$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa File: 3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa (raw, json) Hash identifier: 9L6tVrGbM36uSIdRuH7y98dTMQkPY72P7Er5wXqP3tI= Subject key identifier: DD:4B:F1:CD:59:B9:46:9C:DD:43:ED:5E:67:41:4A:61:65:37:B0:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30F3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa Signing time: Mon 26 Aug 2024 05:29:58 +0000 ROA not before: Mon 26 Aug 2024 05:29:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12531 (0x30f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DD4BF1CD59B9469CDD43ED5E67414A616537B000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:28:0d:fd:e0:46:1f:66:ed:16:37:f2:20: 06:fe:4f:db:da:7e:85:45:52:c7:1b:0f:94:b1:df: dd:6a:34:c4:24:c4:d3:32:a8:44:19:d2:2f:7c:cf: 9d:33:8d:14:45:bb:54:d3:59:d3:d8:c0:2e:ab:dd: 86:e4:3e:20:f8:c7:30:ba:c7:89:14:61:7d:a4:86: 67:88:58:86:5a:38:1c:57:9d:16:41:94:4c:15:3b: 96:87:9e:66:11:ca:cd:ab:81:e1:68:49:f2:6d:aa: ff:4b:88:b6:e1:bc:01:89:67:e5:5f:e0:83:49:21: 87:44:4d:77:ab:69:4b:9d:17:2c:78:c7:f7:03:b3: 82:ae:f4:8e:57:c8:34:5b:b9:8b:c3:f8:74:48:00: 20:70:42:3a:59:2b:fd:29:22:c2:9e:dd:cd:fd:37: 0a:2f:ec:86:d8:a5:b3:34:ac:4c:55:a2:05:40:f0: 90:77:f3:43:1d:4d:4f:44:50:2a:2b:83:d4:ec:95: ae:71:6e:70:1f:25:25:0b:34:8b:1f:3c:34:dd:df: ea:8d:0d:93:af:92:97:5d:17:f7:7a:20:80:3d:54: 2f:0a:82:a7:3b:3f:7f:c0:ca:e8:20:aa:ec:34:e3: 57:38:f3:d4:3f:2b:e9:01:18:73:a2:b1:ee:91:04: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4B:F1:CD:59:B9:46:9C:DD:43:ED:5E:67:41:4A:61:65:37:B0:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3UvxzVm5RpzdQ-1eZ0FKYWU3sAA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.252.0/24 Signature Algorithm: sha256WithRSAEncryption 91:0e:5e:f9:d0:0a:4c:c0:e5:e3:92:a8:1b:f9:19:9f:df:51: df:2b:f7:ac:ad:c5:7f:27:0f:b6:04:40:a0:7e:f4:c3:72:3d: b0:21:3f:ef:33:59:f1:45:55:45:25:9b:f4:48:a9:db:b9:60: 36:4d:0a:86:c0:ea:c5:bd:a1:13:b8:32:42:c5:37:9b:33:39: f3:3e:f1:1c:6e:41:d7:a1:08:03:dc:42:af:92:06:90:a4:43: a6:5f:47:c3:31:a4:14:25:7f:6b:8f:d6:5d:55:a2:80:bb:82: c7:d0:35:25:25:e7:ce:84:fc:85:bf:85:96:34:0f:d4:15:20: 32:d8:1a:d1:70:50:6c:47:42:1f:1d:ef:8e:92:88:02:4c:f7: d4:25:8b:cc:46:70:d8:12:26:03:b5:8f:5c:68:cd:3e:30:03: 3d:12:db:f8:bb:5f:7c:af:86:55:3d:b7:34:a1:eb:17:b8:72: df:ba:7f:ac:df:43:92:51:25:ac:23:c5:7a:d0:a5:c0:ef:dd: 45:ef:41:47:ea:4d:db:49:1c:9f:f3:f8:eb:fb:72:61:82:e8: 82:62:72:28:9b:a8:a2:b0:69:bc:a9:34:98:9c:8a:dc:92:be: b1:ad:7d:a0:9c:99:ac:62:0b:52:af:1f:14:99:f9:c9:18:e5: f5:ae:a8:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERENEJGMUNENTlCOTQ2 OUNERDQzRUQ1RTY3NDE0QTYxNjUzN0IwMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/uygN/eBGH2btFjfyIAb+T9vafoVFUscbD5Sx391qNMQkxNMy qEQZ0i98z50zjRRFu1TTWdPYwC6r3YbkPiD4xzC6x4kUYX2khmeIWIZaOBxXnRZB lEwVO5aHnmYRys2rgeFoSfJtqv9LiLbhvAGJZ+Vf4INJIYdETXeraUudFyx4x/cD s4Ku9I5XyDRbuYvD+HRIACBwQjpZK/0pIsKe3c39Nwov7IbYpbM0rExVogVA8JB3 80MdTU9EUCorg9Tsla5xbnAfJSULNIsfPDTd3+qNDZOvkpddF/d6IIA9VC8Kgqc7 P3/Ayuggquw041c489Q/K+kBGHOise6RBMHtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3UvxzVm5RpzdQ+1eZ0FKYWU3sAAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNVdnh6Vm01UnB6ZFEtMWVa MEZLWVdVM3NBQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wvwwDQYJKoZIhvcNAQELBQADggEBAJEOXvnQCkzA5eOSqBv5GZ/fUd8r96ytxX8n D7YEQKB+9MNyPbAhP+8zWfFFVUUlm/RIqdu5YDZNCobA6sW9oRO4MkLFN5szOfM+ 8RxuQdehCAPcQq+SBpCkQ6ZfR8MxpBQlf2uP1l1VooC7gsfQNSUl586E/IW/hZY0 D9QVIDLYGtFwUGxHQh8d746SiAJM99Qli8xGcNgSJgO1j1xozT4wAz0S2/i7X3yv hlU9tzSh6xe4ct+6f6zfQ5JRJawjxXrQpcDv3UXvQUfqTdtJHJ/z+Ov7cmGC6IJi ciibqKKwabypNJicitySvrGtfaCcmaxiC1KvHxSZ+ckY5fWuqHQ= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org