$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa File: -t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa (raw, json) Hash identifier: VW7CSG5DaRzBwkl+ydxr/QH8p32IoKfbL751xO7J9hQ= Subject key identifier: FA:DD:9C:81:0E:A5:B2:B5:6C:16:92:37:8A:32:00:F1:06:03:BC:B6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3088 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa Signing time: Mon 26 Aug 2024 05:29:32 +0000 ROA not before: Mon 26 Aug 2024 05:29:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12424 (0x3088) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FADD9C810EA5B2B56C1692378A3200F10603BCB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:e6:52:3a:e7:73:d6:ab:2d:c6:f5:ac:86: b6:ad:a5:52:22:da:82:fc:f4:2d:98:e7:a1:e9:f9: 53:ae:07:89:85:84:d0:30:a6:4c:6d:3f:d9:de:a7: 84:6e:84:3f:02:42:65:60:39:16:46:7f:96:22:5f: c0:0e:6a:8b:7a:ed:bf:ff:99:64:df:e7:ab:73:05: 66:c3:da:9e:78:e6:07:93:fa:d1:3a:d8:49:81:b7: 30:9d:1d:1a:9e:28:9e:f5:69:a4:7f:5e:49:62:84: 22:98:db:cc:e4:41:36:16:79:17:f1:7b:6d:dc:ce: b2:ca:fe:75:16:bd:37:ff:d8:77:b5:c3:a3:ba:42: 8a:03:1a:9a:67:a2:5d:67:96:44:5d:ce:99:b1:3b: c2:2e:bf:a3:b6:5d:06:6f:c0:91:c2:e5:39:92:a7: 24:ab:fd:f4:bf:28:5e:a9:3a:de:46:14:70:61:8a: 40:5b:a3:da:5a:5d:2d:fe:04:a6:2a:19:a9:62:2c: 94:d6:7a:33:9e:85:80:e5:11:b4:d9:6f:25:7c:82: a7:1d:00:f4:79:17:2e:63:55:86:e1:77:30:19:55: 68:dd:04:c8:ac:d0:3c:fd:f9:1f:a3:d7:bd:80:bc: 52:6a:6f:05:5d:42:ba:c5:f6:71:9d:a2:04:be:c5: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DD:9C:81:0E:A5:B2:B5:6C:16:92:37:8A:32:00:F1:06:03:BC:B6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t2cgQ6lsrVsFpI3ijIA8QYDvLY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.107.0/24 Signature Algorithm: sha256WithRSAEncryption 44:92:95:36:ce:24:86:03:ed:d4:6e:95:0f:20:48:c5:fe:4f: 34:1c:23:d2:83:16:ed:ba:23:5a:93:50:1e:53:9a:7b:c4:d9: b1:1b:d3:28:36:d1:68:ab:79:e7:7f:44:50:8e:7d:b4:ae:0f: 6f:02:8e:b0:c6:12:1b:cb:dd:99:06:75:4f:05:c6:dc:d3:87: 42:b4:92:a0:02:55:a9:da:57:2e:b4:7a:74:fc:e7:de:c0:64: 72:b2:87:c2:d5:18:89:53:62:6d:f0:0a:a9:f8:f2:63:8f:f4: c6:b6:f2:f3:af:a2:d7:9a:d0:73:1d:1a:9f:a3:e2:c5:04:39: 57:89:98:44:8f:82:a1:d8:4c:0c:e6:1a:b9:7c:18:75:2e:48: 44:be:82:6c:d1:9f:51:76:0b:66:58:e4:0d:41:7e:e4:96:17: 65:f9:e0:ae:7a:5d:c7:8a:13:c8:27:42:99:c8:33:ab:56:4e: 2c:1f:b1:e9:c9:86:4a:e1:80:4b:be:b0:21:09:fa:41:04:f7: 2a:f9:ef:30:b2:f9:e4:0e:19:bf:96:50:03:cf:c5:74:66:04: 45:e3:97:f7:e1:a5:d7:8e:b4:58:41:37:2f:4b:f5:84:67:c2: 97:26:51:35:c1:48:21:74:cf:b8:82:26:4c:5e:60:92:bf:08: 16:99:87:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBREQ5QzgxMEVBNUIy QjU2QzE2OTIzNzhBMzIwMEYxMDYwM0JDQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1EOZSOudz1qstxvWshratpVIi2oL89C2Y56Hp+VOuB4mFhNAw pkxtP9nep4RuhD8CQmVgORZGf5YiX8AOaot67b//mWTf56tzBWbD2p545geT+tE6 2EmBtzCdHRqeKJ71aaR/XklihCKY28zkQTYWeRfxe23czrLK/nUWvTf/2He1w6O6 QooDGppnol1nlkRdzpmxO8Iuv6O2XQZvwJHC5TmSpySr/fS/KF6pOt5GFHBhikBb o9paXS3+BKYqGaliLJTWejOehYDlEbTZbyV8gqcdAPR5Fy5jVYbhdzAZVWjdBMis 0Dz9+R+j172AvFJqbwVdQrrF9nGdogS+xXbJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+t2cgQ6lsrVsFpI3ijIA8QYDvLYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy10MmNnUTZsc3JWc0ZwSTNp aklBOFFZRHZMWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wWswDQYJKoZIhvcNAQELBQADggEBAESSlTbOJIYD7dRulQ8gSMX+TzQcI9KDFu26 I1qTUB5TmnvE2bEb0yg20Wireed/RFCOfbSuD28CjrDGEhvL3ZkGdU8FxtzTh0K0 kqACVanaVy60enT8597AZHKyh8LVGIlTYm3wCqn48mOP9Ma28vOvotea0HMdGp+j 4sUEOVeJmESPgqHYTAzmGrl8GHUuSES+gmzRn1F2C2ZY5A1BfuSWF2X54K56XceK E8gnQpnIM6tWTiwfsenJhkrhgEu+sCEJ+kEE9yr57zCy+eQOGb+WUAPPxXRmBEXj l/fhpdeOtFhBNy9L9YRnwpcmUTXBSCF0z7iCJkxeYJK/CBaZh1s= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org