$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Z_UStyaNJRaRTtM4h6paUEXSb8.roa File: 4Z_UStyaNJRaRTtM4h6paUEXSb8.roa (raw, json) Hash identifier: ZRhbk6QSJBEmdO2ySqcb49Z06OwJzSQryywtCiWTqK4= Subject key identifier: E1:9F:D4:4A:DC:9A:34:94:5A:45:3B:4C:E2:1E:A9:69:41:17:49:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 321C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Z_UStyaNJRaRTtM4h6paUEXSb8.roa Signing time: Mon 26 Aug 2024 05:31:17 +0000 ROA not before: Mon 26 Aug 2024 05:31:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12828 (0x321c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E19FD44ADC9A34945A453B4CE21EA969411749BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:5b:c0:e8:22:8b:af:e9:29:b0:eb:7a:eb: 9e:e7:52:a8:7a:79:43:ea:bc:21:9c:99:41:8c:21: 66:f1:04:e5:b3:6d:be:ec:44:87:1c:0e:cc:15:a0: 95:2c:83:07:b9:22:8b:13:86:e5:7e:0a:a1:6e:42: 55:74:50:66:31:50:de:1f:30:b8:02:3c:32:0b:89: 50:e8:df:f3:03:af:e0:86:f4:7d:1d:ca:86:d2:d8: 1c:8a:e1:15:d2:46:56:d5:a2:dd:15:85:4c:34:37: 03:88:f5:cd:c8:3a:4d:db:5e:54:a7:76:7b:4b:50: 40:40:33:07:d2:11:9d:a0:bb:b1:d8:94:e0:8a:80: 4d:8a:b5:4b:79:bc:9a:8f:05:21:c3:b7:5b:07:9e: ca:b7:96:c5:cc:1a:60:6a:5e:7a:94:99:eb:70:54: 99:6e:93:5f:66:a5:ee:4f:03:ac:ea:3e:ff:38:b1: 42:cc:21:f5:25:46:4b:28:68:29:63:fc:8a:d6:ae: c8:8a:dc:c7:21:68:2f:1c:1a:03:82:d2:43:8e:a5: 29:e0:05:eb:6e:e6:55:f2:bb:22:f3:0d:db:dd:bd: ad:3a:ca:f6:90:44:20:73:26:6b:c6:42:db:0c:20: 39:24:80:bc:83:35:af:64:97:dd:de:10:26:84:ac: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9F:D4:4A:DC:9A:34:94:5A:45:3B:4C:E2:1E:A9:69:41:17:49:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Z_UStyaNJRaRTtM4h6paUEXSb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.216.0/21 Signature Algorithm: sha256WithRSAEncryption 33:46:c8:4a:06:c9:db:db:a6:63:df:24:34:4a:be:4c:2e:48: e9:98:7c:01:dc:ad:24:40:fd:ff:c9:60:2b:d1:dc:a3:14:50: fb:e8:d4:27:16:0d:8c:7b:3e:61:f7:18:0a:3e:cd:da:13:8e: 9d:d3:02:41:5d:7a:0d:cc:58:78:b1:a6:3d:40:b3:db:b3:fb: 10:d8:6c:7c:a1:4b:5d:c8:28:9b:7b:74:62:31:93:df:22:67: ca:76:1f:c0:e1:bc:42:ac:47:89:ba:15:dc:1c:b6:7e:4d:f8: 83:82:be:46:0b:11:46:1e:09:f2:f9:37:ae:88:48:c6:9a:24: 05:d7:90:3a:07:8d:92:28:17:5f:0e:56:6f:9d:70:ff:e4:06: df:a5:8a:bb:18:2d:34:cf:89:44:63:04:39:f9:69:44:9a:7e: 3a:ea:b5:e9:03:0c:90:4b:c5:a9:1d:92:00:5f:31:99:0a:dd: 04:00:2b:ce:c4:3e:47:68:8e:61:3c:19:df:23:db:19:c3:24: e4:0f:b1:e7:a3:a6:6f:55:c8:bb:35:22:84:3e:19:b0:c6:86: fd:da:89:99:8a:66:c6:4c:b5:8b:b1:c5:ce:9e:c8:a5:75:55: b2:0b:6b:43:5a:ee:e8:61:69:e7:f4:17:65:81:86:a4:d8:14: c2:3d:2a:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxOUZENDRBREM5QTM0 OTQ1QTQ1M0I0Q0UyMUVBOTY5NDExNzQ5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvcFvA6CKLr+kpsOt6657nUqh6eUPqvCGcmUGMIWbxBOWzbb7s RIccDswVoJUsgwe5IosThuV+CqFuQlV0UGYxUN4fMLgCPDILiVDo3/MDr+CG9H0d yobS2ByK4RXSRlbVot0VhUw0NwOI9c3IOk3bXlSndntLUEBAMwfSEZ2gu7HYlOCK gE2KtUt5vJqPBSHDt1sHnsq3lsXMGmBqXnqUmetwVJluk19mpe5PA6zqPv84sULM IfUlRksoaClj/IrWrsiK3MchaC8cGgOC0kOOpSngBetu5lXyuyLzDdvdva06yvaQ RCBzJmvGQtsMIDkkgLyDNa9kl93eECaErICNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4Z/UStyaNJRaRTtM4h6paUEXSb8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRaX1VTdHlhTkpSYVJUdE00 aDZwYVVFWFNiOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6dgwDQYJKoZIhvcNAQELBQADggEBADNGyEoGydvbpmPfJDRKvkwuSOmYfAHcrSRA /f/JYCvR3KMUUPvo1CcWDYx7PmH3GAo+zdoTjp3TAkFdeg3MWHixpj1As9uz+xDY bHyhS13IKJt7dGIxk98iZ8p2H8DhvEKsR4m6Fdwctn5N+IOCvkYLEUYeCfL5N66I SMaaJAXXkDoHjZIoF18OVm+dcP/kBt+lirsYLTTPiURjBDn5aUSafjrqtekDDJBL xakdkgBfMZkK3QQAK87EPkdojmE8Gd8j2xnDJOQPseejpm9VyLs1IoQ+GbDGhv3a iZmKZsZMtYuxxc6eyKV1VbILa0Na7uhhaef0F2WBhqTYFMI9Ktc= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org