$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zOooCxqv3BUT-C5YSW6NtM2j2s.roa File: 3zOooCxqv3BUT-C5YSW6NtM2j2s.roa (raw, json) Hash identifier: XYrqcKKupx0iomQvb1L1t/6sWhOD2mE29HUIpLrkFx8= Subject key identifier: DF:33:A8:A0:2C:6A:BF:70:54:4F:E0:B9:61:25:BA:36:D3:36:8F:6B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31A2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zOooCxqv3BUT-C5YSW6NtM2j2s.roa Signing time: Mon 26 Aug 2024 05:30:46 +0000 ROA not before: Mon 26 Aug 2024 05:30:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12706 (0x31a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DF33A8A02C6ABF70544FE0B96125BA36D3368F6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:5f:12:c7:8e:21:b3:fe:67:7d:a2:be:d4: 06:30:3b:5b:bf:18:09:1d:77:4f:ce:5b:ec:9d:07: d8:9f:68:78:38:c1:9d:7f:7d:82:df:2c:a6:4f:f5: 4f:41:04:8e:a8:00:6b:27:82:63:3f:7e:cc:2e:d4: 41:5e:99:27:c1:a2:64:6b:02:5b:1e:58:aa:21:35: ae:f7:b1:ee:f3:6e:7f:df:85:3b:d2:c2:10:fa:23: 41:12:76:fd:9c:99:cb:9e:c8:81:04:8a:1d:3c:e5: 53:1c:77:42:e4:5f:03:54:06:19:68:71:2b:22:eb: 36:7f:ed:98:68:60:ac:1f:2c:74:01:f5:18:95:06: d9:b1:bf:c5:65:de:08:28:10:b6:b6:1f:ee:73:9e: 95:90:98:cc:07:e9:30:33:b9:7b:dc:e1:51:fe:32: 0c:a9:86:de:21:a6:d0:a8:bb:ff:1c:50:a0:10:65: 91:07:99:c3:03:e3:f6:56:15:59:4f:5e:59:ab:b4: 5e:b3:a3:9e:3b:b1:54:66:0b:54:97:ff:a9:4a:42: fe:8b:3f:0f:85:12:ae:14:15:3c:2f:49:fa:46:de: c1:f0:ec:15:6d:21:0b:89:59:af:93:e5:db:ec:39: ef:c9:c8:b7:40:a5:06:97:b9:9e:41:2e:56:13:6a: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:33:A8:A0:2C:6A:BF:70:54:4F:E0:B9:61:25:BA:36:D3:36:8F:6B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zOooCxqv3BUT-C5YSW6NtM2j2s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.120.0/21 Signature Algorithm: sha256WithRSAEncryption 20:ff:69:86:18:75:ad:88:c5:14:45:b5:49:91:44:4d:2b:c9: 01:5d:d5:57:6d:38:c5:19:83:60:1a:fd:4d:60:74:e7:ac:87: ae:7d:99:58:95:c5:bf:55:b9:01:0b:52:06:3d:8e:b1:b6:aa: 70:2d:f6:b5:16:86:9d:81:11:0a:e5:49:a7:b8:dd:06:0c:82: b0:13:60:75:50:69:5b:42:c8:00:b6:71:1a:e2:24:db:b2:cb: fa:56:dd:b4:b4:b5:55:0e:e0:2e:06:8c:da:dc:89:f2:42:b6: 01:da:f1:41:67:06:6a:6f:81:ae:21:6e:b6:3a:b0:89:1b:19: 3c:94:3b:56:b6:7b:53:f4:06:91:c0:32:c3:45:0d:55:93:d7: 04:a9:ff:20:41:c0:4f:7d:44:f4:67:e7:2d:c1:eb:83:83:5e: 3a:b5:fb:2d:93:3a:ab:41:0f:53:1a:3a:d2:99:91:9c:eb:7d: 85:b9:13:6d:ce:c8:82:ab:c0:7c:d1:0b:74:46:0a:1f:c5:d9: 15:8c:56:bd:ad:4b:36:3c:db:fd:67:b4:66:f1:11:00:dc:c3: 54:5d:5f:81:61:3c:39:63:6a:da:1f:9f:9b:78:51:4b:a6:55: 68:f4:4c:7e:f3:7e:0c:0d:c7:3e:66:95:d6:d8:b3:52:4b:91: 9b:a4:b7:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGMzNBOEEwMkM2QUJG NzA1NDRGRTBCOTYxMjVCQTM2RDMzNjhGNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuvV8Sx44hs/5nfaK+1AYwO1u/GAkdd0/OW+ydB9ifaHg4wZ1/ fYLfLKZP9U9BBI6oAGsngmM/fswu1EFemSfBomRrAlseWKohNa73se7zbn/fhTvS whD6I0ESdv2cmcueyIEEih085VMcd0LkXwNUBhlocSsi6zZ/7ZhoYKwfLHQB9RiV Btmxv8Vl3ggoELa2H+5znpWQmMwH6TAzuXvc4VH+Mgypht4hptCou/8cUKAQZZEH mcMD4/ZWFVlPXlmrtF6zo547sVRmC1SX/6lKQv6LPw+FEq4UFTwvSfpG3sHw7BVt IQuJWa+T5dvsOe/JyLdApQaXuZ5BLlYTasMHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3zOooCxqv3BUT+C5YSW6NtM2j2swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzN6T29vQ3hxdjNCVVQtQzVZ U1c2TnRNMmoycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wngwDQYJKoZIhvcNAQELBQADggEBACD/aYYYda2IxRRFtUmRRE0ryQFd1VdtOMUZ g2Aa/U1gdOesh659mViVxb9VuQELUgY9jrG2qnAt9rUWhp2BEQrlSae43QYMgrAT YHVQaVtCyAC2cRriJNuyy/pW3bS0tVUO4C4GjNrcifJCtgHa8UFnBmpvga4hbrY6 sIkbGTyUO1a2e1P0BpHAMsNFDVWT1wSp/yBBwE99RPRn5y3B64ODXjq1+y2TOqtB D1MaOtKZkZzrfYW5E23OyIKrwHzRC3RGCh/F2RWMVr2tSzY82/1ntGbxEQDcw1Rd X4FhPDljatofn5t4UUumVWj0TH7zfgwNxz5mldbYs1JLkZukt20= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org