$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q7R0DRSW3bxHXu44t5JQOGmk40E.roa File: q7R0DRSW3bxHXu44t5JQOGmk40E.roa (raw, json) Hash identifier: 7f7UBaK21/XcglyLthPhCY3YUHJJrKXXls1F/n0lhUU= Subject key identifier: AB:B4:74:0D:14:96:DD:BC:47:5E:EE:38:B7:92:50:38:69:A4:E3:41 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A27 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q7R0DRSW3bxHXu44t5JQOGmk40E.roa Signing time: Fri 01 Sep 2023 10:07:33 +0000 ROA not before: Fri 01 Sep 2023 10:07:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10791 (0x2a27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ABB4740D1496DDBC475EEE38B792503869A4E341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:93:33:5b:63:ed:de:f8:21:16:c5:c5:bf:62: 3c:00:36:f9:32:45:14:a4:b0:65:a2:cd:60:d3:95: 9a:93:d1:fe:0b:65:05:13:b7:12:b3:53:10:da:c7: cb:f9:ca:85:99:41:1f:fe:8c:c4:65:3c:fa:59:ee: 28:6b:c6:4e:89:3c:41:23:f0:74:1f:b3:be:91:e8: 9b:1c:9b:fb:a2:c7:78:04:aa:ad:15:d2:b7:aa:5b: 9b:c0:a1:1a:be:93:96:49:29:18:b4:c8:9d:2e:16: 28:24:a4:d9:bd:f0:03:51:06:bb:aa:08:c8:6c:a9: 24:a8:91:62:d5:49:06:91:5b:33:d3:c6:45:bc:96: eb:74:b0:0a:e9:b8:8b:d0:26:a3:a3:84:b8:2d:3e: f5:84:47:40:0a:b2:8c:64:8a:ec:c8:11:50:05:71: e1:2d:d2:35:4b:29:94:44:54:83:07:84:46:b9:26: 73:eb:29:72:9a:a1:e6:2c:d2:cc:4b:31:6e:c4:98: 08:37:15:0a:14:0a:cc:c6:9e:b7:0b:22:12:9d:12: 54:ab:6e:c1:9d:f8:01:0e:34:07:5c:b6:1c:5b:d7: 33:7e:32:10:a6:5c:fd:87:44:76:1e:30:46:5d:15: db:e3:57:00:e0:dd:a1:28:38:34:5a:59:71:b5:90: e3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B4:74:0D:14:96:DD:BC:47:5E:EE:38:B7:92:50:38:69:A4:E3:41 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q7R0DRSW3bxHXu44t5JQOGmk40E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.84.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:58:ab:96:f9:a3:1d:5a:74:95:a3:87:84:d9:67:20:cc:15: 9a:5a:7c:31:18:f7:2e:95:ed:32:a5:6d:74:d5:6b:e8:ea:16: 86:17:0b:7b:df:2b:99:82:db:be:8c:87:4d:03:91:8a:fc:73: 09:64:1d:97:76:8c:69:01:ea:b8:c9:05:f6:db:8c:03:56:b8: 3f:58:d4:cd:b3:b2:83:13:ea:63:45:37:a7:89:60:db:d1:0d: 2f:d1:32:8c:9f:4b:25:53:96:38:08:27:24:2b:1d:69:37:4f: de:ae:f6:60:78:58:4f:7f:d1:04:d8:a7:89:97:5c:8e:80:c9: c3:66:ac:2c:3d:81:c4:9d:83:26:ad:34:16:cc:dd:48:83:5d: bc:42:87:51:f9:06:1a:78:5c:00:2e:52:dd:6e:f5:38:5a:9f: c4:dc:57:19:20:82:3e:56:c7:b8:6c:d6:50:7c:86:e8:78:b6: 07:49:22:cd:2e:6c:98:c1:2e:5a:ed:4b:63:02:44:99:1d:52: 9f:5d:15:3b:37:bf:33:6b:93:da:69:bb:7e:50:ff:76:8e:cd: 9f:24:8f:e2:6e:2a:67:20:49:a7:23:2a:6c:9f:69:4b:60:68: 41:e1:b8:85:5a:86:e3:85:86:71:96:0e:89:7c:f0:82:e3:f8: f0:ce:4f:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFCQjQ3NDBEMTQ5NkRE QkM0NzVFRUUzOEI3OTI1MDM4NjlBNEUzNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYkzNbY+3e+CEWxcW/YjwANvkyRRSksGWizWDTlZqT0f4LZQUT txKzUxDax8v5yoWZQR/+jMRlPPpZ7ihrxk6JPEEj8HQfs76R6Jscm/uix3gEqq0V 0reqW5vAoRq+k5ZJKRi0yJ0uFigkpNm98ANRBruqCMhsqSSokWLVSQaRWzPTxkW8 lut0sArpuIvQJqOjhLgtPvWER0AKsoxkiuzIEVAFceEt0jVLKZREVIMHhEa5JnPr KXKaoeYs0sxLMW7EmAg3FQoUCszGnrcLIhKdElSrbsGd+AEONAdcthxb1zN+MhCm XP2HRHYeMEZdFdvjVwDg3aEoODRaWXG1kONBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUq7R0DRSW3bxHXu44t5JQOGmk40EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3E3UjBEUlNXM2J4SFh1NDR0 NUpRT0dtazQwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wlQwDQYJKoZIhvcNAQELBQADggEBAH5Yq5b5ox1adJWjh4TZZyDMFZpafDEY9y6V 7TKlbXTVa+jqFoYXC3vfK5mC276Mh00DkYr8cwlkHZd2jGkB6rjJBfbbjANWuD9Y 1M2zsoMT6mNFN6eJYNvRDS/RMoyfSyVTljgIJyQrHWk3T96u9mB4WE9/0QTYp4mX XI6AycNmrCw9gcSdgyatNBbM3UiDXbxCh1H5Bhp4XAAuUt1u9Than8TcVxkggj5W x7hs1lB8huh4tgdJIs0ubJjBLlrtS2MCRJkdUp9dFTs3vzNrk9ppu35Q/3aOzZ8k j+JuKmcgSacjKmyfaUtgaEHhuIVahuOFhnGWDol88ILj+PDOTzo= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org