$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-T8glDKvADEceUu9_1uolUjZIUI.roa File: -T8glDKvADEceUu9_1uolUjZIUI.roa (raw, json) Hash identifier: oq2k1aiSrCJ7Jgh4gmmyVD2CsqZtmxLV/jX6r11AW3c= Subject key identifier: F9:3F:20:94:32:AF:00:31:1C:79:4B:BD:FF:5B:A8:95:48:D9:21:42 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FFA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-T8glDKvADEceUu9_1uolUjZIUI.roa Signing time: Mon 26 Aug 2024 05:29:01 +0000 ROA not before: Mon 26 Aug 2024 05:29:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.16.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12282 (0x2ffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F93F209432AF00311C794BBDFF5BA89548D92142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:ba:62:e7:de:49:55:d1:9e:5f:25:51:04: 8b:03:fa:d4:e4:5d:33:62:00:2e:f9:54:17:fe:af: bc:41:62:84:92:e4:ee:af:73:08:61:c4:62:c9:55: 1b:1e:07:2b:cb:df:e0:d6:b5:cb:81:9d:f7:6c:f6: ff:d0:de:f9:47:3f:d8:82:d0:49:a2:94:f5:b7:0c: 6c:71:1d:49:64:3a:ae:5d:f6:e2:5d:43:fe:36:3f: eb:ba:65:19:fc:55:b6:7d:30:ed:f9:a5:cf:e7:99: ac:13:8c:9b:74:07:82:6b:ee:f6:fc:28:9c:96:99: 91:7d:5b:f9:bc:42:06:15:16:62:e3:1d:c5:23:62: 61:c8:d8:bf:0b:b9:53:89:f2:1a:37:a6:55:08:93: aa:2b:12:6b:b5:77:7d:84:56:71:bc:d3:b5:09:c7: 3f:ff:9b:62:61:e8:8e:51:a3:eb:aa:05:eb:2b:d7: 01:33:7a:1f:8f:e5:aa:c8:4f:98:3b:c0:97:98:8c: d2:dd:1b:dd:ac:b5:1f:90:63:e1:e7:05:64:7c:c0: 66:1e:9b:69:fe:68:5e:cf:0c:ad:6c:de:3d:27:74: ce:16:a5:0e:ab:6d:6b:db:4d:23:0e:e0:dd:83:da: 0e:7c:87:5d:30:85:19:c7:1d:71:02:7c:b3:4f:8e: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3F:20:94:32:AF:00:31:1C:79:4B:BD:FF:5B:A8:95:48:D9:21:42 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-T8glDKvADEceUu9_1uolUjZIUI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.16.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:80:b4:62:93:d4:5d:5a:3c:6e:40:a6:44:2e:e3:a0:1e:fa: f7:18:7b:eb:61:60:ed:71:34:7a:3f:c1:99:ae:42:f2:d5:72: 55:19:15:aa:c1:b3:03:4e:c4:e6:09:2e:b5:cb:39:d1:91:8b: 6d:cf:16:9d:6d:5b:4e:6a:c4:10:37:9d:e8:d9:52:1b:79:37: b2:61:f4:30:bd:db:78:f5:27:a2:72:2d:58:4e:4d:25:6c:8f: 61:a7:16:fe:da:1d:0f:72:c1:da:a9:84:1a:f3:29:3a:e5:5c: 87:65:7c:91:14:4f:1a:51:1b:fb:6b:5e:ae:96:d3:f9:c0:e1: c8:91:93:81:56:ba:1b:02:1b:d6:7f:b2:c4:3b:fd:72:11:b0: af:21:c0:00:13:7c:46:d3:f6:20:0c:a7:bd:72:d8:33:91:1f: 62:e1:d5:a3:09:ae:03:21:ae:08:5c:3a:34:81:9e:14:4d:36: ce:a9:dd:08:b4:71:4a:cc:46:f2:bc:d2:20:97:2d:9f:17:26: 9d:a5:04:a0:59:f1:b1:b5:3d:f1:93:8a:e1:61:49:27:0d:a3: 29:50:53:d4:60:c4:b3:6d:8f:54:49:5f:40:fe:f1:23:fa:54: 56:c0:34:55:05:d1:b1:bd:15:e6:c5:ae:7f:11:40:f1:ac:63: 12:32:0d:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5M0YyMDk0MzJBRjAw MzExQzc5NEJCREZGNUJBODk1NDhEOTIxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA27pi595JVdGeXyVRBIsD+tTkXTNiAC75VBf+r7xBYoSS5O6v cwhhxGLJVRseByvL3+DWtcuBnfds9v/Q3vlHP9iC0EmilPW3DGxxHUlkOq5d9uJd Q/42P+u6ZRn8VbZ9MO35pc/nmawTjJt0B4Jr7vb8KJyWmZF9W/m8QgYVFmLjHcUj YmHI2L8LuVOJ8ho3plUIk6orEmu1d32EVnG807UJxz//m2Jh6I5Ro+uqBesr1wEz eh+P5arIT5g7wJeYjNLdG92stR+QY+HnBWR8wGYem2n+aF7PDK1s3j0ndM4WpQ6r bWvbTSMO4N2D2g58h10whRnHHXECfLNPjlmhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+T8glDKvADEceUu9/1uolUjZIUIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1UOGdsREt2QURFY2VVdTlf MXVvbFVqWklVSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq ARAwDQYJKoZIhvcNAQELBQADggEBAJ6AtGKT1F1aPG5ApkQu46Ae+vcYe+thYO1x NHo/wZmuQvLVclUZFarBswNOxOYJLrXLOdGRi23PFp1tW05qxBA3nejZUht5N7Jh 9DC923j1J6JyLVhOTSVsj2GnFv7aHQ9ywdqphBrzKTrlXIdlfJEUTxpRG/trXq6W 0/nA4ciRk4FWuhsCG9Z/ssQ7/XIRsK8hwAATfEbT9iAMp71y2DORH2Lh1aMJrgMh rghcOjSBnhRNNs6p3Qi0cUrMRvK80iCXLZ8XJp2lBKBZ8bG1PfGTiuFhSScNoylQ U9RgxLNtj1RJX0D+8SP6VFbANFUF0bG9FebFrn8RQPGsYxIyDV0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org