$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rRydo1q8si4c0ncRHkhWzyVfnU.roa File: 5rRydo1q8si4c0ncRHkhWzyVfnU.roa (raw, json) Hash identifier: zHnYxBnSHcCbLBbLte6sOdKd6me3rfd2FOD2VwAQWlQ= Subject key identifier: E6:B4:72:76:8D:6A:F2:C8:B8:73:49:DC:44:79:21:5B:3C:95:7E:75 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31C2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rRydo1q8si4c0ncRHkhWzyVfnU.roa Signing time: Mon 26 Aug 2024 05:30:54 +0000 ROA not before: Mon 26 Aug 2024 05:30:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.0.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12738 (0x31c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E6B472768D6AF2C8B87349DC4479215B3C957E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:6e:6f:c4:43:5a:25:e7:a1:56:44:72:b6: 33:da:d5:55:e0:30:92:c5:2e:87:1d:24:ef:5e:6e: 67:5b:9d:c4:4d:de:ab:ea:c4:51:fd:4c:18:66:bd: 80:16:fa:6e:9c:5a:02:51:a0:6c:68:1d:64:93:5b: 4d:66:a9:6a:e1:a8:e0:68:e7:a9:85:a5:37:ca:f0: 1a:5d:b2:09:59:87:7d:c6:15:fe:f2:82:7a:c2:c3: b2:55:af:62:b4:7d:92:0c:f5:90:85:f1:13:72:8d: 24:df:d2:be:b4:8c:32:07:29:23:8e:fe:11:48:c8: 5e:76:18:22:fc:ac:80:d8:25:42:4b:72:e2:87:25: 16:30:69:9a:4b:f8:cd:17:1b:9f:3e:19:8c:4c:70: b3:24:bc:dc:68:af:6e:0a:78:7a:35:31:3e:29:33: da:fc:88:99:c6:ea:7e:1c:58:4e:36:62:fd:d4:dc: b6:fc:f7:39:66:89:f4:1f:72:fb:24:6a:da:9b:bc: 91:82:93:9d:7d:6c:e4:af:75:ab:a1:71:c2:60:92: 2f:96:41:03:be:39:79:23:25:24:85:95:64:5b:28: 56:dd:11:f8:87:b3:96:a7:de:f0:81:be:e1:eb:7a: 04:0d:31:3e:b8:a9:bc:af:b9:77:a7:e0:8e:d0:87: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B4:72:76:8D:6A:F2:C8:B8:73:49:DC:44:79:21:5B:3C:95:7E:75 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rRydo1q8si4c0ncRHkhWzyVfnU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.0.0/20 Signature Algorithm: sha256WithRSAEncryption 87:4b:94:87:7b:66:3d:19:9c:ed:5a:a2:f0:97:9a:f7:69:af: 25:9e:74:4c:18:8d:23:ee:d0:7d:e6:73:5c:1d:76:c9:fb:6e: ab:87:cb:49:ac:2d:a7:22:c8:4d:b7:0f:62:49:16:68:fb:8a: aa:fc:c7:ed:67:95:95:d7:64:ed:33:48:61:2a:c2:25:27:34: 9e:94:06:cc:aa:4f:5c:ae:bc:96:c7:7b:05:9b:5d:b2:a0:d7: d4:9a:30:32:65:d9:aa:51:be:d0:c4:c6:83:46:d4:2e:75:a8: 82:88:59:52:e4:e3:75:eb:12:02:80:c9:c1:41:b4:89:9f:f2: 1a:e1:e4:1e:81:ad:86:b9:59:83:03:01:01:2c:33:d6:21:b5: 4b:92:81:fe:ef:e0:09:0a:3a:d1:bd:5b:1a:5a:00:8f:16:6b: 44:0c:30:85:98:c7:cc:97:b4:1d:6f:87:0e:c4:7e:19:9c:ec: c2:83:4e:48:d1:2e:31:9c:01:96:bb:3a:54:78:43:60:7f:8a: d5:90:6a:d9:38:14:7f:fb:be:7f:0b:d1:6d:f2:60:52:72:e2: 97:84:66:25:b6:80:94:cf:a9:b1:47:6d:00:b5:81:3d:f3:b2: c1:54:fb:6e:d0:63:88:c4:bd:08:85:5f:75:9d:3c:95:07:5e: 55:44:91:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU2QjQ3Mjc2OEQ2QUYy QzhCODczNDlEQzQ0NzkyMTVCM0M5NTdFNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcw25vxENaJeehVkRytjPa1VXgMJLFLocdJO9ebmdbncRN3qvq xFH9TBhmvYAW+m6cWgJRoGxoHWSTW01mqWrhqOBo56mFpTfK8BpdsglZh33GFf7y gnrCw7JVr2K0fZIM9ZCF8RNyjSTf0r60jDIHKSOO/hFIyF52GCL8rIDYJUJLcuKH JRYwaZpL+M0XG58+GYxMcLMkvNxor24KeHo1MT4pM9r8iJnG6n4cWE42Yv3U3Lb8 9zlmifQfcvskatqbvJGCk519bOSvdauhccJgki+WQQO+OXkjJSSFlWRbKFbdEfiH s5an3vCBvuHregQNMT64qbyvuXen4I7Qh7fbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5rRydo1q8si4c0ncRHkhWzyVfnUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVyUnlkbzFxOHNpNGMwbmNS SGtoV3p5VmZuVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wgAwDQYJKoZIhvcNAQELBQADggEBAIdLlId7Zj0ZnO1aovCXmvdpryWedEwYjSPu 0H3mc1wddsn7bquHy0msLaciyE23D2JJFmj7iqr8x+1nlZXXZO0zSGEqwiUnNJ6U BsyqT1yuvJbHewWbXbKg19SaMDJl2apRvtDExoNG1C51qIKIWVLk43XrEgKAycFB tImf8hrh5B6BrYa5WYMDAQEsM9YhtUuSgf7v4AkKOtG9WxpaAI8Wa0QMMIWYx8yX tB1vhw7Efhmc7MKDTkjRLjGcAZa7OlR4Q2B/itWQatk4FH/7vn8L0W3yYFJy4peE ZiW2gJTPqbFHbQC1gT3zssFU+27QY4jEvQiFX3WdPJUHXlVEkaQ= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org