$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t_k-s0TU6uSd-jZy_zgf0URKG6E.roa File: t_k-s0TU6uSd-jZy_zgf0URKG6E.roa (raw, json) Hash identifier: f7kB7oWk5f/VQtJIuyGlXpzw2WkctGnXezU2AKTcCh8= Subject key identifier: B7:F9:3E:B3:44:D4:EA:E4:9D:FA:36:72:FF:38:1F:D1:44:4A:1B:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2872 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t_k-s0TU6uSd-jZy_zgf0URKG6E.roa Signing time: Fri 01 Sep 2023 10:05:20 +0000 ROA not before: Fri 01 Sep 2023 10:05:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.192.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10354 (0x2872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B7F93EB344D4EAE49DFA3672FF381FD1444A1BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c3:fe:7f:07:a5:dd:39:b8:33:10:cd:f7:5b: 8c:56:b9:06:5d:66:dc:a5:21:d5:9b:38:fc:72:50: b8:69:55:0c:f9:4d:8c:25:7b:18:7d:89:2f:3f:ed: 27:c3:a7:6e:7f:6e:8a:27:05:5b:82:d8:a7:a8:3a: ee:31:df:2e:d7:c6:d6:02:39:fd:67:b1:a6:02:79: 58:52:bf:78:6e:eb:da:2c:2d:b2:2f:f3:9a:8c:9e: 9d:da:b5:07:fc:7d:26:cc:3a:c6:a1:e2:59:cb:65: e5:08:19:4d:f4:29:51:01:63:99:10:68:6e:c6:b7: 66:db:b9:33:2f:36:1f:7a:a6:f4:cc:87:eb:99:33: 0b:8a:bf:67:be:28:a9:5c:a8:a1:6b:d9:91:41:e0: 46:12:65:a1:24:9e:e9:e4:ef:b3:ba:1a:39:b0:0e: db:14:47:d4:1c:c2:b4:dd:9f:37:6e:f9:43:11:a4: 2e:e7:e4:34:c5:1c:39:85:53:80:31:bf:6c:b7:5b: f2:d6:a5:95:c3:c1:59:34:85:3d:d6:57:e6:0d:96: e6:66:dd:e4:64:91:c2:2a:de:f7:9c:be:4d:be:6c: b7:48:4f:af:8e:10:37:68:df:53:6b:1f:8e:3c:69: bb:98:e5:a5:13:1d:51:66:3b:a6:1f:7d:6b:c7:d9: fd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:3E:B3:44:D4:EA:E4:9D:FA:36:72:FF:38:1F:D1:44:4A:1B:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t_k-s0TU6uSd-jZy_zgf0URKG6E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.188.0/22 Signature Algorithm: sha256WithRSAEncryption 34:18:72:5f:e8:7d:5a:7c:d2:66:dd:ed:2d:99:b7:e0:a7:e0: d0:20:bf:37:28:27:20:01:9d:27:0e:3f:76:da:5f:a4:54:a1: 8d:75:5c:0a:a2:a1:b4:47:3a:ea:39:c4:43:ce:e4:95:0e:a0: 39:a7:26:9d:0a:67:0b:41:d4:c1:54:64:0f:47:1b:ea:8a:fe: 1e:29:66:18:f8:76:51:c8:6b:c6:81:62:0d:ec:0f:30:c5:17: 38:e5:b8:46:68:0d:c5:f3:e0:e5:d1:e6:d5:9c:16:76:9c:dc: 36:91:fc:ae:8f:89:06:96:18:48:b4:62:04:39:bb:e4:83:1b: 5a:38:f0:d7:02:5e:44:5b:21:03:04:24:86:1e:69:fc:3e:bd: fa:20:26:81:73:04:fb:70:49:15:37:0e:ad:a2:98:d4:ab:61: 2d:01:30:47:0b:aa:7c:a8:6e:ec:96:9f:b3:bc:e0:33:53:5a: 7a:8e:c4:b4:5e:6e:0e:2b:e1:b1:73:f6:9c:66:1d:54:89:7a: d2:e8:30:31:11:a8:5c:73:c5:c1:d3:bb:1f:86:96:bc:33:81: 39:52:d5:7b:2c:a5:33:56:cf:af:34:91:26:a7:48:3b:fe:ff: 2f:0e:dc:35:ff:35:b7:34:f0:08:47:5c:88:3b:03:2d:01:27: 8f:f6:03:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3RjkzRUIzNDRENEVB RTQ5REZBMzY3MkZGMzgxRkQxNDQ0QTFCQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDww/5/B6XdObgzEM33W4xWuQZdZtylIdWbOPxyULhpVQz5TYwl exh9iS8/7SfDp25/boonBVuC2KeoOu4x3y7XxtYCOf1nsaYCeVhSv3hu69osLbIv 85qMnp3atQf8fSbMOsah4lnLZeUIGU30KVEBY5kQaG7Gt2bbuTMvNh96pvTMh+uZ MwuKv2e+KKlcqKFr2ZFB4EYSZaEknunk77O6GjmwDtsUR9QcwrTdnzdu+UMRpC7n 5DTFHDmFU4Axv2y3W/LWpZXDwVk0hT3WV+YNluZm3eRkkcIq3vecvk2+bLdIT6+O EDdo31NrH448abuY5aUTHVFmO6YffWvH2f0TAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUt/k+s0TU6uSd+jZy/zgf0URKG6EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Rfay1zMFRVNnVTZC1qWnlf emdmMFVSS0c2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wLwwDQYJKoZIhvcNAQELBQADggEBADQYcl/ofVp80mbd7S2Zt+Cn4NAgvzcoJyAB nScOP3baX6RUoY11XAqiobRHOuo5xEPO5JUOoDmnJp0KZwtB1MFUZA9HG+qK/h4p Zhj4dlHIa8aBYg3sDzDFFzjluEZoDcXz4OXR5tWcFnac3DaR/K6PiQaWGEi0YgQ5 u+SDG1o48NcCXkRbIQMEJIYeafw+vfogJoFzBPtwSRU3Dq2imNSrYS0BMEcLqnyo buyWn7O84DNTWnqOxLRebg4r4bFz9pxmHVSJetLoMDERqFxzxcHTux+GlrwzgTlS 1XsspTNWz680kSanSDv+/y8O3DX/Nbc08AhHXIg7Ay0BJ4/2A30= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org