$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTil4-lQQz013GDZMVPIdM5_NZc.roa File: uTil4-lQQz013GDZMVPIdM5_NZc.roa (raw, json) Hash identifier: p7rGfTowaYe2nXZMftXpxFZkoq9pyszZq1DNFiyCOnw= Subject key identifier: B9:38:A5:E3:E9:50:43:3D:35:DC:60:D9:31:53:C8:74:CE:7F:35:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28F8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTil4-lQQz013GDZMVPIdM5_NZc.roa Signing time: Fri 01 Sep 2023 10:05:59 +0000 ROA not before: Fri 01 Sep 2023 10:05:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10488 (0x28f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B938A5E3E950433D35DC60D93153C874CE7F3597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:c3:48:e9:18:35:6b:e9:c6:6a:f0:e7:c7: 31:9c:45:9d:89:50:12:a5:8d:e6:d5:4d:93:ea:78: 53:51:84:61:19:62:2f:ea:07:4b:2b:f2:07:94:71: 21:73:98:2f:a7:0f:38:9d:e9:47:ea:ec:f8:ab:27: f7:fe:04:ec:d4:24:af:fb:99:42:ce:a2:89:45:02: 14:db:d9:0e:ca:a1:15:c6:0d:55:ea:f1:3c:c1:25: b2:5f:eb:17:ed:ce:3e:31:82:8d:94:de:ff:8e:c5: d4:a3:4e:34:e6:9e:cb:53:ea:24:4c:41:99:79:60: 07:5b:69:6c:74:14:29:88:5f:45:50:f4:2f:64:a1: dd:e5:62:1a:ef:ad:4f:ed:e8:8f:f1:8b:b3:05:01: e9:9a:8d:7f:6a:38:3a:1c:a7:e6:58:13:e5:d0:46: 19:44:0d:fc:ef:cc:3b:20:2e:3a:83:cb:46:a5:9d: 14:ae:87:7e:e2:34:f0:9b:58:dd:f4:f4:fd:8f:54: f0:37:1d:82:ca:7e:9d:9d:b3:de:a5:19:1d:e8:c5: 62:2e:ef:cc:bc:74:3e:71:22:f1:28:56:55:bd:ca: f3:35:c9:19:6b:cc:bb:53:66:47:f9:e7:32:56:7f: d4:90:2d:75:f9:1f:c0:4a:35:37:43:4c:24:56:89: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:38:A5:E3:E9:50:43:3D:35:DC:60:D9:31:53:C8:74:CE:7F:35:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTil4-lQQz013GDZMVPIdM5_NZc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.20.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:6a:f9:e1:e7:1b:b0:2a:e8:b9:c8:a0:e3:da:d9:78:c6:5e: e7:be:b1:bf:fd:39:0a:6a:fe:cc:b8:48:4a:a4:1a:10:a7:73: 5d:85:c7:be:8e:fc:88:71:b9:8f:3a:61:9b:21:aa:6c:52:c1: 21:c5:0b:43:78:45:56:28:be:1c:11:9a:64:fb:cb:54:65:85: 58:be:1d:12:6d:c6:8c:01:06:48:43:64:d4:cf:d5:7e:54:04: 27:69:e9:a8:b3:e7:29:c9:fe:64:8a:20:f5:2f:08:20:f8:52: 34:9c:44:2f:c3:49:8c:3c:cc:a7:01:4a:cf:02:c2:ad:79:16: 8b:fe:bd:1d:92:15:74:44:12:ba:1f:78:8f:da:5e:f6:6f:90: 70:04:07:05:0e:c7:94:f4:12:5a:46:b6:a0:9d:5a:3a:fb:b7: 5d:43:e8:25:08:c7:14:99:00:bb:1d:84:68:5c:30:ad:29:90: e7:77:22:81:57:02:01:b8:5f:c5:6b:72:a9:70:eb:58:ad:d9: fc:0d:e1:27:46:01:f9:31:5e:d3:9c:ed:2a:e1:a8:32:5b:22: ed:8f:26:62:a3:67:54:d1:50:32:97:68:8a:53:13:6a:82:14: 86:49:ab:72:84:c5:90:86:0f:43:d7:4a:b0:12:3f:ac:65:09: 02:72:17:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI5MzhBNUUzRTk1MDQz M0QzNURDNjBEOTMxNTNDODc0Q0U3RjM1OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLvcNI6Rg1a+nGavDnxzGcRZ2JUBKljebVTZPqeFNRhGEZYi/q B0sr8geUcSFzmC+nDzid6Ufq7PirJ/f+BOzUJK/7mULOoolFAhTb2Q7KoRXGDVXq 8TzBJbJf6xftzj4xgo2U3v+OxdSjTjTmnstT6iRMQZl5YAdbaWx0FCmIX0VQ9C9k od3lYhrvrU/t6I/xi7MFAemajX9qODocp+ZYE+XQRhlEDfzvzDsgLjqDy0alnRSu h37iNPCbWN309P2PVPA3HYLKfp2ds96lGR3oxWIu78y8dD5xIvEoVlW9yvM1yRlr zLtTZkf55zJWf9SQLXX5H8BKNTdDTCRWidrpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuTil4+lQQz013GDZMVPIdM5/NZcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VUaWw0LWxRUXowMTNHRFpN VlBJZE01X05aYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 whQwDQYJKoZIhvcNAQELBQADggEBAI9q+eHnG7Aq6LnIoOPa2XjGXue+sb/9OQpq /sy4SEqkGhCnc12Fx76O/IhxuY86YZshqmxSwSHFC0N4RVYovhwRmmT7y1RlhVi+ HRJtxowBBkhDZNTP1X5UBCdp6aiz5ynJ/mSKIPUvCCD4UjScRC/DSYw8zKcBSs8C wq15Fov+vR2SFXREErofeI/aXvZvkHAEBwUOx5T0ElpGtqCdWjr7t11D6CUIxxSZ ALsdhGhcMK0pkOd3IoFXAgG4X8Vrcqlw61it2fwN4SdGAfkxXtOc7SrhqDJbIu2P JmKjZ1TRUDKXaIpTE2qCFIZJq3KExZCGD0PXSrASP6xlCQJyF7Y= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org