$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WpbNx5PcDxJHJJYQfF4fv6mwzg.roa File: 3WpbNx5PcDxJHJJYQfF4fv6mwzg.roa (raw, json) Hash identifier: vfKPV6CqagsyuGsydcJVT3tFFlI+q6RFlJiTQMWL1u0= Subject key identifier: DD:6A:5B:37:1E:4F:70:3C:49:1C:92:58:41:F1:78:7E:FE:A6:C3:38 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32CE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WpbNx5PcDxJHJJYQfF4fv6mwzg.roa Signing time: Mon 26 Aug 2024 05:32:02 +0000 ROA not before: Mon 26 Aug 2024 05:32:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.248.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13006 (0x32ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DD6A5B371E4F703C491C925841F1787EFEA6C338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:00:76:9e:cf:23:08:9e:d5:3e:ec:c7:1f: 7a:f5:be:93:e3:fc:0e:4a:7d:e0:0f:94:3a:cc:e5: 4c:96:47:bd:de:c2:21:ea:1f:48:29:05:5a:df:be: a1:47:e9:fc:45:e7:21:17:5d:8e:f4:99:e4:c3:f1: 08:b8:7b:0c:b0:9a:33:8a:cc:bb:dd:e8:b4:ea:33: 80:d5:b3:c2:c0:ac:50:0a:02:76:92:c2:e6:70:39: 89:27:dd:76:a0:5b:9c:a1:11:74:78:c5:e4:b8:0b: e5:be:16:dc:b3:2f:a9:dd:b3:d3:5a:21:04:55:08: 90:c4:e0:ad:9b:f5:87:c8:74:00:3d:fe:9a:3d:e8: dc:d0:53:57:ff:58:49:c4:ba:56:6b:79:29:b1:f2: fb:57:20:8a:7d:b0:35:49:cd:a7:9d:ab:ca:d7:1f: ab:e3:95:75:61:0a:42:8d:80:80:51:d0:31:ae:47: 12:67:e8:d8:a3:bf:7d:77:21:cc:c7:f2:74:b5:5f: 0a:ee:68:25:3d:7f:34:b4:df:7c:5c:db:96:ff:28: 6c:e5:4d:90:53:2e:81:35:53:3b:a6:f8:d3:70:77: d4:70:c4:a7:02:34:22:e5:1c:db:aa:f6:49:af:1e: ec:19:2f:81:2a:77:3c:66:db:c9:db:5a:c0:ec:7b: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6A:5B:37:1E:4F:70:3C:49:1C:92:58:41:F1:78:7E:FE:A6:C3:38 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WpbNx5PcDxJHJJYQfF4fv6mwzg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.248.0/21 Signature Algorithm: sha256WithRSAEncryption 65:31:ef:f0:28:14:35:5d:80:fb:28:73:33:81:cd:dd:bd:22: 83:07:9a:27:74:68:7b:89:b4:ea:6d:31:d1:18:4d:2f:9c:17: f1:4f:b7:ed:2b:fb:a6:c4:45:61:a4:15:3e:d0:21:04:dd:45: ca:52:93:9a:bd:38:04:80:30:90:2f:c5:4e:41:0d:c6:80:69: 79:d5:7b:c1:40:02:26:9b:24:3f:49:24:18:4e:65:83:b0:91: 8a:e6:f7:4c:c9:fb:7b:e2:7d:0e:53:01:fe:2c:0f:53:30:77: 4e:a2:ec:59:22:28:60:be:5a:78:39:7f:54:22:4f:ec:fb:2c: a4:7c:2c:c2:4e:78:e8:66:10:77:a4:8d:79:33:a5:73:a1:39: c1:96:86:e3:90:6e:bc:98:73:0f:3e:d7:04:4e:59:84:8b:ea: 1d:9c:e5:d7:d9:11:d2:db:17:ec:6f:0e:f7:d6:db:1f:af:7e: b5:50:6d:7b:fa:36:52:5f:f8:44:f8:43:51:0e:c2:07:90:46: 45:74:c1:01:91:03:db:36:8a:1e:0a:56:0c:e3:84:c3:3e:31: ca:a3:39:2d:76:f6:20:dd:b4:9c:ff:62:ae:62:ee:ec:61:0b: b1:50:22:bf:59:ce:96:11:db:70:6d:4e:9e:e3:37:26:69:62: 77:7e:0b:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERENkE1QjM3MUU0Rjcw M0M0OTFDOTI1ODQxRjE3ODdFRkVBNkMzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiOgB2ns8jCJ7VPuzHH3r1vpPj/A5KfeAPlDrM5UyWR73ewiHq H0gpBVrfvqFH6fxF5yEXXY70meTD8Qi4ewywmjOKzLvd6LTqM4DVs8LArFAKAnaS wuZwOYkn3XagW5yhEXR4xeS4C+W+FtyzL6nds9NaIQRVCJDE4K2b9YfIdAA9/po9 6NzQU1f/WEnEulZreSmx8vtXIIp9sDVJzaedq8rXH6vjlXVhCkKNgIBR0DGuRxJn 6Nijv313IczH8nS1XwruaCU9fzS033xc25b/KGzlTZBTLoE1Uzum+NNwd9RwxKcC NCLlHNuq9kmvHuwZL4Eqdzxm28nbWsDse5zhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3WpbNx5PcDxJHJJYQfF4fv6mwzgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNXcGJOeDVQY0R4SkhKSllR ZkY0ZnY2bXd6Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wvgwDQYJKoZIhvcNAQELBQADggEBAGUx7/AoFDVdgPsoczOBzd29IoMHmid0aHuJ tOptMdEYTS+cF/FPt+0r+6bERWGkFT7QIQTdRcpSk5q9OASAMJAvxU5BDcaAaXnV e8FAAiabJD9JJBhOZYOwkYrm90zJ+3vifQ5TAf4sD1Mwd06i7FkiKGC+Wng5f1Qi T+z7LKR8LMJOeOhmEHekjXkzpXOhOcGWhuOQbryYcw8+1wROWYSL6h2c5dfZEdLb F+xvDvfW2x+vfrVQbXv6NlJf+ET4Q1EOwgeQRkV0wQGRA9s2ih4KVgzjhMM+Mcqj OS129iDdtJz/Yq5i7uxhC7FQIr9ZzpYR23BtTp7jNyZpYnd+C9A= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org