$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rKi-LQ43AdPdAR1JdWpC5wowVGE.roa File: rKi-LQ43AdPdAR1JdWpC5wowVGE.roa (raw, json) Hash identifier: SYgUXw3UiAqHVogC2y2figpLHsb8+Q5/KDR0pz/eork= Subject key identifier: AC:A8:BE:2D:0E:37:01:D3:DD:01:1D:49:75:6A:42:E7:0A:30:54:61 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2876 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rKi-LQ43AdPdAR1JdWpC5wowVGE.roa Signing time: Fri 01 Sep 2023 10:05:22 +0000 ROA not before: Fri 01 Sep 2023 10:05:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10358 (0x2876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ACA8BE2D0E3701D3DD011D49756A42E70A305461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:be:d9:38:1a:36:9e:ae:b3:0d:dd:2a:93: cc:4a:79:d0:15:a3:cb:00:73:27:79:65:93:55:43: b3:ad:64:6a:c5:c7:df:b2:ba:08:2d:65:a2:9a:b4: 50:6f:cf:f3:5d:3e:6a:72:62:e7:66:67:e0:55:f9: a7:07:82:6b:f2:e5:00:65:1a:ea:f3:78:ae:01:eb: 15:82:d4:6b:99:10:ae:9f:69:4e:aa:91:8b:83:a4: 42:41:ff:af:1d:c7:cf:ee:c8:38:fd:01:28:fa:04: 54:a4:5d:7a:6c:29:50:79:e8:eb:ba:4d:71:9a:59: fb:86:28:5c:e2:e0:9a:26:e6:a5:6e:6f:98:c3:ac: 5c:10:dc:ae:8c:fa:8c:dd:79:f3:13:6a:64:96:bd: e7:c5:75:06:23:9f:98:60:95:c9:36:b0:44:52:0b: 58:7f:25:00:18:bf:db:2e:22:de:49:20:9d:15:98: ee:98:61:c2:35:43:29:3f:e9:47:bf:e0:eb:fc:bb: b7:da:28:0d:db:de:9c:d6:e4:f3:96:ac:19:da:ef: 29:ae:3f:8f:5d:04:c4:4c:8b:8b:f0:89:f6:17:af: 5c:28:e1:83:90:dd:28:b2:1e:ca:5f:34:e2:f2:33: b4:22:58:14:38:2f:53:52:da:e5:f9:e6:23:93:14: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:BE:2D:0E:37:01:D3:DD:01:1D:49:75:6A:42:E7:0A:30:54:61 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rKi-LQ43AdPdAR1JdWpC5wowVGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.120.0/21 Signature Algorithm: sha256WithRSAEncryption 43:84:d2:a2:2e:1c:71:6c:73:3b:11:68:0e:c2:7d:ad:13:d5: 64:88:d6:61:36:11:26:df:f4:d2:8d:05:df:86:c6:87:54:de: 7d:35:bc:fc:8c:28:b3:8d:f8:8e:05:f0:25:5d:da:93:06:a9: 70:e8:00:1b:06:3d:b4:2b:bd:78:6a:d7:ea:b8:a2:de:af:8c: 96:b2:ce:0f:e9:ab:b2:3b:37:f8:ca:11:14:9e:51:c6:06:ce: c2:23:dc:55:51:6c:b6:9a:e5:5b:2a:63:a8:9b:f1:7e:3b:23: f3:08:a9:95:0f:d8:a7:a8:66:4b:18:74:65:68:87:b7:46:b8: 3a:d2:05:8b:27:c5:2b:c9:70:4d:76:92:d4:06:a0:40:1e:08: bd:a9:73:37:38:13:ad:06:64:1c:79:d7:21:7f:49:05:0f:6a: a9:dd:63:29:68:8d:3c:97:f8:2a:91:51:4f:00:07:6e:28:f2: 2c:77:4e:9d:44:3c:20:a1:65:4e:17:7e:d3:7b:fe:1d:94:0d: 92:ba:91:b5:8d:95:c0:67:3d:20:66:a5:53:df:f8:ae:75:4a: 43:95:cd:50:e3:63:56:11:22:eb:db:61:a0:1c:dc:bd:b2:c5: ab:5c:3e:77:46:6c:28:76:26:5e:0c:b9:a8:7c:81:f2:de:c8: e7:a1:f2:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFDQThCRTJEMEUzNzAx RDNERDAxMUQ0OTc1NkE0MkU3MEEzMDU0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBD77ZOBo2nq6zDd0qk8xKedAVo8sAcyd5ZZNVQ7OtZGrFx9+y uggtZaKatFBvz/NdPmpyYudmZ+BV+acHgmvy5QBlGurzeK4B6xWC1GuZEK6faU6q kYuDpEJB/68dx8/uyDj9ASj6BFSkXXpsKVB56Ou6TXGaWfuGKFzi4Jom5qVub5jD rFwQ3K6M+ozdefMTamSWvefFdQYjn5hglck2sERSC1h/JQAYv9suIt5JIJ0VmO6Y YcI1Qyk/6Ue/4Ov8u7faKA3b3pzW5POWrBna7ymuP49dBMRMi4vwifYXr1wo4YOQ 3SiyHspfNOLyM7QiWBQ4L1NS2uX55iOTFJvxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrKi+LQ43AdPdAR1JdWpC5wowVGEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JLaS1MUTQzQWRQZEFSMUpk V3BDNXdvd1ZHRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w3gwDQYJKoZIhvcNAQELBQADggEBAEOE0qIuHHFsczsRaA7Cfa0T1WSI1mE2ESbf 9NKNBd+GxodU3n01vPyMKLON+I4F8CVd2pMGqXDoABsGPbQrvXhq1+q4ot6vjJay zg/pq7I7N/jKERSeUcYGzsIj3FVRbLaa5VsqY6ib8X47I/MIqZUP2KeoZksYdGVo h7dGuDrSBYsnxSvJcE12ktQGoEAeCL2pczc4E60GZBx51yF/SQUPaqndYylojTyX +CqRUU8AB24o8ix3Tp1EPCChZU4XftN7/h2UDZK6kbWNlcBnPSBmpVPf+K51SkOV zVDjY1YRIuvbYaAc3L2yxatcPndGbCh2Jl4Muah8gfLeyOeh8tE= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org