$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ilxeMJspMHgcPyXA0U--PteWsE.roa File: 4ilxeMJspMHgcPyXA0U--PteWsE.roa (raw, json) Hash identifier: ILU/FXkQQVz8zsuZrYL4aC/fy990woG9PvU/nbSDQGA= Subject key identifier: E2:29:71:78:C2:6C:A4:C1:E0:70:FC:97:03:45:3E:F8:FB:5E:5A:C1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3222 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ilxeMJspMHgcPyXA0U--PteWsE.roa Signing time: Mon 26 Aug 2024 05:31:18 +0000 ROA not before: Mon 26 Aug 2024 05:31:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12834 (0x3222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E2297178C26CA4C1E070FC9703453EF8FB5E5AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:41:50:dc:a7:ed:31:8e:b4:29:98:27:e7: 3c:d9:ac:8a:43:40:74:63:b2:0c:04:ee:fc:3c:94: 2a:0f:38:9c:f6:f5:69:93:22:ff:a2:a1:73:2d:d9: cb:46:80:f0:f4:db:32:e1:25:3e:1a:9f:43:d6:c3: 71:95:31:01:a6:ef:cb:5b:0c:c1:33:ca:36:81:04: 41:a9:cd:71:da:5d:0d:ca:39:08:98:58:df:af:64: da:20:90:cf:35:74:c4:f7:1f:fa:a5:86:f8:f8:76: b7:8a:12:d5:1a:91:9b:07:70:a6:a8:b6:3b:44:7d: 20:8c:94:dd:be:6a:4b:a8:ed:ea:f0:ea:cd:4f:58: 00:f2:18:59:c1:c0:2c:c1:f4:af:25:d2:84:a2:58: 13:14:84:33:b3:97:fa:dd:9f:4b:9e:ff:7a:b2:83: 9d:ba:bc:03:f8:a8:ec:e7:ae:58:72:09:6f:c5:f0: a1:5c:bc:55:d8:a4:0b:bc:fd:d7:88:c2:0f:18:63: 15:cb:79:11:83:b5:5e:86:f4:5c:80:cb:be:1a:4e: 95:8c:f6:2b:48:6e:bc:12:83:a4:79:49:e0:a1:e3: b6:7d:65:18:2d:f4:22:96:f8:42:ff:58:69:c6:a9: ae:25:06:83:ac:9a:4e:cc:7c:19:15:4f:8d:b7:81: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:29:71:78:C2:6C:A4:C1:E0:70:FC:97:03:45:3E:F8:FB:5E:5A:C1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ilxeMJspMHgcPyXA0U--PteWsE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/17 Signature Algorithm: sha256WithRSAEncryption 6f:c2:5e:96:76:e1:73:74:83:9a:d1:25:dd:a0:31:c8:cd:67: c7:89:6d:47:23:44:47:ae:5c:c6:1d:af:62:0c:fa:57:b9:7a: c8:1d:f2:cd:b9:28:79:1a:b9:16:49:ee:ab:14:60:d9:f9:eb: f9:3f:87:cb:ab:a4:5f:42:4a:26:78:cb:fd:8d:23:8e:b5:7f: 60:97:0e:1c:bf:3a:bf:3b:ba:59:cb:e4:50:ad:24:55:c7:40: cf:e9:2c:58:ed:d1:f8:26:7d:f4:74:6c:5f:6e:24:97:80:c1: c2:0b:d3:e9:be:2f:b7:be:e8:82:d4:bf:f4:83:2a:b1:28:86: 43:98:ad:3b:07:e3:50:0e:f7:51:75:f4:31:0c:72:03:e2:9e: 54:f7:41:c7:61:1c:c7:5e:a4:27:b9:ba:83:53:84:f7:6b:b3: f7:96:f3:fb:0d:29:12:e5:73:5f:fd:67:1d:60:bb:88:78:cc: 88:a9:b6:19:d9:f4:c7:4a:45:21:5f:c6:ad:cc:e2:d3:4e:55: 93:c4:c0:2c:81:d1:3f:87:c8:4f:3e:08:49:a2:b5:20:13:53: 81:59:97:8c:54:7f:2b:9a:64:88:60:05:2c:29:3b:6a:73:61: 9b:c7:cb:21:59:17:24:a2:70:35:3e:38:92:88:81:e5:1c:05: 91:fa:56:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyMjk3MTc4QzI2Q0E0 QzFFMDcwRkM5NzAzNDUzRUY4RkI1RTVBQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeikFQ3KftMY60KZgn5zzZrIpDQHRjsgwE7vw8lCoPOJz29WmT Iv+ioXMt2ctGgPD02zLhJT4an0PWw3GVMQGm78tbDMEzyjaBBEGpzXHaXQ3KOQiY WN+vZNogkM81dMT3H/qlhvj4dreKEtUakZsHcKaotjtEfSCMlN2+akuo7erw6s1P WADyGFnBwCzB9K8l0oSiWBMUhDOzl/rdn0ue/3qyg526vAP4qOznrlhyCW/F8KFc vFXYpAu8/deIwg8YYxXLeRGDtV6G9FyAy74aTpWM9itIbrwSg6R5SeCh47Z9ZRgt 9CKW+EL/WGnGqa4lBoOsmk7MfBkVT423ge57AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4ilxeMJspMHgcPyXA0U++PteWsEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRpbHhlTUpzcE1IZ2NQeVhB MFUtLVB0ZVdzRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7 wAAwDQYJKoZIhvcNAQELBQADggEBAG/CXpZ24XN0g5rRJd2gMcjNZ8eJbUcjREeu XMYdr2IM+le5esgd8s25KHkauRZJ7qsUYNn56/k/h8urpF9CSiZ4y/2NI461f2CX Dhy/Or87ulnL5FCtJFXHQM/pLFjt0fgmffR0bF9uJJeAwcIL0+m+L7e+6ILUv/SD KrEohkOYrTsH41AO91F19DEMcgPinlT3QcdhHMdepCe5uoNThPdrs/eW8/sNKRLl c1/9Zx1gu4h4zIipthnZ9MdKRSFfxq3M4tNOVZPEwCyB0T+HyE8+CEmitSATU4FZ l4xUfyuaZIhgBSwpO2pzYZvHyyFZFySicDU+OJKIgeUcBZH6Vrw= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:49 2024 by rpki-client on console-fra.rpki-client.org