$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmuQPqoE8LvoiATGy18Wb_3FTgc.roa File: zmuQPqoE8LvoiATGy18Wb_3FTgc.roa (raw, json) Hash identifier: 4E/ZzGbexkOKr9ypEAx5jlAjZif2ChKdiENhax7+8Cw= Subject key identifier: CE:6B:90:3E:AA:04:F0:BB:E8:88:04:C6:CB:5F:16:6F:FD:C5:4E:07 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2AA6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmuQPqoE8LvoiATGy18Wb_3FTgc.roa Signing time: Fri 01 Sep 2023 10:08:08 +0000 ROA not before: Fri 01 Sep 2023 10:08:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10918 (0x2aa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:08:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CE6B903EAA04F0BBE88804C6CB5F166FFDC54E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:ea:e7:7a:93:7e:da:68:99:a9:6b:da:fb: 8a:94:fb:7d:05:dc:0e:3d:c5:20:72:67:1c:cb:8a: c4:73:fe:07:3b:ae:10:b7:e0:75:22:28:24:a1:6c: fc:1e:ae:ee:1c:8f:83:fa:dd:32:5f:9d:c1:99:9f: 5f:b2:5e:de:c8:eb:69:d9:6d:0b:23:83:af:7a:4f: cb:37:59:49:98:9c:2f:46:4e:ad:69:81:ce:ab:56: 43:5f:68:b0:74:17:e6:fe:fd:e9:1e:09:1c:d7:4f: b1:71:32:b4:99:a6:44:59:47:ae:e8:3d:35:06:7b: 44:43:b1:67:09:9e:d3:0d:24:54:ad:7b:29:46:52: c0:5b:d1:4a:bd:6c:4a:88:b9:ba:7d:e6:cc:00:d0: 10:c1:7c:9f:5d:71:99:29:e7:db:d0:48:cd:6e:8e: 20:03:e5:fb:4b:2c:3a:8f:ac:8a:1e:c8:0f:9f:b5: 8b:b3:10:bd:73:2e:e4:c9:ae:1d:25:53:0c:63:69: 71:95:ca:bc:0f:65:94:6c:99:79:a9:80:9a:b0:c1: 8c:9e:20:ca:84:12:5e:f2:47:f9:87:24:9a:4f:96: 53:6a:73:14:a4:a7:da:b0:3a:b2:03:ba:23:e6:60: 2c:69:65:64:46:8d:63:7e:cc:f8:74:16:8a:2c:6f: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:90:3E:AA:04:F0:BB:E8:88:04:C6:CB:5F:16:6F:FD:C5:4E:07 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmuQPqoE8LvoiATGy18Wb_3FTgc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.247.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:85:ac:25:1f:12:7f:79:57:59:58:41:66:09:fe:99:5c:3b: 0b:34:f6:0b:42:74:1b:75:b0:7a:b0:6f:4f:b1:71:39:67:5b: 41:61:86:3b:1d:e0:89:f8:b9:71:e8:4f:aa:24:5f:ae:29:47: 84:83:34:8d:78:8b:ca:ae:50:ea:0b:e9:78:22:e2:e5:b7:16: 2c:60:88:98:60:d8:dc:77:50:d7:b0:69:5a:ad:64:d0:ce:d3: fd:ba:5d:f0:a4:07:eb:b5:2c:02:ee:4a:bc:78:8c:69:7a:e6: d9:d2:b7:c4:00:30:6d:c6:71:82:06:fe:b1:a0:da:cb:f5:da: 7e:12:f1:d6:c4:98:fa:68:75:80:c4:c9:17:22:80:75:ad:72: 51:ef:63:19:fe:85:6e:25:e6:1f:d6:0d:29:4b:4d:0d:d4:3b: b4:62:03:62:96:b2:78:99:2d:3a:c8:a5:81:63:37:08:35:46: 50:a7:50:a5:78:c7:18:e1:99:89:d0:aa:8f:a8:41:54:a3:61: e4:99:61:57:8d:c8:9f:20:d2:d7:dd:65:2d:1b:3b:f5:06:25: e1:91:af:63:51:2d:6e:5c:ef:25:fe:ec:13:c0:78:83:04:82: 29:ba:b2:37:29:df:24:cf:ab:68:76:95:0e:8b:f1:17:b9:ad: 7c:af:07:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA4MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENFNkI5MDNFQUEwNEYw QkJFODg4MDRDNkNCNUYxNjZGRkRDNTRFMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4p+rnepN+2miZqWva+4qU+30F3A49xSByZxzLisRz/gc7rhC3 4HUiKCShbPweru4cj4P63TJfncGZn1+yXt7I62nZbQsjg696T8s3WUmYnC9GTq1p gc6rVkNfaLB0F+b+/ekeCRzXT7FxMrSZpkRZR67oPTUGe0RDsWcJntMNJFSteylG UsBb0Uq9bEqIubp95swA0BDBfJ9dcZkp59vQSM1ujiAD5ftLLDqPrIoeyA+ftYuz EL1zLuTJrh0lUwxjaXGVyrwPZZRsmXmpgJqwwYyeIMqEEl7yR/mHJJpPllNqcxSk p9qwOrIDuiPmYCxpZWRGjWN+zPh0Foosb/LTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzmuQPqoE8LvoiATGy18Wb/3FTgcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ptdVFQcW9FOEx2b2lBVEd5 MThXYl8zRlRnYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wfcwDQYJKoZIhvcNAQELBQADggEBAGqFrCUfEn95V1lYQWYJ/plcOws09gtCdBt1 sHqwb0+xcTlnW0Fhhjsd4In4uXHoT6okX64pR4SDNI14i8quUOoL6Xgi4uW3Fixg iJhg2Nx3UNewaVqtZNDO0/26XfCkB+u1LALuSrx4jGl65tnSt8QAMG3GcYIG/rGg 2sv12n4S8dbEmPpodYDEyRcigHWtclHvYxn+hW4l5h/WDSlLTQ3UO7RiA2KWsniZ LTrIpYFjNwg1RlCnUKV4xxjhmYnQqo+oQVSjYeSZYVeNyJ8g0tfdZS0bO/UGJeGR r2NRLW5c7yX+7BPAeIMEgim6sjcp3yTPq2h2lQ6L8Re5rXyvB/Q= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:07 2024 by rpki-client on console-ams.rpki-client.org