$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/43cFJVvNC1qmSumIPIayFkFPUgg.roa File: 43cFJVvNC1qmSumIPIayFkFPUgg.roa (raw, json) Hash identifier: 6xdLhGTr8Tacp8JmNsRoxpQ8E28/u9JDL0StkGET2nE= Subject key identifier: E3:77:05:25:5B:CD:0B:5A:A6:4A:E9:88:3C:86:B2:16:41:4F:52:08 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31BC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/43cFJVvNC1qmSumIPIayFkFPUgg.roa Signing time: Mon 26 Aug 2024 05:30:53 +0000 ROA not before: Mon 26 Aug 2024 05:30:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12732 (0x31bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E37705255BCD0B5AA64AE9883C86B216414F5208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:e7:de:60:7f:da:dc:f0:65:14:74:28:68: b3:9a:e4:5f:5f:84:2b:a8:38:15:b5:f0:03:da:5c: 43:d3:65:cd:bd:29:04:a8:b7:dd:34:0c:9f:1e:c3: 03:19:82:24:60:18:90:36:a2:33:c7:ca:78:4b:c5: 8e:9c:1f:b4:dc:ba:0f:9c:d0:7b:11:5d:a3:93:f1: a6:31:b7:0c:35:e8:4e:2e:1e:8f:b2:92:2d:6a:6c: 3b:a0:70:eb:cb:8c:4c:7c:da:3c:d2:42:d1:9c:9d: d2:ab:87:cb:c8:6d:45:f7:e5:00:f0:b2:40:41:ca: 98:cc:f0:b4:bb:1e:9c:1d:f3:32:63:3f:60:90:f4: f0:b3:af:40:db:22:85:f6:0f:e5:be:51:2f:b6:a5: ae:07:5c:16:ce:20:17:1b:19:54:6f:68:c4:d1:fc: e4:a9:9f:a2:26:3c:c1:ff:9f:e8:b5:1f:19:cf:c8: 3f:97:2f:7d:2b:77:17:ae:2d:52:be:e0:e7:14:24: 35:eb:94:d8:33:21:42:b7:28:59:d9:82:50:d9:9e: b8:df:e1:c0:42:6e:d4:8e:08:04:af:75:39:51:e7: b7:10:a7:4b:27:ec:33:8d:99:ca:36:19:80:d6:6b: 00:ca:da:a5:6c:c3:30:65:eb:81:cf:42:e8:d9:e0: 67:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:77:05:25:5B:CD:0B:5A:A6:4A:E9:88:3C:86:B2:16:41:4F:52:08 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/43cFJVvNC1qmSumIPIayFkFPUgg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.52.0/23 Signature Algorithm: sha256WithRSAEncryption 72:98:9b:82:32:bc:a7:c6:dd:7a:ca:66:d3:af:16:31:83:eb: 93:9f:9e:ef:84:d4:1a:b7:86:57:83:07:ff:18:a6:01:37:63: 85:c3:5c:93:47:5d:54:6a:21:28:41:86:ee:a5:9e:c4:cc:46: 48:3c:56:9a:c4:88:6a:94:fc:a1:0d:d4:f7:bd:e0:7e:31:7f: 94:1c:d0:6e:55:a5:b2:51:12:a4:d9:31:e6:33:48:0c:d6:d7: ab:f9:bc:91:9d:f0:7f:9a:ec:b3:3c:37:80:36:63:02:62:c2: 1a:a7:5b:91:e4:f7:dc:fa:f2:15:0c:09:b2:33:1f:c0:69:d3: 56:fe:5f:1f:6a:85:24:f5:45:e4:4c:bc:7a:6e:80:02:64:7c: ad:78:73:88:e4:f1:f3:50:e4:05:42:a0:c4:02:8f:48:8a:0d: 84:21:9b:2a:e0:bb:59:61:4d:65:1f:59:f3:57:60:6a:b6:e9: 6b:a6:6d:a5:77:bf:f4:8f:83:61:8f:60:f1:4d:8a:60:29:79: 1e:f6:e6:6e:27:6d:02:b5:5f:cd:45:2f:20:90:06:ab:9a:87: c5:9b:04:e3:a9:14:bc:8a:7c:17:04:d6:3d:18:82:c8:95:7f: 9a:9c:24:d4:ff:2a:f5:1e:1f:16:00:90:b3:55:ec:b1:57:f9: ed:b0:b1:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzNzcwNTI1NUJDRDBC NUFBNjRBRTk4ODNDODZCMjE2NDE0RjUyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9H+feYH/a3PBlFHQoaLOa5F9fhCuoOBW18APaXEPTZc29KQSo t900DJ8ewwMZgiRgGJA2ojPHynhLxY6cH7Tcug+c0HsRXaOT8aYxtww16E4uHo+y ki1qbDugcOvLjEx82jzSQtGcndKrh8vIbUX35QDwskBBypjM8LS7Hpwd8zJjP2CQ 9PCzr0DbIoX2D+W+US+2pa4HXBbOIBcbGVRvaMTR/OSpn6ImPMH/n+i1HxnPyD+X L30rdxeuLVK+4OcUJDXrlNgzIUK3KFnZglDZnrjf4cBCbtSOCASvdTlR57cQp0sn 7DONmco2GYDWawDK2qVswzBl64HPQujZ4GevAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU43cFJVvNC1qmSumIPIayFkFPUggwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzQzY0ZKVnZOQzFxbVN1bUlQ SWF5RmtGUFVnZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq ATQwDQYJKoZIhvcNAQELBQADggEBAHKYm4IyvKfG3XrKZtOvFjGD65Ofnu+E1Bq3 hleDB/8YpgE3Y4XDXJNHXVRqIShBhu6lnsTMRkg8VprEiGqU/KEN1Pe94H4xf5Qc 0G5VpbJREqTZMeYzSAzW16v5vJGd8H+a7LM8N4A2YwJiwhqnW5Hk99z68hUMCbIz H8Bp01b+Xx9qhST1ReRMvHpugAJkfK14c4jk8fNQ5AVCoMQCj0iKDYQhmyrgu1lh TWUfWfNXYGq26WumbaV3v/SPg2GPYPFNimApeR725m4nbQK1X81FLyCQBquah8Wb BOOpFLyKfBcE1j0YgsiVf5qcJNT/KvUeHxYAkLNV7LFX+e2wsd0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org