$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5kfWZQv5lIIPdIsIu_dbnMkYcaI.roa File: 5kfWZQv5lIIPdIsIu_dbnMkYcaI.roa (raw, json) Hash identifier: AtYPPwi6u9C5IMCq7OjHOXysBwRMS8E3e1wL5CAi0yo= Subject key identifier: E6:47:D6:65:0B:F9:94:82:0F:74:8B:08:BB:F7:5B:9C:C9:18:71:A2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31C6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5kfWZQv5lIIPdIsIu_dbnMkYcaI.roa Signing time: Mon 26 Aug 2024 05:30:55 +0000 ROA not before: Mon 26 Aug 2024 05:30:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.204.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12742 (0x31c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E647D6650BF994820F748B08BBF75B9CC91871A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:5b:83:7f:dd:95:c6:de:ea:22:45:07:58: 57:c5:63:62:7a:ff:6b:28:26:e2:d9:1c:4e:8a:5a: 61:d8:a5:8c:a3:44:44:dd:48:ab:e8:35:d4:18:ac: b0:3c:22:24:9c:21:69:b4:97:34:35:f1:c3:0f:85: 56:3a:a7:14:d1:d9:d7:7c:0a:d2:1c:88:3c:4a:69: 4e:91:87:72:9c:92:0d:94:55:93:96:53:87:d2:f7: 13:4a:c0:f6:fa:03:f8:c0:70:05:ec:95:7b:0a:dc: 69:47:d1:e6:92:43:f4:5a:1a:4f:5a:d3:60:6f:95: 26:6e:31:6f:e5:ac:17:d3:3d:f0:7e:3c:af:5d:20: e2:96:22:ed:0a:88:39:9d:be:79:57:33:ff:e1:7a: c7:6b:85:d7:f6:bc:e7:e3:b5:fb:b2:d8:9c:a6:b9: 72:84:37:97:01:d8:39:92:48:c8:7c:59:c7:08:3a: 43:9e:c2:23:74:90:c4:50:bb:4e:15:eb:95:10:b6: ff:c4:3a:d8:87:af:69:0c:83:d6:b1:43:6a:ff:24: bc:b0:1c:92:98:86:03:a7:62:9f:a7:41:96:66:a5: 57:cc:62:a0:d1:c0:46:97:89:c8:63:3b:09:46:93: cd:5d:f0:1b:a3:c0:2a:56:86:60:95:f8:b8:2c:df: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:D6:65:0B:F9:94:82:0F:74:8B:08:BB:F7:5B:9C:C9:18:71:A2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5kfWZQv5lIIPdIsIu_dbnMkYcaI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.204.64/27 Signature Algorithm: sha256WithRSAEncryption 92:31:42:bd:57:20:b6:70:79:b7:d7:93:b2:8d:3d:f1:ab:c4: 72:e3:50:f5:d6:66:b3:0b:c3:5a:b4:1c:12:bc:51:0c:17:b2: a2:cf:07:a2:ec:fa:11:9c:66:94:73:bd:01:ed:3f:21:80:9a: 47:16:00:da:d2:ab:8a:a2:0f:0a:b1:ec:ec:ce:92:42:d3:ba: 8e:63:03:74:58:1e:74:44:95:79:8f:8c:40:2b:03:31:64:32: 6f:61:71:02:8f:40:44:66:00:da:be:08:6f:20:47:39:c6:19: f6:4f:db:cb:3b:27:a4:db:d9:f0:0f:70:a3:fb:e0:9d:38:c6: ad:27:b9:16:97:99:ae:8d:35:01:b8:58:49:0a:bb:30:95:15: ed:2d:df:5b:e6:62:49:d9:85:68:fc:a7:29:c0:f2:67:f2:5b: 09:d1:4a:4c:44:06:2b:27:af:17:1c:d4:fc:2a:77:eb:c6:b2: c3:c9:12:db:b9:aa:84:8f:59:49:c0:00:4a:a6:48:0b:99:0e: 6a:7e:c2:d8:67:14:58:b2:86:42:83:08:fd:4c:e7:53:52:6e: 5d:d4:ef:18:ec:7f:4f:16:35:1c:53:07:ae:fa:7d:f1:84:f8: 13:d2:a9:71:70:41:a6:b1:3b:5a:ed:ca:78:da:fa:6f:5e:71: 81:c3:15:c2 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU2NDdENjY1MEJGOTk0 ODIwRjc0OEIwOEJCRjc1QjlDQzkxODcxQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCngFuDf92Vxt7qIkUHWFfFY2J6/2soJuLZHE6KWmHYpYyjRETd SKvoNdQYrLA8IiScIWm0lzQ18cMPhVY6pxTR2dd8CtIciDxKaU6Rh3Kckg2UVZOW U4fS9xNKwPb6A/jAcAXslXsK3GlH0eaSQ/RaGk9a02BvlSZuMW/lrBfTPfB+PK9d IOKWIu0KiDmdvnlXM//hesdrhdf2vOfjtfuy2JymuXKEN5cB2DmSSMh8WccIOkOe wiN0kMRQu04V65UQtv/EOtiHr2kMg9axQ2r/JLywHJKYhgOnYp+nQZZmpVfMYqDR wEaXichjOwlGk81d8BujwCpWhmCV+Lgs3y3ZAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU5kfWZQv5lIIPdIsIu/dbnMkYcaIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVrZldaUXY1bElJUGRJc0l1 X2Ribk1rWWNhSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7 wsxAMA0GCSqGSIb3DQEBCwUAA4IBAQCSMUK9VyC2cHm315OyjT3xq8Ry41D11maz C8NatBwSvFEMF7Kizwei7PoRnGaUc70B7T8hgJpHFgDa0quKog8KsezszpJC07qO YwN0WB50RJV5j4xAKwMxZDJvYXECj0BEZgDavghvIEc5xhn2T9vLOyek29nwD3Cj ++CdOMatJ7kWl5mujTUBuFhJCrswlRXtLd9b5mJJ2YVo/KcpwPJn8lsJ0UpMRAYr J68XHNT8KnfrxrLDyRLbuaqEj1lJwABKpkgLmQ5qfsLYZxRYsoZCgwj9TOdTUm5d 1O8Y7H9PFjUcUweu+n3xhPgT0qlxcEGmsTta7cp42vpvXnGBwxXC -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org