$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vLN-1qks013oeyheEon9v5DJcdY.roa File: vLN-1qks013oeyheEon9v5DJcdY.roa (raw, json) Hash identifier: R/WkRNlkE9PdrbVi5C3f4+gDU1taykLDyN35mc2Ip3U= Subject key identifier: BC:B3:7E:D6:A9:2C:D3:5D:E8:7B:28:5E:12:89:FD:BF:90:C9:71:D6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29CA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vLN-1qks013oeyheEon9v5DJcdY.roa Signing time: Fri 01 Sep 2023 10:07:04 +0000 ROA not before: Fri 01 Sep 2023 10:07:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10698 (0x29ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BCB37ED6A92CD35DE87B285E1289FDBF90C971D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:8b:1a:c1:e8:bd:d6:75:86:49:63:23:65: e0:e9:b9:10:d6:2d:07:50:04:a8:54:f9:69:3f:b7: 6c:7e:4d:8e:49:69:15:62:21:7d:39:1e:21:f7:bd: 7a:2a:e1:d4:a1:aa:80:4d:b7:ba:e0:53:e2:6c:04: da:2d:11:79:ed:9a:e4:50:9c:df:3d:9f:fe:2c:ab: cb:9b:76:bc:a6:04:91:ea:7e:f4:0e:a0:b2:8f:85: 00:04:18:5c:53:83:8e:2a:d6:b0:28:8a:ff:35:f8: a6:30:7d:39:4c:88:35:04:2f:fb:f1:7b:c5:bc:39: 55:d7:df:f4:b4:5f:8c:eb:ce:b7:00:3a:4d:19:8b: b3:ce:6c:be:2d:b6:ad:7d:85:c6:f5:ad:55:eb:d9: bc:14:be:b5:57:aa:b4:fc:c7:ef:c9:d1:b8:9d:66: 0c:9b:be:5b:36:55:91:73:f1:26:e0:7e:c2:aa:f6: dd:aa:4f:51:49:7d:80:8a:85:f8:58:89:a1:93:18: 2a:41:12:cf:9f:92:01:e4:80:2e:3f:24:30:f5:cb: bd:8c:e7:ef:9c:d7:21:1e:de:40:d7:26:6d:2f:eb: 65:70:c7:3d:52:4d:61:2f:e8:4c:b1:a7:39:9a:98: 47:b9:8f:e3:b5:ad:2c:4b:7d:60:84:0f:77:92:21: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:7E:D6:A9:2C:D3:5D:E8:7B:28:5E:12:89:FD:BF:90:C9:71:D6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vLN-1qks013oeyheEon9v5DJcdY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.44.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:bd:f9:34:5b:a4:a8:59:ea:ac:a2:c6:cb:1a:28:26:cf:bc: 7a:83:ea:1d:0c:d4:60:92:de:59:9f:72:41:0e:de:ff:c4:1b: 82:55:3d:b1:72:34:fb:e8:bd:e8:5e:31:8f:d3:41:ed:d5:7e: 1e:a1:ab:72:b2:0d:e4:ee:f7:d7:f9:79:68:99:a0:67:20:1e: e5:eb:1f:63:dc:c5:9d:07:bc:65:0e:c5:a7:79:10:1d:d3:3a: 5e:4f:ff:e0:d1:a5:19:cd:a3:7b:e3:ee:c3:49:b2:41:2f:a2: ee:94:82:eb:42:29:de:74:ba:95:8f:35:b1:f3:3e:81:f7:dc: 69:0a:c8:f1:bd:c9:7d:21:7b:b2:91:e3:0e:f9:6f:7a:80:dd: bf:fd:2e:6f:98:20:14:c1:34:80:d8:be:7c:6b:ac:5a:25:e8: 04:ff:5a:0c:82:70:ca:58:0c:55:64:4b:cb:18:61:41:19:8b: de:7b:8b:d2:34:cd:79:d0:e4:2a:0e:1a:8b:ac:5f:b0:b3:65: b0:da:9f:6b:8b:1b:28:26:0f:e8:98:17:aa:44:a1:9c:29:fc: 86:ce:30:01:ca:1b:90:cf:90:2e:94:6b:4f:ac:87:a9:5f:da: 79:ef:31:84:7d:a8:fd:ed:07:2c:89:e2:95:c6:aa:bb:3a:f2: 24:7c:a6:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJDQjM3RUQ2QTkyQ0Qz NURFODdCMjg1RTEyODlGREJGOTBDOTcxRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqTosawei91nWGSWMjZeDpuRDWLQdQBKhU+Wk/t2x+TY5JaRVi IX05HiH3vXoq4dShqoBNt7rgU+JsBNotEXntmuRQnN89n/4sq8ubdrymBJHqfvQO oLKPhQAEGFxTg44q1rAoiv81+KYwfTlMiDUEL/vxe8W8OVXX3/S0X4zrzrcAOk0Z i7PObL4ttq19hcb1rVXr2bwUvrVXqrT8x+/J0bidZgybvls2VZFz8SbgfsKq9t2q T1FJfYCKhfhYiaGTGCpBEs+fkgHkgC4/JDD1y72M5++c1yEe3kDXJm0v62Vwxz1S TWEv6EyxpzmamEe5j+O1rSxLfWCED3eSId3HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvLN+1qks013oeyheEon9v5DJcdYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZMTi0xcWtzMDEzb2V5aGVF b245djVESmNkWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wiwwDQYJKoZIhvcNAQELBQADggEBAE+9+TRbpKhZ6qyixssaKCbPvHqD6h0M1GCS 3lmfckEO3v/EG4JVPbFyNPvoveheMY/TQe3Vfh6hq3KyDeTu99f5eWiZoGcgHuXr H2PcxZ0HvGUOxad5EB3TOl5P/+DRpRnNo3vj7sNJskEvou6UgutCKd50upWPNbHz PoH33GkKyPG9yX0he7KR4w75b3qA3b/9Lm+YIBTBNIDYvnxrrFol6AT/WgyCcMpY DFVkS8sYYUEZi957i9I0zXnQ5CoOGousX7CzZbDan2uLGygmD+iYF6pEoZwp/IbO MAHKG5DPkC6Ua0+sh6lf2nnvMYR9qP3tByyJ4pXGqrs68iR8pqc= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org