$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa File: rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa (raw, json) Hash identifier: igXfIVrK4ac0XDg1Anqh4Qtn7destwgV7d7zqqDNwZU= Subject key identifier: AD:B7:58:74:7D:AD:DC:D8:BC:19:39:E2:0C:83:F2:31:CF:8D:9B:66 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AF7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa Signing time: Fri 01 Sep 2023 10:08:30 +0000 ROA not before: Fri 01 Sep 2023 10:08:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10999 (0x2af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ADB758747DADDCD8BC1939E20C83F231CF8D9B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:5c:26:f7:32:3a:99:81:16:cf:19:28:e9: b4:33:30:35:59:08:60:52:60:b3:e6:a4:22:c3:ab: e2:2f:47:da:09:94:58:e9:87:35:a0:da:ab:33:11: ea:50:b1:4f:ae:c2:ed:d3:ad:7e:06:08:bc:e0:03: 27:70:e8:b9:35:6a:b0:24:ee:46:7a:36:fd:27:4c: 3b:90:64:8a:90:b1:2e:0c:8f:66:a9:c8:d2:d6:a3: 36:96:f9:fc:d1:da:04:da:df:5e:65:df:a7:61:4b: 8f:df:67:7d:87:0e:83:36:82:ae:09:4b:6d:61:b1: 19:9f:f5:6f:00:31:ef:83:07:16:1d:25:7a:87:4c: 09:59:25:1a:ee:aa:c0:86:d8:50:7f:82:f2:c8:10: 41:22:3a:b6:e7:d0:fb:1e:8b:a9:f0:12:2a:22:51: 25:27:4c:56:39:1b:66:31:25:55:79:34:54:91:6d: 47:2c:b8:cf:31:94:e2:aa:de:58:1a:e9:02:58:d0: e4:6d:11:76:b5:15:ef:2d:30:60:d1:31:19:6c:ba: c5:cd:e6:32:80:0c:8c:8c:15:8c:6b:b5:6b:a7:29: 52:be:e4:4f:84:6e:0f:ba:65:4a:fc:1f:21:5d:ef: d7:9f:af:b7:50:0b:cd:76:87:90:32:11:3e:d6:b5: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:58:74:7D:AD:DC:D8:BC:19:39:E2:0C:83:F2:31:CF:8D:9B:66 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.244.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:98:d9:ad:1c:24:d4:cf:76:b6:4b:a7:5b:be:b0:ad:02:31: 92:40:5e:05:50:29:4d:96:2c:d5:1c:3c:f3:d3:43:07:3b:7e: e0:4e:ea:b8:a3:37:04:1e:8c:44:10:23:70:93:ea:3b:be:d1: 15:72:43:62:3f:88:14:b4:8d:14:aa:b5:ce:22:b7:1d:82:28: 11:ad:c5:05:0c:9f:81:ef:0f:7b:a9:7f:b6:3a:70:f1:66:6d: c0:8b:cb:66:29:d9:2b:29:24:20:d7:ab:29:8e:cd:80:71:74: a0:01:69:b3:44:a2:7c:7a:e9:63:f2:0a:57:22:36:12:9c:e8: 16:46:82:ce:e6:03:1b:6c:41:d9:d6:47:c2:76:e4:54:45:68: 33:b8:1b:8f:b3:76:ac:47:26:65:25:1e:82:aa:b1:32:5e:36: e3:dc:2b:5f:e0:7c:af:50:90:8a:60:28:eb:2b:83:b8:4e:c7: b4:c0:14:c4:69:27:d0:58:20:c1:2d:ed:44:e7:f4:d4:87:d5: cf:98:f2:41:21:0c:83:7d:e6:2b:65:fa:52:6e:a8:ca:37:32: 8a:d5:87:ee:e6:3b:3c:c0:d8:6a:40:c0:2a:ce:2b:49:55:b0: 31:e3:d8:04:39:8e:4c:93:83:d8:0f:dc:9f:e5:e8:c5:c6:7d: ab:64:5e:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFEQjc1ODc0N0RBRERD RDhCQzE5MzlFMjBDODNGMjMxQ0Y4RDlCNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs9Vwm9zI6mYEWzxko6bQzMDVZCGBSYLPmpCLDq+IvR9oJlFjp hzWg2qszEepQsU+uwu3TrX4GCLzgAydw6Lk1arAk7kZ6Nv0nTDuQZIqQsS4Mj2ap yNLWozaW+fzR2gTa315l36dhS4/fZ32HDoM2gq4JS21hsRmf9W8AMe+DBxYdJXqH TAlZJRruqsCG2FB/gvLIEEEiOrbn0Psei6nwEioiUSUnTFY5G2YxJVV5NFSRbUcs uM8xlOKq3lga6QJY0ORtEXa1Fe8tMGDRMRlsusXN5jKADIyMFYxrtWunKVK+5E+E bg+6ZUr8HyFd79efr7dQC812h5AyET7WtT7LAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrbdYdH2t3Ni8GTniDIPyMc+Nm2YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JiZFlkSDJ0M05pOEdUbmlE SVB5TWMtTm0yWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w/QwDQYJKoZIhvcNAQELBQADggEBAA2Y2a0cJNTPdrZLp1u+sK0CMZJAXgVQKU2W LNUcPPPTQwc7fuBO6rijNwQejEQQI3CT6ju+0RVyQ2I/iBS0jRSqtc4itx2CKBGt xQUMn4HvD3upf7Y6cPFmbcCLy2Yp2SspJCDXqymOzYBxdKABabNEonx66WPyClci NhKc6BZGgs7mAxtsQdnWR8J25FRFaDO4G4+zdqxHJmUlHoKqsTJeNuPcK1/gfK9Q kIpgKOsrg7hOx7TAFMRpJ9BYIMEt7UTn9NSH1c+Y8kEhDIN95itl+lJuqMo3MorV h+7mOzzA2GpAwCrOK0lVsDHj2AQ5jkyTg9gP3J/l6MXGfatkXtQ= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org