU3N5t90= Subject key identifier: 91:AA:1E:B2:BB:B1:47:16:64:6B:A8:6A:1F:05:3C:42:7F:52:DD:F3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27CF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kaoesruxRxZka6hqHwU8Qn9S3fM.roa Signing time: Fri 01 Sep 2023 10:04:34 +0000 ROA not before: Fri 01 Sep 2023 10:04:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10191 (0x27cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=91AA1EB2BBB14716646BA86A1F053C427F52DDF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:57:cc:c6:80:44:b0:63:79:f5:de:b6:0c: 43:37:a7:6f:ae:da:32:4d:bc:b8:d2:c4:73:ab:82: ae:ec:2d:b9:41:a8:67:f4:02:8c:bc:b3:d2:1b:1b: a0:64:da:41:04:87:00:17:58:23:b0:f5:42:b7:a4: ae:d4:f5:9a:46:59:20:e3:b4:ae:f2:99:82:84:23: ea:74:cb:a5:f6:d6:47:cd:60:69:59:e2:cf:57:e7: 2e:ae:22:cc:3e:db:b2:06:0f:51:6f:94:86:4b:70: be:d9:c6:14:79:4a:81:7a:df:80:9e:6a:6a:d9:e1: 3d:d4:26:f1:ac:c0:2f:98:42:d6:1d:bc:f2:0b:23: d2:71:41:e4:06:95:52:c8:c7:f5:2a:4a:26:0a:2f: 84:67:02:95:9b:5d:c1:11:f1:06:c8:3e:7f:32:44: 54:4f:47:4b:ce:36:92:80:3a:eb:5b:f3:a7:98:ac: 23:ee:91:40:74:31:ad:17:b8:77:9f:b6:ff:91:c3: 9d:f4:19:ae:bc:35:87:d7:be:6b:70:b9:a4:d4:ad: 37:42:c1:f6:50:55:7e:a0:d3:24:38:3c:be:28:0e: 3a:9e:ee:5c:0d:43:31:4c:2c:ff:6b:cd:58:76:1d: 4a:ad:fa:78:3f:04:74:c6:7d:b9:c9:42:39:94:45: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:1E:B2:BB:B1:47:16:64:6B:A8:6A:1F:05:3C:42:7F:52:DD:F3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kaoesruxRxZka6hqHwU8Qn9S3fM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.152.0/21 Signature Algorithm: sha256WithRSAEncryption 67:4f:8c:a0:52:11:86:8e:9b:22:6b:38:51:a2:0c:0e:2d:58: 43:67:c1:dc:11:22:b3:c6:33:16:a9:6c:7c:d0:f9:ae:be:01: a4:8a:3b:18:53:88:05:af:42:67:19:3a:48:b0:1b:5a:3b:4f: cc:8b:f4:f9:e3:6d:b9:40:dc:b8:80:38:d6:8d:95:5c:9d:7f: a6:f2:d7:d2:75:c4:88:79:ca:b6:7c:94:eb:cc:85:11:1b:a2: 10:47:3b:0c:df:00:fa:f7:6f:0c:80:c8:70:7c:62:cc:1d:81: 5f:8c:79:45:0b:3b:d9:6e:f0:7b:aa:14:7f:5f:2e:0a:07:f6: 24:6c:d6:e4:8f:79:c3:b8:14:e5:f7:c3:da:13:99:65:f6:28: be:a7:73:bb:2d:b8:14:fb:5a:a5:3b:32:44:85:01:5f:38:73: 62:46:ad:65:61:a2:48:07:e3:18:7b:d9:fd:45:b4:97:a7:84: 79:e1:b4:07:17:d9:21:d0:6d:73:9f:56:25:88:11:25:d6:25: 95:bc:c0:52:79:3b:12:0d:d8:f8:e2:36:99:55:57:0b:73:ca: 6c:39:fe:dc:d4:49:a8:fd:53:04:66:98:3a:25:8d:83:1b:d1: c5:11:f2:5a:3c:74:b3:d2:9c:5c:07:95:72:26:6c:8d:23:d4: fe:10:07:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkxQUExRUIyQkJCMTQ3 MTY2NDZCQTg2QTFGMDUzQzQyN0Y1MkRERjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLWFfMxoBEsGN59d62DEM3p2+u2jJNvLjSxHOrgq7sLblBqGf0 Aoy8s9IbG6Bk2kEEhwAXWCOw9UK3pK7U9ZpGWSDjtK7ymYKEI+p0y6X21kfNYGlZ 4s9X5y6uIsw+27IGD1FvlIZLcL7ZxhR5SoF634CeamrZ4T3UJvGswC+YQtYdvPIL I9JxQeQGlVLIx/UqSiYKL4RnApWbXcER8QbIPn8yRFRPR0vONpKAOutb86eYrCPu kUB0Ma0XuHeftv+Rw530Ga68NYfXvmtwuaTUrTdCwfZQVX6g0yQ4PL4oDjqe7lwN QzFMLP9rzVh2HUqt+ng/BHTGfbnJQjmURTVnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkaoesruxRxZka6hqHwU8Qn9S3fMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2thb2VzcnV4Unhaa2E2aHFI d1U4UW45UzNmTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wZgwDQYJKoZIhvcNAQELBQADggEBAGdPjKBSEYaOmyJrOFGiDA4tWENnwdwRIrPG MxapbHzQ+a6+AaSKOxhTiAWvQmcZOkiwG1o7T8yL9PnjbblA3LiAONaNlVydf6by 19J1xIh5yrZ8lOvMhREbohBHOwzfAPr3bwyAyHB8YswdgV+MeUULO9lu8HuqFH9f LgoH9iRs1uSPecO4FOX3w9oTmWX2KL6nc7stuBT7WqU7MkSFAV84c2JGrWVhokgH 4xh72f1FtJenhHnhtAcX2SHQbXOfViWIESXWJZW8wFJ5OxIN2PjiNplVVwtzymw5 /tzUSaj9UwRmmDoljYMb0cUR8lo8dLPSnFwHlXImbI0j1P4QB7Q= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org