$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWA62rokVpOXmS_cCjgeNrP_uHA.roa File: lWA62rokVpOXmS_cCjgeNrP_uHA.roa (raw, json) Hash identifier: 25/v4CunZJQNMlchaQBe43b16BNZD7n3S+NVzAVADlo= Subject key identifier: 95:60:3A:DA:BA:24:56:93:97:99:2F:DC:0A:38:1E:36:B3:FF:B8:70 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2886 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWA62rokVpOXmS_cCjgeNrP_uHA.roa Signing time: Fri 01 Sep 2023 10:05:26 +0000 ROA not before: Fri 01 Sep 2023 10:05:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10374 (0x2886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=95603ADABA24569397992FDC0A381E36B3FFB870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:3e:c2:11:bf:16:61:1b:9e:61:10:28:41: 77:f4:c3:a4:cf:f1:01:15:c3:c1:ac:cb:78:17:28: 38:3c:54:cc:1d:1f:9b:a1:29:cb:0a:d1:b2:42:d3: 83:1d:a8:f7:40:e9:b0:26:a4:3d:fc:7c:da:c9:52: bd:1c:eb:ff:cf:be:dc:2e:1f:91:df:dd:0e:39:1d: 1a:67:7c:c1:f8:ac:8b:ac:f6:8c:93:96:af:52:4a: cf:c0:ec:c2:8b:e8:b7:6e:09:35:b2:62:99:dc:a7: a0:5e:e3:b7:59:b3:17:0b:f9:84:ea:76:f2:e9:60: c7:64:16:3f:34:73:32:1f:bd:f2:3f:39:38:46:b0: 24:12:51:3b:d0:77:3d:2d:6f:fc:f5:85:e5:54:0c: 0f:ad:d9:d3:62:cd:5d:23:5d:e1:4d:c9:19:2b:f9: 66:f2:af:f3:21:8e:52:70:82:2d:b4:24:91:39:28: 05:fa:60:75:46:e2:42:3b:82:de:68:8a:1f:9d:d5: 29:91:56:b6:15:dc:c4:b7:21:90:38:e6:74:68:01: 25:73:81:53:06:72:27:02:3c:c3:5e:ce:71:c7:70: a2:a6:87:64:01:28:fc:11:01:64:5c:74:5a:6e:d4: bb:c9:68:81:b0:2a:91:24:3c:86:1a:a8:fa:75:b7: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:60:3A:DA:BA:24:56:93:97:99:2F:DC:0A:38:1E:36:B3:FF:B8:70 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWA62rokVpOXmS_cCjgeNrP_uHA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:a0:a7:61:42:c1:c2:19:32:db:6c:0d:9b:51:36:e1:a5:46: b6:c6:0d:11:a7:99:d9:66:6d:c0:68:8d:8c:78:a2:6f:e0:0b: cd:62:aa:9f:1b:9d:70:c0:45:cb:cf:7b:1a:0d:fd:a6:5e:79: 3d:f3:aa:07:81:c7:16:3c:92:95:dd:ef:cf:ae:18:ce:2e:6f: f3:0e:e1:16:de:59:c0:c6:10:15:bf:88:ac:0f:c4:f5:ef:a9: aa:7c:2d:79:34:73:ce:29:fc:81:87:d1:e0:4a:fa:a5:d5:f3: 68:e1:42:ee:b1:36:35:53:fb:a1:be:92:9b:4f:53:44:f6:5c: 44:cd:c7:b5:cf:01:f5:5f:7b:42:84:86:d7:7c:83:26:51:bc: 09:f3:30:1e:25:50:f7:51:10:22:e5:c9:cb:42:05:b3:00:2d: 75:0b:8e:f2:b7:50:7e:41:c9:6e:56:3e:ab:13:ef:10:fb:0a: 02:1e:ba:cf:16:c8:20:b0:7e:26:45:a9:89:70:70:c4:8d:52: 5b:86:ec:2c:3f:0d:99:ce:45:77:73:d8:11:3e:d3:33:0f:32: d3:6f:f9:cc:dd:03:05:b6:c8:07:98:44:fe:a9:05:da:3b:9c: ac:90:a2:7c:84:8a:9f:c6:bf:a2:e3:83:31:7a:92:ef:7a:3a: a9:f7:78:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk1NjAzQURBQkEyNDU2 OTM5Nzk5MkZEQzBBMzgxRTM2QjNGRkI4NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnjT7CEb8WYRueYRAoQXf0w6TP8QEVw8Gsy3gXKDg8VMwdH5uh KcsK0bJC04MdqPdA6bAmpD38fNrJUr0c6//PvtwuH5Hf3Q45HRpnfMH4rIus9oyT lq9SSs/A7MKL6LduCTWyYpncp6Be47dZsxcL+YTqdvLpYMdkFj80czIfvfI/OThG sCQSUTvQdz0tb/z1heVUDA+t2dNizV0jXeFNyRkr+Wbyr/MhjlJwgi20JJE5KAX6 YHVG4kI7gt5oih+d1SmRVrYV3MS3IZA45nRoASVzgVMGcicCPMNeznHHcKKmh2QB KPwRAWRcdFpu1LvJaIGwKpEkPIYaqPp1txmRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlWA62rokVpOXmS/cCjgeNrP/uHAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xXQTYycm9rVnBPWG1TX2ND amdlTnJQX3VIQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wXAwDQYJKoZIhvcNAQELBQADggEBAE6gp2FCwcIZMttsDZtRNuGlRrbGDRGnmdlm bcBojYx4om/gC81iqp8bnXDARcvPexoN/aZeeT3zqgeBxxY8kpXd78+uGM4ub/MO 4RbeWcDGEBW/iKwPxPXvqap8LXk0c84p/IGH0eBK+qXV82jhQu6xNjVT+6G+kptP U0T2XETNx7XPAfVfe0KEhtd8gyZRvAnzMB4lUPdRECLlyctCBbMALXULjvK3UH5B yW5WPqsT7xD7CgIeus8WyCCwfiZFqYlwcMSNUluG7Cw/DZnORXdz2BE+0zMPMtNv +czdAwW2yAeYRP6pBdo7nKyQonyEip/Gv6LjgzF6ku96Oqn3eBE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org