$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa File: 21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa (raw, json) Hash identifier: vAnwGLMQNfU6bX9HXfv/V5MVGBKTS3qpsfscYmwKmPc= Subject key identifier: DB:57:4C:84:A7:3D:3D:48:E7:F1:68:3A:33:4B:7F:C1:F9:F0:5F:02 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30E1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa Signing time: Mon 26 Aug 2024 05:29:55 +0000 ROA not before: Mon 26 Aug 2024 05:29:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.195.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12513 (0x30e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DB574C84A73D3D48E7F1683A334B7FC1F9F05F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:1c:ac:75:fc:4b:db:4d:00:d1:35:9c:96: 96:15:5a:18:5c:a0:1b:c2:03:3e:1b:90:71:14:3b: b8:d0:c7:97:dc:eb:05:5f:a9:b7:83:89:5f:5e:d6: 7b:19:ec:6f:e4:eb:cd:fd:bd:36:db:e4:42:fe:a5: cb:9f:67:a3:6d:46:e6:aa:31:60:85:32:dc:e6:f5: db:99:56:09:b9:db:eb:8b:5d:f4:4c:81:e1:85:df: 60:de:c3:b8:81:d2:c0:2b:97:3b:6c:66:e7:cc:c1: ee:d3:e0:1f:8f:36:1d:ba:d2:22:81:84:a5:2f:b6: 8f:32:0b:b4:18:8e:f3:e9:5b:f6:21:e2:19:76:3e: 4b:6b:cb:5c:e3:5c:75:7b:d3:4f:95:a5:d8:19:09: 06:15:08:54:68:68:4f:43:8a:0d:f6:10:4c:bb:35: a1:86:3e:db:67:e0:2c:77:bc:94:ca:80:51:ac:1b: 66:a3:ce:49:9f:3e:10:ed:8f:1f:f2:36:b2:73:a2: d9:96:fb:05:2c:71:5c:bb:00:87:b3:95:e0:52:39: e2:2a:9e:a4:e8:f4:91:89:f5:32:88:43:0c:23:64: 19:0d:7e:4a:69:4b:24:d9:81:ef:e7:f5:80:44:46: 3b:60:cb:05:33:1e:7f:86:fc:a7:6a:b7:bc:a7:d6: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:57:4C:84:A7:3D:3D:48:E7:F1:68:3A:33:4B:7F:C1:F9:F0:5F:02 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21dMhKc9PUjn8Wg6M0t_wfnwXwI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.128.0/18 Signature Algorithm: sha256WithRSAEncryption 86:cf:a3:02:e0:a5:f1:e1:3e:c2:b4:99:c1:2b:2b:0e:e9:a2: e8:9d:48:39:c6:6a:81:6d:93:0c:66:d6:d6:5b:e0:03:9a:0f: 4b:6a:3e:de:95:8a:ba:b6:69:4f:8a:f4:a2:21:d7:50:36:2f: 65:b2:49:80:f6:30:bd:51:33:d9:06:f9:db:dc:1c:13:d8:d6: 0c:23:21:ef:a2:8c:ec:2c:1b:8a:5d:80:fb:c3:73:64:0d:1e: 3f:01:8e:af:ec:fd:7a:fb:42:ff:af:03:45:a8:22:34:2a:80: 3e:d4:91:b8:1e:64:00:d9:a5:5e:94:c2:3e:2e:01:7f:50:04: 24:52:be:bc:47:a6:c7:cf:e7:b2:f4:4d:d5:f7:72:fe:9a:99: d7:7c:ad:6b:22:a8:ad:24:52:59:8e:a8:39:ce:74:2b:50:e4: 06:e5:86:dc:ae:6e:de:d6:64:23:cf:fb:2c:1a:e7:cf:61:4c: 41:2e:bc:29:9a:d4:3c:25:2e:cb:f7:89:8e:ef:b9:49:af:ea: 74:ad:b8:68:7c:c2:86:45:44:ca:f7:b4:62:64:0d:7b:47:8f: 51:5b:de:ee:98:10:79:8a:8f:5e:78:db:52:65:75:cc:fc:0f: 27:ed:03:57:be:98:a8:1b:b2:8a:ad:a9:fe:9a:ec:b7:f9:3c: 16:20:e1:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCNTc0Qzg0QTczRDNE NDhFN0YxNjgzQTMzNEI3RkMxRjlGMDVGMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbyhysdfxL200A0TWclpYVWhhcoBvCAz4bkHEUO7jQx5fc6wVf qbeDiV9e1nsZ7G/k6839vTbb5EL+pcufZ6NtRuaqMWCFMtzm9duZVgm52+uLXfRM geGF32Dew7iB0sArlztsZufMwe7T4B+PNh260iKBhKUvto8yC7QYjvPpW/Yh4hl2 Pktry1zjXHV700+VpdgZCQYVCFRoaE9Dig32EEy7NaGGPttn4Cx3vJTKgFGsG2aj zkmfPhDtjx/yNrJzotmW+wUscVy7AIezleBSOeIqnqTo9JGJ9TKIQwwjZBkNfkpp SyTZge/n9YBERjtgywUzHn+G/Kdqt7yn1tYTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU21dMhKc9PUjn8Wg6M0t/wfnwXwIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzIxZE1oS2M5UFVqbjhXZzZN MHRfd2Zud1h3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7 w4AwDQYJKoZIhvcNAQELBQADggEBAIbPowLgpfHhPsK0mcErKw7pouidSDnGaoFt kwxm1tZb4AOaD0tqPt6Virq2aU+K9KIh11A2L2WySYD2ML1RM9kG+dvcHBPY1gwj Ie+ijOwsG4pdgPvDc2QNHj8Bjq/s/Xr7Qv+vA0WoIjQqgD7UkbgeZADZpV6Uwj4u AX9QBCRSvrxHpsfP57L0TdX3cv6amdd8rWsiqK0kUlmOqDnOdCtQ5Ablhtyubt7W ZCPP+ywa589hTEEuvCma1DwlLsv3iY7vuUmv6nStuGh8woZFRMr3tGJkDXtHj1Fb 3u6YEHmKj15421Jldcz8DyftA1e+mKgbsoqtqf6a7Lf5PBYg4b8= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:16 2024 by rpki-client on console-ams.rpki-client.org