$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6stwnHKMGVB90JR_bU98gCDhsCY.roa File: 6stwnHKMGVB90JR_bU98gCDhsCY.roa (raw, json) Hash identifier: G3zt0uhStbskIlx13u/BuLEYNhtylHcnqRU8HO1K0Es= Subject key identifier: EA:CB:70:9C:72:8C:19:50:7D:D0:94:7F:6D:4F:7C:80:20:E1:B0:26 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32F8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6stwnHKMGVB90JR_bU98gCDhsCY.roa Signing time: Mon 26 Aug 2024 05:32:11 +0000 ROA not before: Mon 26 Aug 2024 05:32:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13048 (0x32f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EACB709C728C19507DD0947F6D4F7C8020E1B026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:23:a7:fd:6a:e8:47:67:f4:49:50:78:6b:2f: ea:a6:bf:16:0c:56:57:9e:6f:c1:69:55:51:f7:92: 94:7c:3f:e9:c2:d7:c8:74:47:98:36:51:e3:6b:4b: a2:1a:ef:ba:ad:1a:87:05:1e:e9:4d:75:3c:32:4e: ea:d6:ab:2b:2a:53:1b:ad:eb:e7:06:a2:2c:b6:22: 67:c7:89:97:19:e1:0a:fc:2d:1e:24:d4:72:06:00: 79:7e:32:77:aa:7d:f4:f8:97:72:c9:dd:c6:ac:30: a6:b2:cb:0b:b1:e1:62:58:98:2d:c4:53:cd:ce:46: 8a:b1:ac:ba:2d:73:74:75:5e:35:c5:73:b6:31:eb: 8b:ff:7a:87:96:8b:11:de:bc:43:c0:8d:37:3c:3b: d8:f1:25:17:ed:4f:5f:05:0c:bf:10:28:d8:a6:02: ed:db:2d:2b:96:ad:dc:a7:ce:e1:8b:7e:65:06:af: b7:3a:7e:3a:9a:0b:aa:61:c2:d6:d5:f6:7f:9f:92: 95:b0:f6:d7:9f:7c:c0:02:16:a2:e5:eb:c7:bb:83: 0e:1b:74:e4:f6:7c:a6:38:40:da:5f:53:28:53:e1: c2:7c:c6:08:5b:ae:39:8a:b4:bd:10:5a:aa:f0:89: 16:8a:68:e5:41:51:61:36:cd:4c:6d:73:78:de:ae: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:70:9C:72:8C:19:50:7D:D0:94:7F:6D:4F:7C:80:20:E1:B0:26 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6stwnHKMGVB90JR_bU98gCDhsCY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.252.0/23 Signature Algorithm: sha256WithRSAEncryption 37:5a:11:82:04:9a:5a:ae:e4:93:e1:e4:ea:2c:d6:7e:97:8f: 08:9a:d0:5b:7e:6d:7a:2e:f9:a3:73:d8:96:67:22:2b:dd:25: 19:a7:8b:46:14:db:c1:9b:fc:9d:e6:0a:6d:2b:03:6c:c6:c0: 11:b0:cf:17:72:50:97:db:22:1c:24:3c:57:7f:9e:26:0b:0d: ee:e8:13:a6:29:9e:2e:29:7f:9f:d5:0e:b3:88:84:78:c9:32: aa:97:23:02:7f:1b:a2:1a:5f:c5:cd:ad:6a:07:51:1d:b1:82: fa:fe:43:d8:b7:64:77:d5:c9:12:67:14:e1:29:d7:18:d0:21: 20:9f:dd:d4:c6:12:a8:6b:ee:cc:33:cf:30:3e:2e:cf:9c:74: 11:3c:a7:23:ef:fb:60:f8:98:e5:4c:7f:1d:06:ff:f9:a4:02: b9:ed:8f:f4:c9:ee:01:e2:c7:28:5b:c6:37:b4:2c:48:90:10: 04:6f:49:6a:02:52:44:66:64:ae:88:8f:8f:30:38:aa:26:44: b7:73:a5:e8:7c:4c:bd:59:50:6e:60:6b:a3:4b:cb:dc:e6:d2: b2:4f:9b:79:62:86:55:03:c0:3c:97:bd:d6:02:93:35:bc:cd: a4:4f:b0:1d:47:fd:15:76:aa:bb:22:15:e0:57:c3:cb:35:b0: 6c:cd:20:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBQ0I3MDlDNzI4QzE5 NTA3REQwOTQ3RjZENEY3QzgwMjBFMUIwMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZI6f9auhHZ/RJUHhrL+qmvxYMVleeb8FpVVH3kpR8P+nC18h0 R5g2UeNrS6Ia77qtGocFHulNdTwyTurWqysqUxut6+cGoiy2ImfHiZcZ4Qr8LR4k 1HIGAHl+MneqffT4l3LJ3casMKayywux4WJYmC3EU83ORoqxrLotc3R1XjXFc7Yx 64v/eoeWixHevEPAjTc8O9jxJRftT18FDL8QKNimAu3bLSuWrdynzuGLfmUGr7c6 fjqaC6phwtbV9n+fkpWw9teffMACFqLl68e7gw4bdOT2fKY4QNpfUyhT4cJ8xghb rjmKtL0QWqrwiRaKaOVBUWE2zUxtc3jerqq7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6stwnHKMGVB90JR/bU98gCDhsCYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZzdHduSEtNR1ZCOTBKUl9i VTk4Z0NEaHNDWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6fwwDQYJKoZIhvcNAQELBQADggEBADdaEYIEmlqu5JPh5Oos1n6Xjwia0Ft+bXou +aNz2JZnIivdJRmni0YU28Gb/J3mCm0rA2zGwBGwzxdyUJfbIhwkPFd/niYLDe7o E6Ypni4pf5/VDrOIhHjJMqqXIwJ/G6IaX8XNrWoHUR2xgvr+Q9i3ZHfVyRJnFOEp 1xjQISCf3dTGEqhr7swzzzA+Ls+cdBE8pyPv+2D4mOVMfx0G//mkArntj/TJ7gHi xyhbxje0LEiQEARvSWoCUkRmZK6Ij48wOKomRLdzpeh8TL1ZUG5ga6NLy9zm0rJP m3lihlUDwDyXvdYCkzW8zaRPsB1H/RV2qrsiFeBXw8s1sGzNIDE= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org