$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lvBJoHgpab2PxOQe1dSH8fYfgIU.roa File: lvBJoHgpab2PxOQe1dSH8fYfgIU.roa (raw, json) Hash identifier: OCCxx500bQyu0dU1s1XaYnL7zkMh3EXqmRvBHRwQU/Q= Subject key identifier: 96:F0:49:A0:78:29:69:BD:8F:C4:E4:1E:D5:D4:87:F1:F6:1F:80:85 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2ABD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lvBJoHgpab2PxOQe1dSH8fYfgIU.roa Signing time: Fri 01 Sep 2023 10:08:14 +0000 ROA not before: Fri 01 Sep 2023 10:08:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10941 (0x2abd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=96F049A0782969BD8FC4E41ED5D487F1F61F8085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:c7:99:1b:98:01:fb:ac:ca:52:7a:f1:8d: 46:e5:76:26:e6:1b:de:e0:20:70:a4:3d:6c:7a:a2: 3f:63:26:b9:47:9f:86:17:9a:2f:90:84:b4:0c:72: 50:86:5a:7b:60:c5:c3:c1:89:19:a1:2e:ab:96:11: b8:2a:49:5c:4c:32:a0:f5:58:28:0f:fb:0a:b8:cd: 40:17:a1:50:59:0f:63:cc:f4:f4:a4:38:c8:ea:4a: 04:30:42:dd:a2:08:30:27:1a:7f:26:16:2b:6a:9a: 58:03:0b:ee:17:31:8a:8a:17:6f:f0:d6:81:9e:96: 33:d0:34:35:ae:96:11:13:55:ab:df:69:69:d1:ac: 8b:b1:90:bb:a3:62:b2:48:5f:e9:4f:68:ac:c1:66: 0b:d1:f9:83:2e:d6:1c:ad:dd:9d:04:61:2e:62:58: 58:6c:14:5c:0b:c0:a3:bb:fd:f1:d5:56:0f:85:c3: d6:d5:1b:9e:16:d8:60:d0:00:04:02:f1:ac:0e:61: 45:f1:2f:98:98:01:c8:41:c7:d1:3c:b6:18:a3:0b: 8c:d2:8a:aa:d7:11:51:f0:6a:39:da:c1:0b:8a:fa: 7b:c2:c7:4f:e0:61:02:cc:98:f8:51:14:f9:14:8d: b4:29:6f:57:65:78:5e:7b:c7:c1:c1:ab:5f:de:b6: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F0:49:A0:78:29:69:BD:8F:C4:E4:1E:D5:D4:87:F1:F6:1F:80:85 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lvBJoHgpab2PxOQe1dSH8fYfgIU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.144.0/22 Signature Algorithm: sha256WithRSAEncryption 03:84:d9:fe:ce:45:a9:df:68:c3:c6:a7:8b:ec:6a:fa:3d:d4: 3b:eb:fc:a6:bc:0e:b8:a9:70:6e:7c:4a:b5:30:d1:01:4d:c5: c9:3a:8a:a6:e6:86:5f:81:83:43:aa:f7:4f:a8:fe:db:37:a8: c9:83:e4:d1:f0:2a:0f:a5:ea:d6:ce:98:67:46:de:0d:f0:7e: 12:e9:ca:bf:9e:85:2d:04:d4:82:f3:07:fd:b4:64:47:c1:52: 96:5e:7b:c4:35:eb:92:92:f0:12:7b:70:5f:cf:e1:02:dc:42: 3c:b6:7e:06:51:bd:e5:84:b8:2c:ab:dc:6d:6d:43:66:bf:d0: 59:cf:4c:1c:c4:09:a7:0f:1b:67:2c:8a:4c:c1:f7:21:00:f1: bf:c8:d3:78:1e:03:27:16:c3:8b:4d:75:4e:80:9d:d9:66:9e: 70:ab:12:95:6d:60:39:4e:19:43:06:de:9d:1f:f2:46:3d:19: 9c:a3:cb:12:6a:60:c9:2a:fd:aa:b1:a3:b1:ea:31:8b:4c:50: 42:b5:f3:b1:b0:3b:75:ad:7f:c0:d9:ff:1d:27:a1:82:dd:7e: 8b:27:88:a8:eb:5f:d8:87:0c:a2:6f:1e:25:37:d1:53:83:49: 30:d2:5a:e7:51:0d:1b:2c:1b:be:bc:85:db:07:62:95:8e:c7: 85:9c:b1:81 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk2RjA0OUEwNzgyOTY5 QkQ4RkM0RTQxRUQ1RDQ4N0YxRjYxRjgwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfN8eZG5gB+6zKUnrxjUbldibmG97gIHCkPWx6oj9jJrlHn4YX mi+QhLQMclCGWntgxcPBiRmhLquWEbgqSVxMMqD1WCgP+wq4zUAXoVBZD2PM9PSk OMjqSgQwQt2iCDAnGn8mFitqmlgDC+4XMYqKF2/w1oGeljPQNDWulhETVavfaWnR rIuxkLujYrJIX+lPaKzBZgvR+YMu1hyt3Z0EYS5iWFhsFFwLwKO7/fHVVg+Fw9bV G54W2GDQAAQC8awOYUXxL5iYAchBx9E8thijC4zSiqrXEVHwajnawQuK+nvCx0/g YQLMmPhRFPkUjbQpb1dleF57x8HBq1/etjkVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlvBJoHgpab2PxOQe1dSH8fYfgIUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2x2QkpvSGdwYWIyUHhPUWUx ZFNIOGZZZmdJVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpAwDQYJKoZIhvcNAQELBQADggEBAAOE2f7ORanfaMPGp4vsavo91Dvr/Ka8Drip cG58SrUw0QFNxck6iqbmhl+Bg0Oq90+o/ts3qMmD5NHwKg+l6tbOmGdG3g3wfhLp yr+ehS0E1ILzB/20ZEfBUpZee8Q165KS8BJ7cF/P4QLcQjy2fgZRveWEuCyr3G1t Q2a/0FnPTBzECacPG2csikzB9yEA8b/I03geAycWw4tNdU6AndlmnnCrEpVtYDlO GUMG3p0f8kY9GZyjyxJqYMkq/aqxo7HqMYtMUEK187GwO3Wtf8DZ/x0noYLdfosn iKjrX9iHDKJvHiU30VODSTDSWudRDRssG768hdsHYpWOx4WcsYE= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:31 2024 by rpki-client on console-fra.rpki-client.org