$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vFuP6MaX6u6M2fXybo0ONjcPXI.roa File: 2vFuP6MaX6u6M2fXybo0ONjcPXI.roa (raw, json) Hash identifier: jyrngBF5ELTIUZR3/s8T5Hdi/0Uhw+F4n3wzKh+gkv4= Subject key identifier: DA:F1:6E:3F:A3:1A:5F:AB:BA:33:67:D7:C9:BA:34:38:D8:DC:3D:72 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FAE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vFuP6MaX6u6M2fXybo0ONjcPXI.roa Signing time: Mon 26 Aug 2024 05:28:44 +0000 ROA not before: Mon 26 Aug 2024 05:28:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.76.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12206 (0x2fae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DAF16E3FA31A5FABBA3367D7C9BA3438D8DC3D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:d1:68:f4:01:fd:91:e7:b8:ac:42:75:4d: c1:1c:e3:85:09:b3:e0:a9:3d:d1:12:5f:5e:c7:8a: bd:41:e3:7a:d1:24:90:d4:eb:0e:ea:cf:6b:f8:77: 3e:4d:2e:30:36:95:a0:b9:cf:5c:8d:b0:6b:3c:64: e7:e4:c5:83:5d:73:5a:b2:9c:87:db:55:0d:8e:ff: 54:e8:1e:81:f4:18:27:b2:ef:da:a1:6e:3e:53:4c: cb:b3:6e:cd:59:05:87:d9:d7:67:5c:c8:14:58:bd: 60:0b:9c:d0:dc:3a:68:ca:c3:da:37:27:33:d0:ab: 65:79:22:ac:a5:6c:6f:e8:c2:33:fb:e4:5d:e5:57: 16:85:2c:cc:28:b7:31:d1:43:f0:d0:67:7b:9d:8b: 23:92:12:7e:17:af:cf:28:2b:f1:20:32:eb:f5:ab: 83:91:cd:72:ee:82:e9:b6:43:15:d1:09:57:b3:59: 96:ea:58:3c:18:56:16:a7:08:42:e7:7e:7d:56:2a: ff:3a:34:24:d0:a3:21:bd:b1:25:88:b5:b4:3f:4d: 8d:d3:82:e4:f9:ea:a9:aa:b4:e8:4d:57:7f:0d:ab: fb:be:1c:78:dc:85:c8:de:09:3e:2f:5e:7f:b5:90: 3d:7a:9b:72:27:2e:39:0b:0d:c2:5f:ea:ea:89:6a: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F1:6E:3F:A3:1A:5F:AB:BA:33:67:D7:C9:BA:34:38:D8:DC:3D:72 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vFuP6MaX6u6M2fXybo0ONjcPXI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.121.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:c5:9d:c8:d9:96:6e:ed:70:70:c8:3e:84:d9:5d:8a:28:3e: 29:02:af:bb:51:82:22:21:63:17:be:78:10:f8:6f:5e:1f:e9: 21:c3:78:5a:55:3c:62:1d:60:26:28:ab:07:0a:dd:6a:c4:18: bc:8f:9d:9d:d8:77:cd:d4:a1:16:95:59:bb:32:40:4d:88:49: c5:da:8e:fc:a1:19:21:b3:1a:c7:5a:e1:00:69:cf:0d:15:f4: 97:6e:03:ff:03:f6:98:c2:0c:1c:39:7e:88:28:90:1a:be:f8: f1:bb:d1:c5:20:8a:91:83:18:84:6b:f5:2d:81:c7:19:b3:da: 0e:36:fb:1c:aa:c6:ee:38:bb:57:af:5f:9d:c4:92:75:5c:75: 18:7c:3b:f0:bb:2c:dd:ca:f5:40:c2:57:b3:5c:0c:97:84:e6: c4:60:92:13:d4:b2:14:cd:b0:76:8c:7a:0a:3f:a2:7e:f6:1e: 25:81:dd:cb:0f:0f:01:6c:f8:32:3f:bd:07:07:5c:0a:32:73: 9d:56:1a:c9:58:78:d3:87:7a:ed:82:9f:4a:8f:b1:74:43:db: 7c:c1:d2:92:ef:50:b5:e1:8b:9a:33:98:e5:bd:9a:90:dc:b4: 73:de:5b:b8:25:09:6b:93:56:06:a6:89:49:f4:ad:46:7c:ca: 8b:50:72:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBRjE2RTNGQTMxQTVG QUJCQTMzNjdEN0M5QkEzNDM4RDhEQzNENzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Q9Fo9AH9kee4rEJ1TcEc44UJs+CpPdESX17Hir1B43rRJJDU 6w7qz2v4dz5NLjA2laC5z1yNsGs8ZOfkxYNdc1qynIfbVQ2O/1ToHoH0GCey79qh bj5TTMuzbs1ZBYfZ12dcyBRYvWALnNDcOmjKw9o3JzPQq2V5IqylbG/owjP75F3l VxaFLMwotzHRQ/DQZ3udiyOSEn4Xr88oK/EgMuv1q4ORzXLugum2QxXRCVezWZbq WDwYVhanCELnfn1WKv86NCTQoyG9sSWItbQ/TY3TguT56qmqtOhNV38Nq/u+HHjc hcjeCT4vXn+1kD16m3InLjkLDcJf6uqJauHXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2vFuP6MaX6u6M2fXybo0ONjcPXIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJ2RnVQNk1hWDZ1Nk0yZlh5 Ym8wT05qY1BYSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THkwDQYJKoZIhvcNAQELBQADggEBAGzFncjZlm7tcHDIPoTZXYooPikCr7tRgiIh Yxe+eBD4b14f6SHDeFpVPGIdYCYoqwcK3WrEGLyPnZ3Yd83UoRaVWbsyQE2IScXa jvyhGSGzGsda4QBpzw0V9JduA/8D9pjCDBw5fogokBq++PG70cUgipGDGIRr9S2B xxmz2g42+xyqxu44u1evX53EknVcdRh8O/C7LN3K9UDCV7NcDJeE5sRgkhPUshTN sHaMego/on72HiWB3csPDwFs+DI/vQcHXAoyc51WGslYeNOHeu2Cn0qPsXRD23zB 0pLvULXhi5ozmOW9mpDctHPeW7glCWuTVgamiUn0rUZ8yotQcmk= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:55 2024 by rpki-client on console-fra.rpki-client.org