$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rZZ51zK4MzvwOrJun6QUujuyXhg.roa File: rZZ51zK4MzvwOrJun6QUujuyXhg.roa (raw, json) Hash identifier: zfoew0tL9fRwXhuGFimdoUFKJNeXxoJ2sW0QbzVU9k8= Subject key identifier: AD:96:79:D7:32:B8:33:3B:F0:3A:B2:6E:9F:A4:14:BA:3B:B2:5E:18 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2828 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rZZ51zK4MzvwOrJun6QUujuyXhg.roa Signing time: Fri 01 Sep 2023 10:05:01 +0000 ROA not before: Fri 01 Sep 2023 10:05:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10280 (0x2828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AD9679D732B8333BF03AB26E9FA414BA3BB25E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:73:df:d1:89:3f:c4:1f:a0:47:53:87:e2: d5:74:ee:e0:46:b2:b7:3a:0a:af:46:31:dd:8a:38: 94:34:40:f0:30:e6:ec:2a:d9:a6:c5:ea:53:a0:d0: cc:b8:12:ec:82:d1:2e:e4:a4:0f:f0:a5:9e:e7:c2: b6:25:b7:5e:73:7e:c2:fe:c0:14:35:06:ba:a9:25: 1b:7d:69:5b:d3:77:f9:2e:95:08:cb:18:a2:5c:17: 23:ba:42:cd:49:f6:b5:8d:8b:66:99:63:2a:d0:5e: b3:0a:37:8f:3a:f7:2e:ba:f5:1a:8c:5b:a4:25:af: ae:74:b1:5b:ec:c7:15:d0:b8:2c:ba:71:40:9b:97: 25:4f:b1:81:9e:ef:83:9d:f4:9b:d0:64:24:0b:34: b7:6a:f6:cc:af:eb:fe:16:76:44:a6:a1:60:c8:ed: a3:88:5c:9c:79:63:cc:6c:62:e1:85:a7:1c:72:21: b0:25:00:71:7b:65:64:b8:5d:75:f7:9f:60:af:cb: 42:38:fd:9a:e3:5e:39:fb:7a:2a:bc:4a:39:6c:55: 50:99:9c:9e:f1:16:04:d3:fa:44:80:bb:99:7b:c0: c1:95:ab:88:54:03:93:c1:ca:ed:73:da:98:53:7d: 5e:01:fe:d3:82:ac:fc:b9:7b:cb:a2:ce:f6:9c:01: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:79:D7:32:B8:33:3B:F0:3A:B2:6E:9F:A4:14:BA:3B:B2:5E:18 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rZZ51zK4MzvwOrJun6QUujuyXhg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.168.0/22 Signature Algorithm: sha256WithRSAEncryption 94:dc:17:1c:58:b3:19:83:2f:2e:73:28:2d:12:3f:f7:98:b5: 97:e0:5a:2b:14:c6:7e:61:10:e9:55:58:00:af:dd:4c:58:4e: 50:53:8a:43:eb:ed:ca:c1:54:de:fc:22:34:bd:06:c9:e0:f0: 9b:c4:cf:2f:8a:3b:b4:4b:b4:7b:c8:fa:fc:a1:a8:cb:19:29: bd:0a:0b:ef:3d:bf:8b:49:36:1b:23:b0:43:82:8c:5f:c1:e1: b0:40:1d:b9:0c:a2:45:a8:e9:0f:0a:f7:b2:b8:7b:97:97:2f: 1d:e7:c6:26:3b:95:ec:97:29:65:3b:53:9b:02:ec:5c:aa:1f: 77:01:b8:22:33:3a:21:19:30:ec:e8:f5:8c:53:01:98:79:82: e8:98:87:0f:48:8e:e2:8c:1a:d6:d9:a4:4f:5b:d4:56:d6:67: 1d:54:8d:ee:ed:11:a6:f9:d6:f1:95:c4:e9:c3:83:d9:cb:55: 78:96:46:6c:e0:58:f6:85:2b:58:56:47:c1:9c:13:21:db:f4: 45:3d:69:da:fb:54:05:57:e3:af:f1:ce:0d:8b:59:34:8a:18: 8a:f0:00:4c:fe:84:fc:77:23:42:b8:fe:7d:10:bd:23:11:61: 00:8d:55:c0:87:d8:ef:1c:5f:46:de:ac:bf:9d:8f:fb:dd:77: c8:27:7e:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFEOTY3OUQ3MzJCODMz M0JGMDNBQjI2RTlGQTQxNEJBM0JCMjVFMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO3HPf0Yk/xB+gR1OH4tV07uBGsrc6Cq9GMd2KOJQ0QPAw5uwq 2abF6lOg0My4EuyC0S7kpA/wpZ7nwrYlt15zfsL+wBQ1BrqpJRt9aVvTd/kulQjL GKJcFyO6Qs1J9rWNi2aZYyrQXrMKN4869y669RqMW6Qlr650sVvsxxXQuCy6cUCb lyVPsYGe74Od9JvQZCQLNLdq9syv6/4WdkSmoWDI7aOIXJx5Y8xsYuGFpxxyIbAl AHF7ZWS4XXX3n2Cvy0I4/ZrjXjn7eiq8SjlsVVCZnJ7xFgTT+kSAu5l7wMGVq4hU A5PByu1z2phTfV4B/tOCrPy5e8uizvacAQhvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrZZ51zK4MzvwOrJun6QUujuyXhgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JaWjUxeks0TXp2d09ySnVu NlFVdWp1eVhoZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wqgwDQYJKoZIhvcNAQELBQADggEBAJTcFxxYsxmDLy5zKC0SP/eYtZfgWisUxn5h EOlVWACv3UxYTlBTikPr7crBVN78IjS9Bsng8JvEzy+KO7RLtHvI+vyhqMsZKb0K C+89v4tJNhsjsEOCjF/B4bBAHbkMokWo6Q8K97K4e5eXLx3nxiY7leyXKWU7U5sC 7FyqH3cBuCIzOiEZMOzo9YxTAZh5guiYhw9IjuKMGtbZpE9b1FbWZx1Uje7tEab5 1vGVxOnDg9nLVXiWRmzgWPaFK1hWR8GcEyHb9EU9adr7VAVX46/xzg2LWTSKGIrw AEz+hPx3I0K4/n0QvSMRYQCNVcCH2O8cX0berL+dj/vdd8gnfqg= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org