$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6M-nFo1jynTsJhXq_-IvxykHz7U.roa File: 6M-nFo1jynTsJhXq_-IvxykHz7U.roa (raw, json) Hash identifier: uuJY+No1lrAz4DpfD246jxjHF1G1IvXu+SHOZf/4U0M= Subject key identifier: E8:CF:A7:16:8D:63:CA:74:EC:26:15:EA:FF:E2:2F:C7:29:07:CF:B5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30BE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6M-nFo1jynTsJhXq_-IvxykHz7U.roa Signing time: Mon 26 Aug 2024 05:29:47 +0000 ROA not before: Mon 26 Aug 2024 05:29:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12478 (0x30be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E8CFA7168D63CA74EC2615EAFFE22FC72907CFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:43:d7:89:98:a7:af:3e:7b:9c:24:52:c7: 94:7f:8c:94:30:41:5a:59:8d:53:92:6d:53:1c:92: d3:5b:37:ef:b0:e2:d3:35:b5:15:7a:84:3d:b3:1b: 8d:f5:34:bc:58:92:89:89:63:d9:53:3c:45:9f:cc: 50:ce:fd:12:78:02:10:a3:28:e7:0f:c9:bc:ba:f6: 17:68:a6:22:ed:1b:35:94:51:cb:68:01:0b:f9:ec: 81:b6:6a:38:51:be:10:0b:75:6d:1c:4f:ba:31:43: f3:05:76:04:b0:9a:c5:68:56:11:f0:85:0c:1c:e6: 7d:27:34:ff:27:46:cb:55:9f:c7:75:84:6d:b6:e4: c8:13:7a:21:ab:c4:35:d2:35:3d:c8:83:88:e0:f0: 1e:29:45:d8:ce:b9:5d:74:6e:72:d2:53:4e:85:ea: 5b:1b:5d:0f:2a:93:ac:01:e9:c5:82:f3:81:00:22: e1:53:f4:5e:a5:80:c8:8d:eb:06:9d:72:b6:61:f2: d7:b7:3c:4b:ca:14:b0:30:b0:90:84:fe:66:a8:34: 87:00:4e:18:b7:7e:cc:55:5d:21:06:45:57:64:23: 24:21:ca:cb:62:d7:3a:49:3f:74:81:29:5d:d0:f6: c8:83:27:57:8d:cc:1d:4a:32:46:46:70:e3:f9:ab: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CF:A7:16:8D:63:CA:74:EC:26:15:EA:FF:E2:2F:C7:29:07:CF:B5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6M-nFo1jynTsJhXq_-IvxykHz7U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.200.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:07:a8:b8:74:6b:c2:e1:c3:a0:97:57:68:4f:5a:74:38:5d: f1:a7:d2:f8:eb:2b:2c:68:f3:41:71:7f:30:55:0e:61:a0:d4: e2:8e:1f:71:d0:c0:fb:2d:7a:60:8a:12:b3:82:38:2f:82:08: 32:df:67:87:3e:f7:16:ed:08:ff:2a:f8:1d:4a:ce:8a:39:11: 9c:4a:ee:89:59:ab:2c:15:f9:6a:ce:0b:34:f5:d8:d1:94:30: 86:f4:b4:07:ae:85:55:86:7f:fe:97:c9:04:a6:b5:73:f8:ca: 2d:a7:69:cb:1c:18:ef:88:74:0e:c4:d4:94:b6:63:ba:ff:a3: 5f:d1:29:42:75:34:d8:06:17:c6:6d:14:b8:3c:80:a3:76:5e: e2:0a:b8:d0:af:a7:21:dd:e6:c7:37:4b:5c:f4:09:15:68:65: 83:ce:7c:7c:c1:98:49:e8:78:14:45:ce:30:92:d5:b6:66:88: 73:57:c1:8a:91:a5:88:99:77:1c:82:55:16:9c:0d:36:3e:b0: 41:51:5f:5d:13:25:ed:9e:b3:92:89:90:81:96:61:c7:78:5a: a4:73:19:3f:16:4b:86:a4:a1:28:d0:8e:d7:4f:ce:78:1f:f4: a1:03:14:9b:91:f2:cf:94:52:c7:2a:3e:0b:58:f1:06:b1:25: e9:67:d5:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICML4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4Q0ZBNzE2OEQ2M0NB NzRFQzI2MTVFQUZGRTIyRkM3MjkwN0NGQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZFUPXiZinrz57nCRSx5R/jJQwQVpZjVOSbVMcktNbN++w4tM1 tRV6hD2zG431NLxYkomJY9lTPEWfzFDO/RJ4AhCjKOcPyby69hdopiLtGzWUUcto AQv57IG2ajhRvhALdW0cT7oxQ/MFdgSwmsVoVhHwhQwc5n0nNP8nRstVn8d1hG22 5MgTeiGrxDXSNT3Ig4jg8B4pRdjOuV10bnLSU06F6lsbXQ8qk6wB6cWC84EAIuFT 9F6lgMiN6wadcrZh8te3PEvKFLAwsJCE/maoNIcAThi3fsxVXSEGRVdkIyQhysti 1zpJP3SBKV3Q9siDJ1eNzB1KMkZGcOP5q3pxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6M+nFo1jynTsJhXq/+IvxykHz7UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZNLW5GbzFqeW5Uc0poWHFf LUl2eHlrSHo3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wsgwDQYJKoZIhvcNAQELBQADggEBABoHqLh0a8Lhw6CXV2hPWnQ4XfGn0vjrKyxo 80FxfzBVDmGg1OKOH3HQwPstemCKErOCOC+CCDLfZ4c+9xbtCP8q+B1Kzoo5EZxK 7olZqywV+WrOCzT12NGUMIb0tAeuhVWGf/6XyQSmtXP4yi2nacscGO+IdA7E1JS2 Y7r/o1/RKUJ1NNgGF8ZtFLg8gKN2XuIKuNCvpyHd5sc3S1z0CRVoZYPOfHzBmEno eBRFzjCS1bZmiHNXwYqRpYiZdxyCVRacDTY+sEFRX10TJe2es5KJkIGWYcd4WqRz GT8WS4akoSjQjtdPzngf9KEDFJuR8s+UUscqPgtY8QaxJeln1ZI= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org