$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4mCS_DK6IYTo06565HL9lur60Wk.roa File: 4mCS_DK6IYTo06565HL9lur60Wk.roa (raw, json) Hash identifier: JFXlHSqC+KpZhrQG0Ns5UqFIUmYA7ofrvMO8Hj1+Sg4= Subject key identifier: E2:60:92:FC:32:BA:21:84:E8:D3:AE:7A:E4:72:FD:96:EA:FA:D1:69 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31DE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4mCS_DK6IYTo06565HL9lur60Wk.roa Signing time: Mon 26 Aug 2024 05:31:02 +0000 ROA not before: Mon 26 Aug 2024 05:31:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12766 (0x31de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E26092FC32BA2184E8D3AE7AE472FD96EAFAD169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:91:7c:87:c6:5c:0e:24:55:19:30:f5:86:d9: 66:e2:ce:30:45:30:77:db:f8:a4:f6:ed:b5:56:bd: cc:1f:37:30:f6:12:0f:23:be:37:62:47:b6:31:f1: 34:8c:b1:8a:f1:e1:5f:c9:a8:b7:c9:5d:d7:9d:cd: 52:46:15:cd:08:a5:e6:2f:c4:4b:57:e9:44:37:c2: a1:98:e7:34:ba:bc:77:b0:63:a3:52:e7:b7:d9:fe: fd:07:50:ae:bd:2f:b1:dd:20:30:64:23:f2:22:e9: 24:3c:12:55:16:97:d9:32:c4:19:a3:80:53:20:8d: 11:e7:4d:26:2e:79:1a:07:b9:8a:26:f7:e7:ec:dd: d2:d4:44:29:09:33:59:25:42:64:88:49:3c:87:55: f0:f1:80:3a:41:bf:4d:81:9f:d6:a2:4b:6c:da:01: 1b:ee:82:a7:9e:e1:48:b6:27:92:4d:d3:27:4b:90: b1:a0:b9:90:93:34:1c:69:90:c1:81:b7:ac:06:ae: aa:77:a3:fb:c1:38:76:f7:68:4c:84:b2:aa:7c:5d: 97:e1:7f:8e:62:a6:8f:46:0e:5e:32:bc:86:75:6c: be:80:0a:46:56:97:1a:ab:5e:2e:5d:87:e7:3b:2f: 74:3d:93:ef:6f:f9:ba:11:d2:55:21:4c:8c:53:ba: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:60:92:FC:32:BA:21:84:E8:D3:AE:7A:E4:72:FD:96:EA:FA:D1:69 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4mCS_DK6IYTo06565HL9lur60Wk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.28.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:a9:b7:bb:af:cd:60:1b:ed:07:69:3b:1b:fd:27:9f:60:b6: 52:c7:a3:6a:79:2c:54:18:f1:46:94:4c:da:cd:3f:9a:f0:ec: 68:e2:63:94:88:7c:a0:e5:36:d8:0c:de:d9:0a:d3:75:12:52: d2:08:1d:a3:d9:73:8a:5f:22:aa:b9:ba:03:fa:10:18:5c:72: 82:ff:62:d6:9d:1c:2d:64:28:e1:43:c3:fc:c3:8e:16:b4:77: fd:ed:a1:fc:33:90:3f:03:2d:7e:91:81:4a:53:17:79:68:c7: 30:36:f1:66:da:30:13:79:3c:da:e4:42:d8:02:33:8a:aa:be: 01:a8:09:6c:00:65:93:eb:53:5e:3f:27:65:fc:02:36:6c:0a: 90:9f:87:97:e4:89:b4:7d:7c:86:39:8c:30:e2:b6:a7:cc:2d: f2:a8:68:a7:4a:4c:9a:63:a6:ce:ae:66:b4:29:9b:17:62:ad: bf:b2:49:19:ab:54:bd:5c:1e:ab:54:a4:8f:a2:35:24:f7:63: e8:3d:07:26:e0:e1:2d:e2:ad:13:4b:3b:5b:d9:44:cf:96:51: 34:ff:43:26:d6:ba:00:7d:a4:34:30:1d:71:f7:97:5c:53:5c: 0a:de:ba:40:3a:ee:c5:87:cb:63:b8:79:ee:74:e9:4e:16:b5: 91:37:35:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyNjA5MkZDMzJCQTIx ODRFOEQzQUU3QUU0NzJGRDk2RUFGQUQxNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgkXyHxlwOJFUZMPWG2WbizjBFMHfb+KT27bVWvcwfNzD2Eg8j vjdiR7Yx8TSMsYrx4V/JqLfJXdedzVJGFc0IpeYvxEtX6UQ3wqGY5zS6vHewY6NS 57fZ/v0HUK69L7HdIDBkI/Ii6SQ8ElUWl9kyxBmjgFMgjRHnTSYueRoHuYom9+fs 3dLURCkJM1klQmSISTyHVfDxgDpBv02Bn9aiS2zaARvugqee4Ui2J5JN0ydLkLGg uZCTNBxpkMGBt6wGrqp3o/vBOHb3aEyEsqp8XZfhf45ipo9GDl4yvIZ1bL6ACkZW lxqrXi5dh+c7L3Q9k+9v+boR0lUhTIxTun+bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4mCS/DK6IYTo06565HL9lur60WkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRtQ1NfREs2SVlUbzA2NTY1 SEw5bHVyNjBXay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wxwwDQYJKoZIhvcNAQELBQADggEBAFqpt7uvzWAb7QdpOxv9J59gtlLHo2p5LFQY 8UaUTNrNP5rw7GjiY5SIfKDlNtgM3tkK03USUtIIHaPZc4pfIqq5ugP6EBhccoL/ YtadHC1kKOFDw/zDjha0d/3tofwzkD8DLX6RgUpTF3loxzA28WbaMBN5PNrkQtgC M4qqvgGoCWwAZZPrU14/J2X8AjZsCpCfh5fkibR9fIY5jDDitqfMLfKoaKdKTJpj ps6uZrQpmxdirb+ySRmrVL1cHqtUpI+iNST3Y+g9Bybg4S3irRNLO1vZRM+WUTT/ QybWugB9pDQwHXH3l1xTXAreukA67sWHy2O4ee506U4WtZE3Nds= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org