$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa File: -pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa (raw, json) Hash identifier: cYh0YECQsJcEu0sNq42pKWsRENUNZyy+bQ46iMIe9E0= Subject key identifier: FA:92:E7:93:FC:C0:78:9C:31:4B:40:14:38:9D:03:AF:14:45:CD:56 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2F99 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa Signing time: Mon 26 Aug 2024 05:28:39 +0000 ROA not before: Mon 26 Aug 2024 05:28:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12185 (0x2f99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FA92E793FCC0789C314B4014389D03AF1445CD56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:44:a9:96:0d:a7:6b:30:c7:fa:d1:6d:b1:10: 41:46:2d:55:81:77:75:62:c4:9c:18:5f:10:97:ba: 16:98:3b:e9:e3:62:ae:48:ed:d2:63:f7:c1:46:e3: ed:34:f4:d5:e0:64:9f:67:37:00:b6:e8:4b:01:60: 4f:aa:c1:49:06:be:fe:f6:bf:f8:c4:08:8c:68:e8: 8e:12:3a:63:d3:3f:46:53:fe:eb:f2:c0:1a:49:8c: 6d:5e:a0:29:9d:38:b6:88:d7:43:e3:d9:38:75:f1: 9e:94:a8:51:d6:06:61:34:69:82:0c:f0:1d:f7:c6: f1:9a:d5:dd:87:86:f1:8b:a0:5d:72:a1:a9:80:7e: 56:97:e2:0e:2a:48:3f:ce:40:c3:49:13:8f:d2:e0: b0:c8:56:91:7c:8a:76:9e:24:49:29:23:93:ea:0b: 56:91:94:3b:7e:4a:b6:d3:d3:bc:17:bb:84:cd:bb: 3b:b0:00:32:3e:2a:78:3c:a2:76:35:18:4f:25:f8: 05:dd:ff:96:2e:dd:87:dc:35:63:83:35:42:1b:4b: f8:e2:63:0b:a1:72:7b:04:40:fd:63:0c:41:ad:f7: 6c:39:87:d8:f5:4d:e0:d3:99:17:be:35:92:51:71: f4:a8:dd:64:fa:a3:63:b2:ee:12:4a:61:a5:58:63: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:E7:93:FC:C0:78:9C:31:4B:40:14:38:9D:03:AF:14:45:CD:56 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-pLnk_zAeJwxS0AUOJ0DrxRFzVY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.144.0/20 Signature Algorithm: sha256WithRSAEncryption aa:f8:7b:b7:86:64:75:6c:c8:c3:55:7f:47:4a:4e:96:b6:ec: d3:72:8f:a4:08:7c:98:fa:80:8f:90:77:7c:33:2f:4d:69:75: 0a:08:bc:f5:91:79:de:5d:a7:87:a9:7d:5f:51:a6:e0:8e:14: 8f:13:ec:c6:42:7f:7b:f4:dc:83:51:9d:26:5f:7e:de:50:b3: 57:68:7a:61:55:0e:ba:c7:78:5b:14:90:fe:3d:a9:68:91:de: bd:99:3c:46:71:b7:bc:05:6f:5d:35:a1:f0:83:86:7b:47:a3: 31:7d:f0:bf:fc:a9:e1:48:b0:48:b9:6e:12:84:b9:64:88:f6: df:58:17:ea:96:d2:07:31:11:02:62:06:b6:46:9a:d9:0f:b4: ce:e3:84:6f:f4:94:b4:30:7e:93:c0:23:89:23:8a:72:9a:ff: 94:73:91:4d:be:21:dd:3d:97:21:d6:47:6d:4d:4d:e9:59:1c: 76:85:f0:5f:60:ad:73:12:3e:2b:0f:52:4f:dc:64:62:08:03: 12:34:72:51:97:31:8e:8c:ab:9f:13:89:69:7a:c0:a7:21:f2: 32:24:09:c4:c6:ef:05:04:af:ba:95:23:29:60:ac:fd:5f:e6: 25:74:aa:b3:15:a1:41:5f:5e:cd:81:5b:10:2c:00:40:3a:8a: e1:f6:c7:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBOTJFNzkzRkNDMDc4 OUMzMTRCNDAxNDM4OUQwM0FGMTQ0NUNENTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxRKmWDadrMMf60W2xEEFGLVWBd3VixJwYXxCXuhaYO+njYq5I 7dJj98FG4+009NXgZJ9nNwC26EsBYE+qwUkGvv72v/jECIxo6I4SOmPTP0ZT/uvy wBpJjG1eoCmdOLaI10Pj2Th18Z6UqFHWBmE0aYIM8B33xvGa1d2HhvGLoF1yoamA flaX4g4qSD/OQMNJE4/S4LDIVpF8inaeJEkpI5PqC1aRlDt+SrbT07wXu4TNuzuw ADI+Kng8onY1GE8l+AXd/5Yu3YfcNWODNUIbS/jiYwuhcnsEQP1jDEGt92w5h9j1 TeDTmRe+NZJRcfSo3WT6o2Oy7hJKYaVYY74RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+pLnk/zAeJwxS0AUOJ0DrxRFzVYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1wTG5rX3pBZUp3eFMwQVVP SjBEcnhSRnpWWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 w5AwDQYJKoZIhvcNAQELBQADggEBAKr4e7eGZHVsyMNVf0dKTpa27NNyj6QIfJj6 gI+Qd3wzL01pdQoIvPWRed5dp4epfV9RpuCOFI8T7MZCf3v03INRnSZfft5Qs1do emFVDrrHeFsUkP49qWiR3r2ZPEZxt7wFb101ofCDhntHozF98L/8qeFIsEi5bhKE uWSI9t9YF+qW0gcxEQJiBrZGmtkPtM7jhG/0lLQwfpPAI4kjinKa/5RzkU2+Id09 lyHWR21NTelZHHaF8F9grXMSPisPUk/cZGIIAxI0clGXMY6Mq58TiWl6wKch8jIk CcTG7wUEr7qVIylgrP1f5iV0qrMVoUFfXs2BWxAsAEA6iuH2xww= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org