$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sBXCF4eQe4mJucF1P4tM1DfXgxw.roa File: sBXCF4eQe4mJucF1P4tM1DfXgxw.roa (raw, json) Hash identifier: KQts0fkH4GrZ4LNbvZ1DaPHzCpAoAARFKNyc5rDTk5Q= Subject key identifier: B0:15:C2:17:87:90:7B:89:89:B9:C1:75:3F:8B:4C:D4:37:D7:83:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27F9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sBXCF4eQe4mJucF1P4tM1DfXgxw.roa Signing time: Fri 01 Sep 2023 10:04:47 +0000 ROA not before: Fri 01 Sep 2023 10:04:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.195.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10233 (0x27f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B015C21787907B8989B9C1753F8B4CD437D7831C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:15:55:7b:b7:6a:e4:69:8a:94:c3:25:11: 01:7e:59:52:00:ad:55:46:bd:ce:33:b9:1f:ff:0e: d3:ea:4c:63:c6:9f:0d:98:9d:0c:47:76:23:3a:1b: 92:8c:00:b6:53:f5:ce:59:a3:78:3c:a2:a2:6b:ba: 9c:38:41:38:da:00:7e:98:9f:b1:f7:cd:d0:ec:f7: 39:69:09:06:bf:9a:fb:ae:f2:54:5a:4a:49:96:ca: 78:51:70:0f:4f:c7:02:be:b2:e3:e1:56:6e:67:5e: c9:35:3f:ee:f4:40:98:17:0d:0d:ce:39:db:4f:3d: 31:5c:58:89:4f:ba:6d:86:fa:35:5b:5f:e1:08:cd: 1f:4b:d7:b9:30:50:59:74:55:c7:b8:0d:f7:4a:33: e2:85:07:cc:3e:48:f4:f9:2a:9b:f7:d0:2c:9d:15: 84:cf:ba:fe:90:8a:3e:4f:51:a0:2d:00:f9:08:36: f8:69:13:e1:4b:d6:d7:3e:f7:72:83:32:ce:62:23: ee:84:6c:fe:3d:97:4f:cc:56:0f:6c:f5:ca:2a:1d: 62:dc:4f:e2:ad:41:72:e9:7b:6a:d5:70:aa:c5:8d: f0:f1:13:8d:54:02:66:59:9c:29:c0:b9:6a:88:b3: 35:d4:41:ca:eb:b7:b5:07:3c:3f:84:ca:6c:ea:90: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:C2:17:87:90:7B:89:89:B9:C1:75:3F:8B:4C:D4:37:D7:83:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sBXCF4eQe4mJucF1P4tM1DfXgxw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.32.0/19 Signature Algorithm: sha256WithRSAEncryption 23:78:ab:a9:1a:ab:2e:66:9f:ca:95:aa:79:8f:b8:c7:8b:35: 74:16:ad:d2:27:ee:8b:03:06:f6:36:4c:9a:2c:ad:6f:79:83: 4d:c2:50:b5:f5:fd:75:8a:4a:6d:f9:e5:79:79:88:a8:bc:d1: c5:49:f1:db:ee:cc:04:75:52:69:7e:54:dd:ed:d7:0a:7e:9d: 72:8c:8d:23:39:25:f2:5f:bf:8b:6d:c7:15:29:0b:fa:10:e4: 6c:62:62:63:23:03:ab:b4:d2:73:db:f9:fe:80:e4:96:2d:16: 2d:21:04:ea:b0:fa:1f:4d:31:aa:d3:9c:55:a7:16:fd:cc:41: ad:21:f4:0e:1a:c9:64:94:7a:a2:4d:f5:56:0e:a8:51:bf:78: ec:ef:6d:a0:5a:2f:db:28:26:ae:67:6e:94:06:d5:53:d5:b9: c8:f5:2c:de:1e:eb:88:49:f0:ef:59:de:74:d9:9c:32:e2:86: f1:2a:de:60:fa:3d:4b:ae:c9:fa:ec:a3:6f:12:80:7d:19:db: 11:37:0d:5f:d9:79:01:d8:d6:bb:6f:5b:48:66:f6:fa:06:99: ce:24:e2:f3:56:0b:88:2f:99:07:40:f2:8a:0e:b5:2c:1f:e1: 1e:05:63:c9:29:01:2b:0a:72:74:89:fc:84:ab:d5:35:0a:02: c6:3e:7d:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIwMTVDMjE3ODc5MDdC ODk4OUI5QzE3NTNGOEI0Q0Q0MzdENzgzMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYnxVVe7dq5GmKlMMlEQF+WVIArVVGvc4zuR//DtPqTGPGnw2Y nQxHdiM6G5KMALZT9c5Zo3g8oqJrupw4QTjaAH6Yn7H3zdDs9zlpCQa/mvuu8lRa SkmWynhRcA9PxwK+suPhVm5nXsk1P+70QJgXDQ3OOdtPPTFcWIlPum2G+jVbX+EI zR9L17kwUFl0Vce4DfdKM+KFB8w+SPT5Kpv30CydFYTPuv6Qij5PUaAtAPkINvhp E+FL1tc+93KDMs5iI+6EbP49l0/MVg9s9coqHWLcT+KtQXLpe2rVcKrFjfDxE41U AmZZnCnAuWqIszXUQcrrt7UHPD+EymzqkIR1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsBXCF4eQe4mJucF1P4tM1DfXgxwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NCWENGNGVRZTRtSnVjRjFQ NHRNMURmWGd4dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wyAwDQYJKoZIhvcNAQELBQADggEBACN4q6kaqy5mn8qVqnmPuMeLNXQWrdIn7osD BvY2TJosrW95g03CULX1/XWKSm355Xl5iKi80cVJ8dvuzAR1Uml+VN3t1wp+nXKM jSM5JfJfv4ttxxUpC/oQ5GxiYmMjA6u00nPb+f6A5JYtFi0hBOqw+h9NMarTnFWn Fv3MQa0h9A4ayWSUeqJN9VYOqFG/eOzvbaBaL9soJq5nbpQG1VPVucj1LN4e64hJ 8O9Z3nTZnDLihvEq3mD6PUuuyfrso28SgH0Z2xE3DV/ZeQHY1rtvW0hm9voGmc4k 4vNWC4gvmQdA8ooOtSwf4R4FY8kpASsKcnSJ/ISr1TUKAsY+fcc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org