$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1EMDdLGsgWAo-DK2AvCwinU2MW0.roa File: 1EMDdLGsgWAo-DK2AvCwinU2MW0.roa (raw, json) Hash identifier: 8HxdU7/E9At79PsaAF7HK1jPjjx7kkDJ//gx8Gkb4LQ= Subject key identifier: D4:43:03:74:B1:AC:81:60:28:F8:32:B6:02:F0:B0:8A:75:36:31:6D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FE8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1EMDdLGsgWAo-DK2AvCwinU2MW0.roa Signing time: Mon 26 Aug 2024 05:28:58 +0000 ROA not before: Mon 26 Aug 2024 05:28:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12264 (0x2fe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D4430374B1AC816028F832B602F0B08A7536316D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:68:57:6a:41:30:89:16:5c:75:8a:a2:88: 4c:67:d2:d6:14:b3:46:14:94:9c:85:5d:4e:49:70: 80:d7:58:3b:c6:b2:33:c0:09:3c:c4:af:c8:1b:78: 9c:b4:7d:bd:6d:12:ce:12:27:2f:2f:32:0b:4a:4e: 2a:a1:9b:8e:c6:5d:b0:60:47:ae:db:fe:66:28:5a: fe:45:f3:2e:02:5c:b3:e1:94:86:a0:0f:ac:ba:60: 2f:3a:f3:05:33:55:6a:c7:db:ed:cf:9c:f9:59:89: 5b:10:49:27:3b:9c:4f:2e:a4:e5:56:93:94:37:f8: d8:eb:47:82:8c:ef:e7:e9:98:24:5d:8e:bf:9c:7c: 8a:c4:d2:43:68:0e:fc:27:d4:2d:3a:0f:94:02:67: 88:00:89:1c:32:52:d7:52:7c:91:20:17:19:3c:5c: a6:a0:ce:b3:ba:04:0f:28:e4:15:c1:b0:8c:e1:ea: 18:8d:cf:e6:f0:a4:95:dc:33:e4:0d:ac:4c:41:66: e0:53:82:82:f2:ae:6d:2b:9b:a8:b5:c0:2b:40:c8: cb:28:8c:16:5c:5b:ba:cf:fe:bb:c8:19:b5:fe:d8: bf:ca:01:ce:c6:a1:cd:35:af:bd:ef:7e:01:5a:11: 98:1c:55:14:c6:a0:23:0e:94:98:d6:cb:e3:d1:97: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:43:03:74:B1:AC:81:60:28:F8:32:B6:02:F0:B0:8A:75:36:31:6D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1EMDdLGsgWAo-DK2AvCwinU2MW0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.77.0/24 Signature Algorithm: sha256WithRSAEncryption 47:f9:13:37:97:29:82:86:96:74:cd:66:30:72:a5:26:99:71: 38:5f:90:e9:f0:92:c6:e5:71:ad:f2:e5:90:5c:59:a0:8c:97: 56:59:ae:89:b0:fe:bb:ef:b4:b9:ba:8d:3e:50:37:d2:76:19: 11:7a:ad:6b:0f:a9:13:40:23:14:db:8b:35:f9:93:82:da:30: 11:83:78:f3:da:ec:bd:de:9f:a8:40:6e:95:0d:18:88:6e:b7: bf:12:80:a0:88:47:cb:f0:f6:8f:03:d4:91:39:5f:49:d0:76: d7:0a:6e:8f:5f:ff:25:49:e7:9c:f2:9c:dc:43:23:58:1a:6b: 03:30:0c:39:db:fc:39:2a:d5:36:1f:78:d1:de:cc:9c:fd:86: 09:97:2a:0e:62:e7:d7:15:e9:cc:39:59:d3:fe:33:c3:c8:9a: aa:25:6c:48:8e:a5:67:65:51:38:fa:d9:7e:68:ed:46:6b:e1: 03:57:78:db:4d:65:84:3e:79:dd:96:5e:de:1b:5d:1d:71:95: cb:96:32:e0:d6:e2:36:c2:c5:45:06:bd:90:2a:5f:3f:7a:3a: 1b:f2:07:16:2a:80:2a:0d:e9:97:97:a6:d7:f2:c5:19:a6:cf: 0f:ca:bb:76:0e:01:16:6d:82:8e:22:97:ef:0e:05:80:49:43: ad:7f:82:df -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0NDMwMzc0QjFBQzgx NjAyOEY4MzJCNjAyRjBCMDhBNzUzNjMxNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5EmhXakEwiRZcdYqiiExn0tYUs0YUlJyFXU5JcIDXWDvGsjPA CTzEr8gbeJy0fb1tEs4SJy8vMgtKTiqhm47GXbBgR67b/mYoWv5F8y4CXLPhlIag D6y6YC868wUzVWrH2+3PnPlZiVsQSSc7nE8upOVWk5Q3+NjrR4KM7+fpmCRdjr+c fIrE0kNoDvwn1C06D5QCZ4gAiRwyUtdSfJEgFxk8XKagzrO6BA8o5BXBsIzh6hiN z+bwpJXcM+QNrExBZuBTgoLyrm0rm6i1wCtAyMsojBZcW7rP/rvIGbX+2L/KAc7G oc01r73vfgFaEZgcVRTGoCMOlJjWy+PRlxXBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1EMDdLGsgWAo+DK2AvCwinU2MW0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFFTURkTEdzZ1dBby1ESzJB dkN3aW5VMk1XMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6E0wDQYJKoZIhvcNAQELBQADggEBAEf5EzeXKYKGlnTNZjBypSaZcThfkOnwksbl ca3y5ZBcWaCMl1ZZromw/rvvtLm6jT5QN9J2GRF6rWsPqRNAIxTbizX5k4LaMBGD ePPa7L3en6hAbpUNGIhut78SgKCIR8vw9o8D1JE5X0nQdtcKbo9f/yVJ55zynNxD I1gaawMwDDnb/Dkq1TYfeNHezJz9hgmXKg5i59cV6cw5WdP+M8PImqolbEiOpWdl UTj62X5o7UZr4QNXeNtNZYQ+ed2WXt4bXR1xlcuWMuDW4jbCxUUGvZAqXz96Ohvy BxYqgCoN6ZeXptfyxRmmzw/Ku3YOARZtgo4il+8OBYBJQ61/gt8= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org