$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WyV_VMS-WUgc6CBZUrmkIazzHc.roa File: 1WyV_VMS-WUgc6CBZUrmkIazzHc.roa (raw, json) Hash identifier: q0ocEiBl1cEEq+S6leZ8oDpaA2lT53fkjFuGluB2cJw= Subject key identifier: D5:6C:95:FD:53:12:F9:65:20:73:A0:81:65:4A:E6:90:86:B3:CC:77 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30FE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WyV_VMS-WUgc6CBZUrmkIazzHc.roa Signing time: Mon 26 Aug 2024 05:30:00 +0000 ROA not before: Mon 26 Aug 2024 05:30:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.193.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12542 (0x30fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D56C95FD5312F9652073A081654AE69086B3CC77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:f2:a8:50:a5:fa:0b:10:79:89:ae:37:3b: 21:bf:69:c2:02:e7:02:37:36:b1:b5:12:26:62:c2: c0:60:aa:b3:70:30:8a:c2:91:6c:30:cf:d0:1f:72: b5:bf:02:95:01:18:2e:05:1b:20:73:e5:7f:3b:48: e7:8e:98:80:c2:01:cc:1f:0f:a7:30:06:13:40:47: 3f:3d:58:8b:b6:f9:73:9b:4c:40:73:42:f5:91:17: f0:fa:39:72:fc:ec:a0:a3:f4:1c:9f:81:61:37:df: 44:4a:22:fd:fa:44:20:b9:b8:2e:58:b1:85:66:50: 21:38:7c:62:09:f1:03:92:9c:44:ab:2a:d4:73:c6: 21:18:49:da:29:c9:f4:33:b4:4a:f4:d1:ef:fd:95: f0:3f:46:37:ba:b0:3a:46:09:b4:5b:51:cc:f9:a2: 73:0f:9e:e7:91:e9:67:b1:08:94:e6:b6:03:8d:e6: 4e:4d:f2:35:5e:f3:5e:db:74:34:a1:4c:97:07:bd: 9f:b0:e9:13:6e:ca:b5:19:71:6e:ef:49:54:3a:18: bc:a6:13:23:82:61:33:3e:cb:9e:90:9c:0d:51:eb: 83:c9:54:ba:e1:7e:a9:c5:62:57:3c:97:37:0b:50: fa:dc:77:c2:aa:48:64:f5:4d:70:61:40:f8:14:95: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:95:FD:53:12:F9:65:20:73:A0:81:65:4A:E6:90:86:B3:CC:77 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WyV_VMS-WUgc6CBZUrmkIazzHc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.96.0/21 Signature Algorithm: sha256WithRSAEncryption 00:4b:b7:d1:9f:82:77:78:48:bf:52:a1:78:64:b0:a8:d9:b0: 6c:1d:24:dd:fc:40:78:2b:b1:02:76:5b:52:ce:8e:5e:6c:c8: 65:db:0a:03:ea:89:d2:ae:ee:12:49:4d:18:44:63:1b:63:71: c2:77:ae:c2:a5:70:a7:3b:eb:44:c1:df:49:05:37:d3:f4:5e: a6:6d:a5:73:c1:70:c3:5d:77:71:39:ce:7b:3d:47:20:00:b1: f6:d4:43:70:17:11:f3:d6:8a:74:7f:cf:f3:16:b5:a9:76:ee: 33:9e:00:70:05:47:d1:17:54:24:0c:06:40:9d:1b:be:2b:71: d2:38:af:17:c4:83:30:32:3a:43:43:fb:5a:ec:39:c5:bf:09: 29:c2:3f:cf:b7:b7:b4:d9:55:e7:14:1b:47:76:95:f2:08:9e: f9:c2:a7:42:df:51:e9:15:a9:92:fb:f6:4c:64:c2:8b:21:a7: 98:b6:94:ce:af:8e:0f:5a:d7:a8:e8:ec:5e:32:cf:b1:a1:52: b6:67:5e:7d:6b:0c:db:3f:67:f7:53:78:35:81:da:cf:fb:42: 49:2a:10:ea:6b:2e:79:15:c8:04:57:04:5a:97:ba:77:ac:4c: 84:f5:3e:d4:87:4a:e6:9b:93:0a:c3:45:c2:38:ac:d9:39:77: 12:f5:96:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1NkM5NUZENTMxMkY5 NjUyMDczQTA4MTY1NEFFNjkwODZCM0NDNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxNPKoUKX6CxB5ia43OyG/acIC5wI3NrG1EiZiwsBgqrNwMIrC kWwwz9AfcrW/ApUBGC4FGyBz5X87SOeOmIDCAcwfD6cwBhNARz89WIu2+XObTEBz QvWRF/D6OXL87KCj9ByfgWE330RKIv36RCC5uC5YsYVmUCE4fGIJ8QOSnESrKtRz xiEYSdopyfQztEr00e/9lfA/Rje6sDpGCbRbUcz5onMPnueR6WexCJTmtgON5k5N 8jVe817bdDShTJcHvZ+w6RNuyrUZcW7vSVQ6GLymEyOCYTM+y56QnA1R64PJVLrh fqnFYlc8lzcLUPrcd8KqSGT1TXBhQPgUld2jAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1WyV/VMS+WUgc6CBZUrmkIazzHcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFXeVZfVk1TLVdVZ2M2Q0Ja VXJta0lhenpIYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wWAwDQYJKoZIhvcNAQELBQADggEBAABLt9Gfgnd4SL9SoXhksKjZsGwdJN38QHgr sQJ2W1LOjl5syGXbCgPqidKu7hJJTRhEYxtjccJ3rsKlcKc760TB30kFN9P0XqZt pXPBcMNdd3E5zns9RyAAsfbUQ3AXEfPWinR/z/MWtal27jOeAHAFR9EXVCQMBkCd G74rcdI4rxfEgzAyOkND+1rsOcW/CSnCP8+3t7TZVecUG0d2lfIInvnCp0LfUekV qZL79kxkwoshp5i2lM6vjg9a16jo7F4yz7GhUrZnXn1rDNs/Z/dTeDWB2s/7Qkkq EOprLnkVyARXBFqXunesTIT1PtSHSuabkwrDRcI4rNk5dxL1lr0= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:16 2024 by rpki-client on console-ams.rpki-client.org