$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2O9KfRmskn22UzzdFDR-C1GN1Zg.roa File: 2O9KfRmskn22UzzdFDR-C1GN1Zg.roa (raw, json) Hash identifier: yTnxgcMHft3eFr6ZZmguS6qYH+8yHK/a0PduNlMdwrw= Subject key identifier: D8:EF:4A:7D:19:AC:92:7D:B6:53:3C:DD:14:34:7E:0B:51:8D:D5:98 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3055 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2O9KfRmskn22UzzdFDR-C1GN1Zg.roa Signing time: Mon 26 Aug 2024 05:29:22 +0000 ROA not before: Mon 26 Aug 2024 05:29:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.201.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12373 (0x3055) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D8EF4A7D19AC927DB6533CDD14347E0B518DD598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:43:4b:77:cb:35:fe:9e:bb:ab:6f:4f:96: 27:12:6a:30:5f:ae:7b:4e:1c:3c:22:11:2c:26:2b: 76:e2:e4:00:7a:19:12:59:fe:ff:6d:63:7c:75:18: 92:0e:ae:0e:16:8b:ec:41:ea:56:52:00:d7:f0:d6: a7:69:6e:d6:f8:32:0f:d0:38:8f:ba:92:25:9a:45: 89:a4:d0:b4:0e:7e:d6:cd:89:28:fb:36:31:d6:17: a1:52:e0:62:34:26:92:9b:be:f2:eb:9a:10:f2:c4: 12:30:45:eb:d5:91:af:65:05:d8:23:5c:8e:e0:f3: 9d:c2:fc:80:4f:ca:01:fa:f6:ab:f4:f8:ca:f9:36: ba:09:f8:5c:e1:9d:19:b2:a3:83:b0:4e:17:68:1e: af:17:14:b7:54:d1:72:66:9f:7e:ab:d2:8e:ea:f7: 6a:d7:93:ae:bf:43:39:51:ac:db:e0:17:78:cf:49: 96:a5:22:ac:e0:f1:0b:ec:fa:69:96:1a:73:29:3f: fc:ea:80:6d:07:0b:23:79:6d:bc:26:ea:75:a7:6c: af:7e:a0:9c:b8:ba:9f:7d:f6:8f:39:4e:c1:19:62: 49:c4:17:ae:67:21:af:19:82:2a:dd:12:64:84:3a: 07:55:31:ff:9b:93:87:2a:85:93:ca:54:22:f6:4f: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EF:4A:7D:19:AC:92:7D:B6:53:3C:DD:14:34:7E:0B:51:8D:D5:98 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2O9KfRmskn22UzzdFDR-C1GN1Zg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.201.64/26 Signature Algorithm: sha256WithRSAEncryption 3b:6b:1f:93:fd:aa:30:50:0c:c3:7b:36:66:e7:b3:9c:04:df: 3d:88:47:03:2f:c3:d3:b9:a0:f4:c0:23:a3:a2:e5:9f:b0:00: e6:00:69:1e:84:ee:b7:7d:f1:51:e2:fc:52:61:01:e1:c4:ff: 19:65:01:6d:32:ce:dc:4d:a6:0b:fd:91:a3:dc:cd:93:7b:41: 0a:e6:4c:52:c4:fe:53:19:02:a7:30:19:5d:2c:39:7e:65:e6: 01:e5:54:74:62:fe:bb:93:75:ed:e6:9d:a9:1d:d9:9c:f8:f1: e0:19:a9:7b:5e:7c:97:d4:51:be:5a:41:d3:47:63:6a:78:b4: eb:ee:3f:a3:c7:c1:6e:1d:49:de:8e:90:36:ed:3f:d4:fb:d0: b0:84:1d:11:ea:90:e8:5a:2e:0c:7c:fe:27:1a:0a:f2:88:2e: af:55:52:47:77:aa:b2:46:cb:7e:c6:b7:c9:70:ff:b2:5a:9a: c6:34:80:c3:db:38:a0:f7:21:32:47:38:fb:e7:9b:28:94:13: fe:c6:91:12:6e:fd:44:1a:b7:b1:27:2c:b3:bb:a1:ce:22:d7: 99:a6:76:02:19:d5:66:31:60:77:be:14:7c:ca:eb:9b:45:80: 9a:32:73:4a:53:a8:84:12:e8:da:ce:6f:a1:43:a3:e3:9e:38: 9a:d7:82:d3 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ4RUY0QTdEMTlBQzky N0RCNjUzM0NERDE0MzQ3RTBCNTE4REQ1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8wkNLd8s1/p67q29PlicSajBfrntOHDwiESwmK3bi5AB6GRJZ /v9tY3x1GJIOrg4Wi+xB6lZSANfw1qdpbtb4Mg/QOI+6kiWaRYmk0LQOftbNiSj7 NjHWF6FS4GI0JpKbvvLrmhDyxBIwRevVka9lBdgjXI7g853C/IBPygH69qv0+Mr5 NroJ+FzhnRmyo4OwThdoHq8XFLdU0XJmn36r0o7q92rXk66/QzlRrNvgF3jPSZal Iqzg8Qvs+mmWGnMpP/zqgG0HCyN5bbwm6nWnbK9+oJy4up999o85TsEZYknEF65n Ia8ZgirdEmSEOgdVMf+bk4cqhZPKVCL2T2TXAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU2O9KfRmskn22UzzdFDR+C1GN1ZgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJPOUtmUm1za24yMlV6emRG RFItQzFHTjFaZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ2 6MlAMA0GCSqGSIb3DQEBCwUAA4IBAQA7ax+T/aowUAzDezZm57OcBN89iEcDL8PT uaD0wCOjouWfsADmAGkehO63ffFR4vxSYQHhxP8ZZQFtMs7cTaYL/ZGj3M2Te0EK 5kxSxP5TGQKnMBldLDl+ZeYB5VR0Yv67k3Xt5p2pHdmc+PHgGal7XnyX1FG+WkHT R2NqeLTr7j+jx8FuHUnejpA27T/U+9CwhB0R6pDoWi4MfP4nGgryiC6vVVJHd6qy Rst+xrfJcP+yWprGNIDD2zig9yEyRzj755solBP+xpESbv1EGrexJyyzu6HOIteZ pnYCGdVmMWB3vhR8yuubRYCaMnNKU6iEEujazm+hQ6Pjnjia14LT -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org