$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0uYdV1wlpigYcfQ5y72m4GTpSqE.roa File: 0uYdV1wlpigYcfQ5y72m4GTpSqE.roa (raw, json) Hash identifier: 9/9TgyABWp+vDjOnr/d0eZy+rCiYrdl92rz/zWKDqjk= Subject key identifier: D2:E6:1D:57:5C:25:A6:28:18:71:F4:39:CB:BD:A6:E0:64:E9:4A:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31F3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0uYdV1wlpigYcfQ5y72m4GTpSqE.roa Signing time: Mon 26 Aug 2024 05:31:07 +0000 ROA not before: Mon 26 Aug 2024 05:31:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12787 (0x31f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D2E61D575C25A6281871F439CBBDA6E064E94AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:c3:9b:1d:68:78:86:70:3b:08:eb:3f:6f: 7a:16:f5:59:6c:dd:4b:96:dc:a2:5f:dc:fe:0d:25: f6:78:09:cd:4d:3a:88:95:f3:38:72:58:4c:69:21: 44:ca:8a:4a:40:94:ee:87:15:a0:c9:8d:45:01:26: 70:d5:80:96:2c:53:bc:bc:a3:39:0f:52:56:be:f9: 2b:36:e9:d2:49:eb:2e:5e:d8:e1:eb:e9:be:cf:57: a8:7b:63:e4:3f:7a:44:9a:99:a4:7f:e3:ef:e7:8e: 6c:4d:4b:df:f9:db:30:a3:2a:a7:a8:59:a0:07:19: 45:75:46:7f:06:59:ff:17:c0:60:1a:54:fa:c9:ae: 22:50:3f:49:b8:8d:7c:d2:78:e7:97:5a:ee:7e:5d: 1b:33:61:96:c1:da:4e:ab:eb:3c:de:11:33:0e:1b: d8:e3:26:de:6d:c1:68:fb:26:21:8d:cf:23:48:a5: 2d:2b:d1:97:a7:d6:11:d3:8f:d4:3b:ef:6a:fb:be: 87:09:9b:52:a2:99:5f:db:29:d7:ad:93:31:1c:f9: ae:aa:49:81:22:3c:1a:a5:bd:89:43:a2:2b:f6:08: be:11:30:b7:df:fc:1e:8b:8a:45:6b:35:b7:50:5d: 9d:23:6a:17:97:c7:96:c5:38:21:70:d4:66:e7:25: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E6:1D:57:5C:25:A6:28:18:71:F4:39:CB:BD:A6:E0:64:E9:4A:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0uYdV1wlpigYcfQ5y72m4GTpSqE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.100.0/22 Signature Algorithm: sha256WithRSAEncryption 87:40:8d:94:9a:4a:1c:7f:c6:b8:d1:73:1e:49:e6:df:a7:e8: b7:48:08:a2:a0:81:3f:e7:cb:ec:f8:49:eb:34:ed:59:2d:ce: 69:59:09:b6:b7:c5:80:59:56:63:3a:55:f1:ff:85:9b:fa:3b: c1:db:14:42:11:92:9c:f7:a9:95:12:90:cb:f9:86:03:40:aa: 66:5d:3c:a6:b4:6c:bd:e5:47:19:6c:84:35:42:b0:ca:73:79: 00:dd:ea:f7:01:14:e5:d0:be:48:96:0e:2f:4a:2f:9e:ac:e2: d1:93:19:c9:dc:94:fd:f8:88:93:08:ac:d2:d1:fb:bc:84:47: dd:fd:3c:f1:07:44:59:50:bb:dd:c3:33:d2:91:0e:94:cf:bc: 9b:25:31:f9:23:50:51:c4:30:d5:07:dc:6d:1d:68:7d:99:98: c7:7c:d1:6b:91:4b:9e:0e:41:b1:ca:cd:4c:ff:96:f0:a2:45: b5:dd:f4:f8:dc:7e:1c:ff:db:33:77:e9:2a:ab:97:dd:d3:10: 6a:32:7a:64:f2:b4:48:63:d3:4e:75:17:18:0b:fa:85:a4:9d: 59:82:d8:67:f5:e5:58:94:5a:92:67:c9:dd:96:99:b9:c0:22: f6:82:fa:34:10:c8:68:97:2b:f9:b1:ed:43:3d:d6:2a:a1:3d: e9:c2:56:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQyRTYxRDU3NUMyNUE2 MjgxODcxRjQzOUNCQkRBNkUwNjRFOTRBQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtfsObHWh4hnA7COs/b3oW9Vls3UuW3KJf3P4NJfZ4Cc1NOoiV 8zhyWExpIUTKikpAlO6HFaDJjUUBJnDVgJYsU7y8ozkPUla++Ss26dJJ6y5e2OHr 6b7PV6h7Y+Q/ekSamaR/4+/njmxNS9/52zCjKqeoWaAHGUV1Rn8GWf8XwGAaVPrJ riJQP0m4jXzSeOeXWu5+XRszYZbB2k6r6zzeETMOG9jjJt5twWj7JiGNzyNIpS0r 0Zen1hHTj9Q772r7vocJm1KimV/bKdetkzEc+a6qSYEiPBqlvYlDoiv2CL4RMLff /B6LikVrNbdQXZ0jaheXx5bFOCFw1GbnJX2BAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0uYdV1wlpigYcfQ5y72m4GTpSqEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzB1WWRWMXdscGlnWWNmUTV5 NzJtNEdUcFNxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wWQwDQYJKoZIhvcNAQELBQADggEBAIdAjZSaShx/xrjRcx5J5t+n6LdICKKggT/n y+z4Ses07VktzmlZCba3xYBZVmM6VfH/hZv6O8HbFEIRkpz3qZUSkMv5hgNAqmZd PKa0bL3lRxlshDVCsMpzeQDd6vcBFOXQvkiWDi9KL56s4tGTGcnclP34iJMIrNLR +7yER939PPEHRFlQu93DM9KRDpTPvJslMfkjUFHEMNUH3G0daH2ZmMd80WuRS54O QbHKzUz/lvCiRbXd9Pjcfhz/2zN36Sqrl93TEGoyemTytEhj0051FxgL+oWknVmC 2Gf15ViUWpJnyd2WmbnAIvaC+jQQyGiXK/mx7UM91iqhPenCVu8= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org