$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZyGe0wVfU9QXq0TiXONP-F0wsA.roa File: vZyGe0wVfU9QXq0TiXONP-F0wsA.roa (raw, json) Hash identifier: G24saSN4RYhEYlyXRi1zNRRfuN5sL+cCSeU43R9tcV0= Subject key identifier: BD:9C:86:7B:4C:15:7D:4F:50:5E:AD:13:89:73:8D:3F:E1:74:C2:C0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2988 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZyGe0wVfU9QXq0TiXONP-F0wsA.roa Signing time: Fri 01 Sep 2023 10:06:43 +0000 ROA not before: Fri 01 Sep 2023 10:06:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.194.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10632 (0x2988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BD9C867B4C157D4F505EAD1389738D3FE174C2C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:4d:00:aa:f9:f6:7e:eb:18:73:ad:11:f8: 9c:9f:e8:2f:37:f6:b9:24:85:26:4a:28:d2:9a:06: 3e:1d:29:97:e2:27:00:20:c5:5d:41:51:41:70:73: cc:70:9d:ae:9c:ee:94:24:c5:72:0e:0c:6b:2a:82: 70:8d:34:42:80:4d:7e:09:a4:af:e4:60:2e:c3:8d: 6c:0d:a0:fb:2d:0d:96:43:a6:9d:f0:20:ff:c5:98: 17:47:34:4f:1a:40:84:9f:0d:5d:3c:e3:c1:ae:f0: 2d:97:0b:6d:84:af:17:f6:ee:c6:73:fb:79:bb:78: ae:eb:73:ac:45:aa:ed:ae:da:19:0d:59:6f:d3:2a: e4:b7:57:58:05:f7:03:26:e1:ad:8f:f4:1e:fc:67: cb:01:d8:13:4b:bb:5d:6e:68:0d:ba:be:3f:eb:58: 56:1a:f2:eb:6e:fb:b9:8c:31:f1:d2:10:6c:31:bf: 2d:bd:67:60:38:4d:5a:ae:bb:95:ab:6f:17:9a:f9: 2f:6f:07:93:28:af:11:dd:76:5e:45:45:58:4f:74: de:5b:4e:fd:f4:59:62:b3:6e:98:d5:28:63:92:c1: c4:18:c5:98:94:bb:65:f9:88:47:c9:07:55:4a:64: 5c:8b:8f:35:53:25:80:34:f2:a3:f7:3d:14:b1:d4: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9C:86:7B:4C:15:7D:4F:50:5E:AD:13:89:73:8D:3F:E1:74:C2:C0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZyGe0wVfU9QXq0TiXONP-F0wsA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.184.0/22 Signature Algorithm: sha256WithRSAEncryption 86:f9:12:0d:67:43:fb:6a:b8:c6:24:ea:0c:4d:bb:9c:01:52: 81:4a:f2:51:12:9a:6e:f9:36:f1:29:ae:a7:1c:bf:30:44:1a: 8b:5d:6e:54:2a:ce:a0:08:c6:c0:49:c9:d2:6c:53:aa:96:8b: d3:17:84:53:2b:61:d0:ec:4d:53:d3:8f:99:94:db:ec:bd:16: fd:b9:9f:d4:ee:bb:b9:b8:84:eb:df:77:a3:58:2b:78:73:5f: f3:b3:63:ab:84:99:67:13:ea:ae:f7:04:88:d3:1a:48:b5:f0: 05:62:47:4e:d3:97:ac:6b:40:30:d2:ab:bd:2d:00:a5:f6:0d: 4b:d8:99:3c:42:7f:a6:6e:0d:c6:f6:ec:c2:d3:f3:8f:f3:67: f5:8e:df:91:4d:31:b9:6e:40:bf:cd:58:98:12:39:9e:fa:ba: 9f:35:de:94:da:15:c3:d9:56:34:71:73:31:d9:1a:c6:52:19: da:47:65:9d:02:89:56:4b:20:a8:1f:85:70:05:b0:ea:c8:17: ac:9e:0c:c5:ff:10:68:91:f7:74:72:44:f6:67:61:bf:79:2f: 98:ca:2d:94:97:ae:7f:6b:4a:ef:73:a5:03:da:8d:de:dc:29: ba:05:c8:95:f8:23:e9:e8:bc:d0:84:a6:cc:03:c0:40:3a:d7: e7:70:1b:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJEOUM4NjdCNEMxNTdE NEY1MDVFQUQxMzg5NzM4RDNGRTE3NEMyQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChzU0Aqvn2fusYc60R+Jyf6C839rkkhSZKKNKaBj4dKZfiJwAg xV1BUUFwc8xwna6c7pQkxXIODGsqgnCNNEKATX4JpK/kYC7DjWwNoPstDZZDpp3w IP/FmBdHNE8aQISfDV0848Gu8C2XC22Erxf27sZz+3m7eK7rc6xFqu2u2hkNWW/T KuS3V1gF9wMm4a2P9B78Z8sB2BNLu11uaA26vj/rWFYa8utu+7mMMfHSEGwxvy29 Z2A4TVquu5Wrbxea+S9vB5MorxHddl5FRVhPdN5bTv30WWKzbpjVKGOSwcQYxZiU u2X5iEfJB1VKZFyLjzVTJYA08qP3PRSx1MKRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvZyGe0wVfU9QXq0TiXONP+F0wsAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZaeUdlMHdWZlU5UVhxMFRp WE9OUC1GMHdzQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wrgwDQYJKoZIhvcNAQELBQADggEBAIb5Eg1nQ/tquMYk6gxNu5wBUoFK8lESmm75 NvEprqccvzBEGotdblQqzqAIxsBJydJsU6qWi9MXhFMrYdDsTVPTj5mU2+y9Fv25 n9Tuu7m4hOvfd6NYK3hzX/OzY6uEmWcT6q73BIjTGki18AViR07Tl6xrQDDSq70t AKX2DUvYmTxCf6ZuDcb27MLT84/zZ/WO35FNMbluQL/NWJgSOZ76up813pTaFcPZ VjRxczHZGsZSGdpHZZ0CiVZLIKgfhXAFsOrIF6yeDMX/EGiR93RyRPZnYb95L5jK LZSXrn9rSu9zpQPajd7cKboFyJX4I+novNCEpswDwEA61+dwGzo= -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:01 2024 by rpki-client on console-ams.rpki-client.org