$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3ZOFGK5nEJJEdyOaFt9puxfzvg.roa File: r3ZOFGK5nEJJEdyOaFt9puxfzvg.roa (raw, json) Hash identifier: 4ch/SlwIOkJvTrQsd7Si3tIrD1cQJLUrdu/fBGDtjrs= Subject key identifier: AF:76:4E:14:62:B9:9C:42:49:11:DC:8E:68:5B:7D:A6:EC:5F:CE:F8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2953 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3ZOFGK5nEJJEdyOaFt9puxfzvg.roa Signing time: Fri 01 Sep 2023 10:06:23 +0000 ROA not before: Fri 01 Sep 2023 10:06:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10579 (0x2953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AF764E1462B99C424911DC8E685B7DA6EC5FCEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:4f:10:32:b2:67:de:46:33:73:c0:aa:56: 80:52:46:a8:2b:2d:e3:92:0f:64:7e:2a:31:c4:6a: be:d2:e8:ff:ba:9d:d6:2a:d6:2b:64:a5:ca:3c:2e: 7c:ed:11:52:15:4f:f9:aa:ac:26:1b:9b:b0:fa:cf: b9:a2:aa:cf:39:64:3f:a3:7c:d6:62:0a:f4:64:54: 40:4a:6c:02:d3:72:c3:4e:ca:00:6d:6f:3d:7b:f9: 74:b8:f9:56:31:c9:1f:e8:7f:06:eb:1a:a1:ff:6e: 6b:b1:97:41:bd:01:4f:d7:0d:c0:6b:11:73:b1:11: e3:6b:9a:48:7a:ff:fa:25:ad:c8:8d:da:af:82:3c: 57:49:5b:7a:c9:6c:15:9d:fd:4e:e5:fd:aa:ae:c3: dd:a6:f9:70:94:4b:40:f4:82:30:0e:0c:47:00:84: 64:be:04:83:37:38:dd:01:5e:91:15:dd:aa:f9:48: 71:b5:77:c0:5b:7e:81:a8:f4:49:73:0a:c5:e4:62: 96:cd:2f:37:53:5c:a3:da:01:18:5a:2e:23:57:9f: 0c:ca:dd:47:06:2a:92:2c:15:7f:65:54:53:7a:5f: d2:3d:ec:30:1e:2c:33:46:d2:94:d3:dd:98:26:cd: 4c:2a:75:45:38:b5:87:73:db:1e:e3:5c:16:07:35: 7a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:76:4E:14:62:B9:9C:42:49:11:DC:8E:68:5B:7D:A6:EC:5F:CE:F8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3ZOFGK5nEJJEdyOaFt9puxfzvg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.120.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:e2:fd:25:4f:d7:02:a8:ca:6e:2f:39:5c:41:57:57:ba:76: a6:9e:30:f5:e3:78:c6:63:b0:26:fc:07:85:dc:04:4e:9b:8f: 0d:e8:85:af:e0:57:6a:1e:e6:80:48:b8:2c:2b:80:6b:ea:5f: 8d:c2:ee:1d:86:bf:d2:5e:9d:fb:d3:d6:6d:2a:93:53:bf:72: ac:69:4f:9a:59:79:65:50:5b:94:be:61:58:24:18:a5:ee:f8: 78:8e:84:69:4d:8c:ce:d4:b9:5e:e2:0b:d9:55:d5:7b:59:53: 10:bb:c6:79:4b:99:e6:58:8f:04:48:67:98:0f:fd:86:90:c6: c4:e8:b4:8c:3b:7d:87:53:3e:15:cf:1b:88:56:a2:ea:9b:0d: 8a:01:98:47:fc:c4:50:18:8b:e7:e9:6e:5c:73:57:67:d9:60: e5:ee:ad:40:ad:36:a6:4c:f2:3e:15:8b:fe:48:a6:6d:5f:bb: 8c:a8:fe:c4:6d:02:c0:a4:61:c5:61:bd:0f:fb:d6:dd:3d:af: bb:a9:8c:34:47:e7:69:33:82:53:1f:65:53:b1:bc:00:de:96: 59:60:40:63:1f:c0:1b:69:7f:a7:48:85:62:39:14:8a:25:56: db:2a:30:f2:19:fb:e0:a5:33:71:c3:43:b7:1f:11:b5:04:70: 09:38:93:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFGNzY0RTE0NjJCOTlD NDI0OTExREM4RTY4NUI3REE2RUM1RkNFRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbvE8QMrJn3kYzc8CqVoBSRqgrLeOSD2R+KjHEar7S6P+6ndYq 1itkpco8LnztEVIVT/mqrCYbm7D6z7miqs85ZD+jfNZiCvRkVEBKbALTcsNOygBt bz17+XS4+VYxyR/ofwbrGqH/bmuxl0G9AU/XDcBrEXOxEeNrmkh6//olrciN2q+C PFdJW3rJbBWd/U7l/aquw92m+XCUS0D0gjAODEcAhGS+BIM3ON0BXpEV3ar5SHG1 d8BbfoGo9ElzCsXkYpbNLzdTXKPaARhaLiNXnwzK3UcGKpIsFX9lVFN6X9I97DAe LDNG0pTT3ZgmzUwqdUU4tYdz2x7jXBYHNXojAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUr3ZOFGK5nEJJEdyOaFt9puxfzvgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3IzWk9GR0s1bkVKSkVkeU9h RnQ5cHV4Znp2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wngwDQYJKoZIhvcNAQELBQADggEBAF3i/SVP1wKoym4vOVxBV1e6dqaeMPXjeMZj sCb8B4XcBE6bjw3oha/gV2oe5oBIuCwrgGvqX43C7h2Gv9JenfvT1m0qk1O/cqxp T5pZeWVQW5S+YVgkGKXu+HiOhGlNjM7UuV7iC9lV1XtZUxC7xnlLmeZYjwRIZ5gP /YaQxsTotIw7fYdTPhXPG4hWouqbDYoBmEf8xFAYi+fpblxzV2fZYOXurUCtNqZM 8j4Vi/5Ipm1fu4yo/sRtAsCkYcVhvQ/71t09r7upjDRH52kzglMfZVOxvADelllg QGMfwBtpf6dIhWI5FIolVtsqMPIZ++ClM3HDQ7cfEbUEcAk4k0E= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org