$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa File: 3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa (raw, json) Hash identifier: cKbwO1TjF4A1zbDjbTvY3vhaadb030KrvaIMJzcO1X8= Subject key identifier: DC:DF:D7:26:A4:DB:61:A0:1F:07:29:51:31:DE:E6:BF:A5:FE:46:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3293 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa Signing time: Mon 26 Aug 2024 05:31:47 +0000 ROA not before: Mon 26 Aug 2024 05:31:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12947 (0x3293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DCDFD726A4DB61A01F07295131DEE6BFA5FE46B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:a5:b0:6c:1f:26:ab:aa:95:b1:58:9e:fa: 73:e7:38:0f:d3:54:c4:2f:0e:87:84:3a:98:26:9f: 85:54:57:a3:c0:a2:34:47:b8:c8:a9:1a:41:f2:87: ad:f8:68:0d:3a:8e:e0:bc:37:94:27:10:90:5c:a7: fb:cc:e2:56:fc:37:86:1a:f6:47:c5:76:6c:2d:46: bd:a0:33:36:4e:cb:30:c5:fd:98:1c:a7:fa:af:d4: 53:b3:bb:9b:ee:fe:2a:d5:58:a6:31:8f:d2:c2:01: c6:32:12:29:d4:c1:9d:24:cf:95:5b:e6:71:5f:22: ff:5d:f9:33:d3:ed:2a:72:e7:6a:aa:d6:88:ed:86: a7:8d:5d:2b:44:0c:cb:c5:e3:c0:c4:f0:b3:03:94: 05:af:19:12:29:3e:9f:17:74:50:ea:7f:9e:fd:72: 18:ab:f9:d3:4c:b3:5f:64:db:38:15:cd:b2:9a:8f: 07:17:5a:53:41:c3:43:e3:7b:a6:17:a5:70:a9:d3: 4f:c0:f1:10:9d:f2:4a:e3:ba:c9:18:f6:6c:b2:d3: d9:31:42:10:58:bd:e0:2f:db:99:6d:96:99:f0:f8: d7:7a:27:27:66:05:99:9e:4b:7f:79:80:0b:10:50: b7:b1:6a:aa:21:6a:49:e7:8e:ed:09:2a:ab:1d:f0: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DF:D7:26:A4:DB:61:A0:1F:07:29:51:31:DE:E6:BF:A5:FE:46:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.144.0/22 Signature Algorithm: sha256WithRSAEncryption 88:47:7e:05:ab:5c:2f:e9:bb:74:4c:e4:fc:aa:dc:66:85:ae: 99:ff:c3:ed:80:f6:b5:bd:dd:c3:eb:e9:c9:42:15:c3:bd:41: d2:c2:d7:8c:7b:4e:4d:46:fa:a5:c5:81:9b:96:e7:34:f5:15: 65:bc:6f:80:c0:23:eb:a6:20:b2:bd:47:98:18:12:8d:fe:62: a8:49:9a:44:68:b0:a0:ca:52:09:98:69:58:3e:b4:7b:f0:c7: b8:ce:cc:80:4f:e6:f7:19:dc:5a:a9:53:9f:06:b2:05:ef:62: 87:db:0c:4b:a0:35:a4:94:f7:65:a8:b4:9f:21:2c:84:cb:dd: ce:bf:25:9d:0c:5f:33:ff:70:ca:37:1f:17:36:df:dc:b7:5e: 72:c9:89:88:eb:0d:e5:a9:9a:83:33:d4:86:8e:ca:9d:0a:83: 4b:ef:02:43:2d:52:12:f1:e2:83:70:cf:02:90:b3:81:57:88: 80:38:c6:42:ba:69:6c:b1:5b:34:52:69:1a:f0:39:7d:8c:87: 9d:80:03:12:f1:b4:1f:e0:9e:84:cf:ff:93:14:75:d1:86:b7: 4c:bc:f4:34:a7:70:ef:a2:a5:2f:d1:b0:d7:19:93:92:fe:07: d1:33:24:0c:f9:b8:07:0c:8a:46:4d:c8:f0:91:d6:66:96:a2: c3:76:5b:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERDREZENzI2QTREQjYx QTAxRjA3Mjk1MTMxREVFNkJGQTVGRTQ2QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEpaWwbB8mq6qVsVie+nPnOA/TVMQvDoeEOpgmn4VUV6PAojRH uMipGkHyh634aA06juC8N5QnEJBcp/vM4lb8N4Ya9kfFdmwtRr2gMzZOyzDF/Zgc p/qv1FOzu5vu/irVWKYxj9LCAcYyEinUwZ0kz5Vb5nFfIv9d+TPT7Spy52qq1ojt hqeNXStEDMvF48DE8LMDlAWvGRIpPp8XdFDqf579chir+dNMs19k2zgVzbKajwcX WlNBw0Pje6YXpXCp00/A8RCd8krjuskY9myy09kxQhBYveAv25ltlpnw+Nd6Jydm BZmeS395gAsQULexaqohaknnju0JKqsd8KFTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3N/XJqTbYaAfBylRMd7mv6X+RrQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNOX1hKcVRiWWFBZkJ5bFJN ZDdtdjZYLVJyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpAwDQYJKoZIhvcNAQELBQADggEBAIhHfgWrXC/pu3RM5Pyq3GaFrpn/w+2A9rW9 3cPr6clCFcO9QdLC14x7Tk1G+qXFgZuW5zT1FWW8b4DAI+umILK9R5gYEo3+YqhJ mkRosKDKUgmYaVg+tHvwx7jOzIBP5vcZ3FqpU58GsgXvYofbDEugNaSU92WotJ8h LITL3c6/JZ0MXzP/cMo3Hxc239y3XnLJiYjrDeWpmoMz1IaOyp0Kg0vvAkMtUhLx 4oNwzwKQs4FXiIA4xkK6aWyxWzRSaRrwOX2Mh52AAxLxtB/gnoTP/5MUddGGt0y8 9DSncO+ipS/RsNcZk5L+B9EzJAz5uAcMikZNyPCR1maWosN2W5U= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:37 2024 by rpki-client on console-fra.rpki-client.org