$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0JN-hWuVHj-j8GutPuyNQB3qgOw.roa File: 0JN-hWuVHj-j8GutPuyNQB3qgOw.roa (raw, json) Hash identifier: Cj9UztmAQcp6ZCbyGjTLPeslyD7MzKWkOlun/5fQ+5o= Subject key identifier: D0:93:7E:85:6B:95:1E:3F:A3:F0:6B:AD:3E:EC:8D:40:1D:EA:80:EC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FCD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0JN-hWuVHj-j8GutPuyNQB3qgOw.roa Signing time: Mon 26 Aug 2024 05:28:52 +0000 ROA not before: Mon 26 Aug 2024 05:28:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12237 (0x2fcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D0937E856B951E3FA3F06BAD3EEC8D401DEA80EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:8b:82:1d:93:53:cf:38:72:b2:28:7a:36: d4:7f:7c:4c:1e:cb:e6:1c:f9:e9:65:b0:c0:48:d0: d8:2d:eb:2b:84:e8:52:b2:36:c6:b0:a9:7f:f8:31: 62:b6:53:1a:a9:b0:d6:42:97:01:3f:37:58:95:9d: 13:fd:e5:88:d1:3f:07:db:9e:a4:bd:7f:0a:39:62: 81:d5:98:01:70:0c:4c:d1:4a:1c:95:a8:f6:f2:be: e3:95:99:e0:8f:3e:4c:78:de:dd:10:fa:9e:80:9d: 9b:ff:c0:e7:a3:12:b5:4f:84:9d:d9:b1:45:f4:6a: 81:bd:a4:2c:7c:55:86:ad:19:48:d4:d1:5b:fb:9c: b2:65:50:90:7a:99:84:20:91:93:d0:a7:98:e3:23: ae:f6:3c:dc:bf:fe:94:45:e7:46:65:11:a4:ae:36: 13:78:c4:ab:5a:9a:cc:d0:8f:47:23:c3:ba:1f:5b: b1:80:24:47:76:17:49:fb:a4:4b:1d:a2:07:0f:66: c5:18:e5:4c:13:80:ad:cc:8a:da:64:c5:f6:3a:12: b8:80:09:61:48:81:a2:d5:e6:4d:2f:88:13:fc:45: 7b:c6:9c:b8:e6:0c:f3:03:07:3c:e1:23:ac:a1:60: e8:04:82:17:3b:7c:7b:4f:9d:27:c9:e7:cb:96:dc: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:93:7E:85:6B:95:1E:3F:A3:F0:6B:AD:3E:EC:8D:40:1D:EA:80:EC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0JN-hWuVHj-j8GutPuyNQB3qgOw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.176.0/20 Signature Algorithm: sha256WithRSAEncryption a3:e2:0f:9d:c1:66:64:af:13:69:5f:c0:a5:38:2c:00:a5:3e: 22:6d:ca:4b:fa:b3:19:34:28:a2:78:7c:07:7a:46:86:a0:68: 7a:8a:ec:9e:43:66:ef:db:f0:29:ce:c7:bb:ce:0e:4a:51:ad: 80:fd:9f:92:66:7d:fe:f2:2d:60:26:4d:e6:82:ce:a7:02:3d: a2:c0:c8:f6:24:10:7e:51:b2:1f:f0:0a:c6:c8:cf:c4:37:0d: fd:97:7e:82:0d:e0:24:42:61:61:22:38:96:92:fe:df:15:f6: 79:48:43:a7:e7:f8:31:aa:e3:42:58:00:94:cd:b5:62:ae:92: 47:9b:07:f9:70:14:0f:a5:03:13:fa:b1:38:02:68:47:78:20: b4:b3:b6:3d:5d:4f:98:2b:93:a3:62:3e:29:bc:1d:b8:84:b7: 27:3a:71:6a:81:43:b1:7f:7e:d6:24:81:56:22:23:59:54:9a: 03:4b:e4:6f:b3:21:23:5e:45:62:22:a5:7b:db:eb:16:e3:e5: 7b:32:99:d3:1e:a0:cd:ec:5c:eb:f1:2c:cc:f0:8c:e3:c3:b2: 90:e2:b7:de:f0:cb:2f:71:32:0a:bd:09:24:88:d8:29:85:b7: 45:43:47:ef:c2:05:91:19:b0:d9:c0:ae:09:5b:57:d1:1c:62: c4:ef:98:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQwOTM3RTg1NkI5NTFF M0ZBM0YwNkJBRDNFRUM4RDQwMURFQTgwRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+nIuCHZNTzzhysih6NtR/fEwey+Yc+ellsMBI0Ngt6yuE6FKy NsawqX/4MWK2UxqpsNZClwE/N1iVnRP95YjRPwfbnqS9fwo5YoHVmAFwDEzRShyV qPbyvuOVmeCPPkx43t0Q+p6AnZv/wOejErVPhJ3ZsUX0aoG9pCx8VYatGUjU0Vv7 nLJlUJB6mYQgkZPQp5jjI672PNy//pRF50ZlEaSuNhN4xKtamszQj0cjw7ofW7GA JEd2F0n7pEsdogcPZsUY5UwTgK3MitpkxfY6EriACWFIgaLV5k0viBP8RXvGnLjm DPMDBzzhI6yhYOgEghc7fHtPnSfJ58uW3KTXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0JN+hWuVHj+j8GutPuyNQB3qgOwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBKTi1oV3VWSGotajhHdXRQ dXlOUUIzcWdPdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 w7AwDQYJKoZIhvcNAQELBQADggEBAKPiD53BZmSvE2lfwKU4LAClPiJtykv6sxk0 KKJ4fAd6RoagaHqK7J5DZu/b8CnOx7vODkpRrYD9n5Jmff7yLWAmTeaCzqcCPaLA yPYkEH5Rsh/wCsbIz8Q3Df2XfoIN4CRCYWEiOJaS/t8V9nlIQ6fn+DGq40JYAJTN tWKukkebB/lwFA+lAxP6sTgCaEd4ILSztj1dT5grk6NiPim8HbiEtyc6cWqBQ7F/ ftYkgVYiI1lUmgNL5G+zISNeRWIipXvb6xbj5XsymdMeoM3sXOvxLMzwjOPDspDi t97wyy9xMgq9CSSI2CmFt0VDR+/CBZEZsNnArglbV9EcYsTvmB4= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org