$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qj3x4teV887WPaUWT8ayxis8kf8.roa File: qj3x4teV887WPaUWT8ayxis8kf8.roa (raw, json) Hash identifier: 2UVXfTTtHFawHHcPPMRhBuSgWbcvVOhq8YexSDYV0rQ= Subject key identifier: AA:3D:F1:E2:D7:95:F3:CE:D6:3D:A5:16:4F:C6:B2:C6:2B:3C:91:FF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 297F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qj3x4teV887WPaUWT8ayxis8kf8.roa Signing time: Fri 01 Sep 2023 10:06:40 +0000 ROA not before: Fri 01 Sep 2023 10:06:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10623 (0x297f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:40 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AA3DF1E2D795F3CED63DA5164FC6B2C62B3C91FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d4:df:a6:0f:c2:a9:8b:9b:5b:26:12:c8:2e: 67:e3:7c:0b:d8:b6:72:94:6d:88:0d:e7:6f:8a:a1: 59:e7:d8:58:11:d8:52:b7:8a:7e:e6:9b:e2:fb:0a: 5f:25:9a:1d:bd:20:4d:7a:0e:0c:3a:cc:d1:15:c4: 53:78:10:37:8f:c7:65:f2:d8:7a:64:f7:d0:7e:ef: ee:79:ba:73:42:35:91:ea:f6:20:30:53:cf:e7:38: 5a:24:de:23:c8:81:ab:61:79:95:13:33:e7:ce:7e: f5:23:1d:1b:0e:64:04:be:81:6a:d5:b1:15:93:3c: 45:a0:8b:d5:1c:30:1b:fc:e1:42:62:1c:77:b1:22: 44:9b:b7:bd:f4:86:3a:e0:aa:c7:77:99:00:0e:21: ad:c6:0d:ee:67:e3:56:a9:e5:d3:0b:35:e0:95:af: 9e:af:69:f5:2b:99:8d:ab:fa:d9:e1:6b:1c:f1:95: 49:57:4a:2e:97:89:74:94:5c:72:28:93:6f:f0:0d: fd:68:52:f4:61:fb:99:60:ba:5a:4b:e9:95:7b:fd: 0e:e7:63:49:ac:dd:33:9d:8a:90:d0:0e:bf:2b:b7: c0:93:61:af:20:f4:61:35:07:81:00:5d:d5:42:eb: 14:87:b9:98:76:b4:16:ce:e8:97:00:c3:48:13:3b: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:F1:E2:D7:95:F3:CE:D6:3D:A5:16:4F:C6:B2:C6:2B:3C:91:FF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qj3x4teV887WPaUWT8ayxis8kf8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.16.0/21 Signature Algorithm: sha256WithRSAEncryption 41:24:68:01:92:87:f4:be:57:b0:d7:1c:74:a7:00:97:16:af: f2:bf:d3:03:fa:4b:5f:f2:38:71:87:84:10:09:51:3a:28:2c: f8:b0:6d:41:87:9b:c9:b6:2b:dc:21:49:fa:ea:20:99:97:e3: a4:e8:2e:11:71:1d:12:07:9a:18:8b:87:e4:c7:ce:3f:2b:1d: 48:92:68:c4:fa:96:5b:c2:36:1e:d4:2c:f3:f6:3a:6a:59:cc: 2a:77:6e:7d:f4:e1:f3:66:1f:c9:be:46:d6:cc:f2:23:66:d3: 83:12:ea:2f:b9:dc:14:a1:c9:3a:d0:48:20:99:6b:a9:59:4f: 9d:a4:fe:b2:b1:b1:94:88:c8:0f:d9:bf:1a:cd:55:a9:f6:fb: 70:96:bb:65:93:29:bb:69:dc:ca:3b:40:a7:03:f2:a1:76:cb: f1:0b:34:58:1a:83:14:6e:47:91:df:74:79:55:c9:16:47:98: 56:9e:17:b0:54:97:31:76:2c:08:2c:e8:b4:9c:b9:05:82:9d: 67:66:0a:40:4d:30:71:8b:e7:d2:8b:21:22:8c:7c:bc:9d:f3: 39:53:68:8c:d4:84:71:0a:0e:1a:5e:65:ca:de:a6:8b:c3:c9: 89:48:46:8d:02:72:f0:3a:a4:75:23:99:2d:fc:bc:c3:1c:75: 5f:b8:3b:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFBM0RGMUUyRDc5NUYz Q0VENjNEQTUxNjRGQzZCMkM2MkIzQzkxRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx1N+mD8Kpi5tbJhLILmfjfAvYtnKUbYgN52+KoVnn2FgR2FK3 in7mm+L7Cl8lmh29IE16Dgw6zNEVxFN4EDePx2Xy2Hpk99B+7+55unNCNZHq9iAw U8/nOFok3iPIgatheZUTM+fOfvUjHRsOZAS+gWrVsRWTPEWgi9UcMBv84UJiHHex IkSbt730hjrgqsd3mQAOIa3GDe5n41ap5dMLNeCVr56vafUrmY2r+tnhaxzxlUlX Si6XiXSUXHIok2/wDf1oUvRh+5lgulpL6ZV7/Q7nY0ms3TOdipDQDr8rt8CTYa8g 9GE1B4EAXdVC6xSHuZh2tBbO6JcAw0gTO0wTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqj3x4teV887WPaUWT8ayxis8kf8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FqM3g0dGVWODg3V1BhVVdU OGF5eGlzOGtmOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wRAwDQYJKoZIhvcNAQELBQADggEBAEEkaAGSh/S+V7DXHHSnAJcWr/K/0wP6S1/y OHGHhBAJUTooLPiwbUGHm8m2K9whSfrqIJmX46ToLhFxHRIHmhiLh+THzj8rHUiS aMT6llvCNh7ULPP2OmpZzCp3bn304fNmH8m+RtbM8iNm04MS6i+53BShyTrQSCCZ a6lZT52k/rKxsZSIyA/ZvxrNVan2+3CWu2WTKbtp3Mo7QKcD8qF2y/ELNFgagxRu R5HfdHlVyRZHmFaeF7BUlzF2LAgs6LScuQWCnWdmCkBNMHGL59KLISKMfLyd8zlT aIzUhHEKDhpeZcrepovDyYlIRo0CcvA6pHUjmS38vMMcdV+4O90= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org