$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pX55Y0OcTzIFM4DU5UEezdY8p-M.roa File: pX55Y0OcTzIFM4DU5UEezdY8p-M.roa (raw, json) Hash identifier: NO4CGHFsvYwKjOeHs0KHObTfAYclmaN8x3lkANgTozs= Subject key identifier: A5:7E:79:63:43:9C:4F:32:05:33:80:D4:E5:41:1E:CD:D6:3C:A7:E3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AA9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pX55Y0OcTzIFM4DU5UEezdY8p-M.roa Signing time: Fri 01 Sep 2023 10:08:09 +0000 ROA not before: Fri 01 Sep 2023 10:08:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.195.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10921 (0x2aa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A57E7963439C4F32053380D4E5411ECDD63CA7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:29:05:42:bb:b5:7a:27:30:29:c1:e5:2d: 62:e8:b0:da:5f:1f:60:b4:6f:70:5e:08:4c:25:94: dc:5e:3f:cd:5e:23:49:a2:34:5d:14:ea:8c:a2:d0: d1:cf:f7:aa:8b:b2:bd:94:91:8d:16:26:02:1d:0a: 02:e7:f8:80:a2:e2:e3:1c:5e:72:b1:b0:f2:f9:bd: df:a5:c8:ac:43:9c:0a:da:9e:03:44:77:e1:69:b3: 45:e2:40:cb:f5:67:93:25:0a:03:4d:f1:d6:30:71: 44:1b:29:fe:3d:d6:95:28:ff:5c:fe:5c:b5:95:8e: b1:ec:af:73:ca:d0:45:e2:3a:ad:69:38:6c:ba:86: d0:cb:7c:c3:ec:b5:a2:b3:76:8b:76:53:4f:2f:81: c0:79:05:bc:82:94:60:20:70:a4:a0:da:f4:89:e8: f6:05:67:32:58:04:ab:15:d2:a4:1c:6b:1d:25:68: 95:c4:ec:69:4d:6f:b6:4c:f9:e7:aa:fb:72:71:5f: f1:86:cd:42:25:68:9a:10:48:c5:93:e6:f1:1d:65: 54:44:01:13:4e:ca:b1:26:c7:ac:ab:4e:e7:d0:40: bd:fe:b7:94:d3:10:48:a7:ac:0f:d0:87:65:1a:49: 98:f9:f8:f9:f5:4d:c8:60:27:52:82:a0:73:0f:76: 78:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:79:63:43:9C:4F:32:05:33:80:D4:E5:41:1E:CD:D6:3C:A7:E3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pX55Y0OcTzIFM4DU5UEezdY8p-M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.52.0/22 Signature Algorithm: sha256WithRSAEncryption 11:71:da:61:f8:4c:b9:da:9a:69:1e:d7:c8:d9:9b:2b:9d:89: 07:b0:8a:91:cd:80:f6:59:48:c6:9d:b2:5d:37:59:6a:fd:ea: 69:56:0e:96:0e:67:b4:c8:60:b3:d9:39:d2:21:c1:fe:66:21: 77:2a:f3:1f:e9:d0:77:5e:09:3d:45:e8:d7:5a:f4:ec:55:e6: d8:e2:bf:8b:92:25:26:ee:a0:dc:5c:68:58:81:15:3f:52:24: 5f:cb:a4:94:14:0e:8b:e3:b6:7a:95:3d:91:ad:42:38:6f:d1: 5a:e8:f8:6f:10:93:1b:42:66:95:54:81:18:76:57:ee:c6:d4: e0:a3:f3:ff:ea:17:8d:7d:4a:25:93:b7:95:13:bd:fb:3c:49: 51:b9:59:42:62:f4:78:64:29:cc:c4:3f:d9:21:25:d5:ee:ae: 2a:51:e9:d2:93:e6:9c:23:a1:f1:82:57:95:fd:69:6c:86:26: 0d:91:41:04:3b:a0:54:c1:a2:81:6f:76:f7:2b:8d:bf:ca:c1: 9b:58:c8:b2:ba:b1:4a:0a:67:52:0e:7e:53:a8:d1:8c:db:5d: 98:b3:9e:ec:bb:49:43:63:06:f3:0b:79:c3:8a:3c:c4:d1:a5: 50:b4:9c:c1:13:bb:e7:79:b5:ca:22:41:85:54:e2:49:e8:06: 80:99:ff:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE1N0U3OTYzNDM5QzRG MzIwNTMzODBENEU1NDExRUNERDYzQ0E3RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0wykFQru1eicwKcHlLWLosNpfH2C0b3BeCEwllNxeP81eI0mi NF0U6oyi0NHP96qLsr2UkY0WJgIdCgLn+ICi4uMcXnKxsPL5vd+lyKxDnArangNE d+Fps0XiQMv1Z5MlCgNN8dYwcUQbKf491pUo/1z+XLWVjrHsr3PK0EXiOq1pOGy6 htDLfMPstaKzdot2U08vgcB5BbyClGAgcKSg2vSJ6PYFZzJYBKsV0qQcax0laJXE 7GlNb7ZM+eeq+3JxX/GGzUIlaJoQSMWT5vEdZVREARNOyrEmx6yrTufQQL3+t5TT EEinrA/Qh2UaSZj5+Pn1TchgJ1KCoHMPdnjjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpX55Y0OcTzIFM4DU5UEezdY8p+MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BYNTVZME9jVHpJRk00RFU1 VUVlemRZOHAtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wzQwDQYJKoZIhvcNAQELBQADggEBABFx2mH4TLnammke18jZmyudiQewipHNgPZZ SMadsl03WWr96mlWDpYOZ7TIYLPZOdIhwf5mIXcq8x/p0HdeCT1F6Nda9OxV5tji v4uSJSbuoNxcaFiBFT9SJF/LpJQUDovjtnqVPZGtQjhv0Vro+G8QkxtCZpVUgRh2 V+7G1OCj8//qF419SiWTt5UTvfs8SVG5WUJi9HhkKczEP9khJdXuripR6dKT5pwj ofGCV5X9aWyGJg2RQQQ7oFTBooFvdvcrjb/KwZtYyLK6sUoKZ1IOflOo0YzbXZiz nuy7SUNjBvMLecOKPMTRpVC0nMETu+d5tcoiQYVU4knoBoCZ/+c= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org