$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/71bjXHCEdMDtmYORdcVQ1yFIBEk.roa File: 71bjXHCEdMDtmYORdcVQ1yFIBEk.roa (raw, json) Hash identifier: ZAjd1nb2uCRpfuyqUQE4x1XSdArcChTjmJP0DrmTK2c= Subject key identifier: EF:56:E3:5C:70:84:74:C0:ED:99:83:91:75:C5:50:D7:21:48:04:49 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 308E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/71bjXHCEdMDtmYORdcVQ1yFIBEk.roa Signing time: Mon 26 Aug 2024 05:29:35 +0000 ROA not before: Mon 26 Aug 2024 05:29:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12430 (0x308e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EF56E35C708474C0ED99839175C550D721480449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:5d:b9:e1:a6:62:a0:0a:69:86:1d:2b:27: 9a:87:cd:b8:d6:18:cd:55:17:54:40:75:0d:07:ee: 8c:0e:d2:b5:d8:cf:ed:f8:30:92:9d:71:fa:3c:b0: b6:1a:bb:42:62:8b:cb:d0:80:cf:ab:c1:d0:fe:35: b5:8a:a5:86:a1:74:32:db:de:bb:09:a5:8d:aa:9f: 07:70:4c:81:1f:95:04:19:a5:13:1c:5d:a1:e9:22: 63:fa:18:94:50:c1:92:ee:68:9e:e0:52:9a:4a:6d: bf:69:0b:34:bb:2e:d4:d5:2a:4c:c3:a9:b0:52:22: 9a:cd:e4:3a:4b:38:29:2c:94:ab:54:1b:ac:01:60: e3:3d:ff:8e:74:a9:5e:0f:91:c3:83:9d:94:3b:f9: b0:75:68:e7:a8:ff:1c:94:fb:65:5c:87:74:28:34: 31:12:58:82:52:b7:8b:97:75:51:91:70:30:51:5d: 36:e3:cc:90:c4:98:00:1a:d3:b7:ae:00:e5:4b:a9: 81:99:ef:48:74:7d:b6:72:c1:3a:3b:83:7d:1b:ec: b1:ae:8e:ae:85:96:3e:02:9d:f6:b4:b7:b6:3d:7b: 54:04:db:32:31:6d:4e:9d:d5:de:01:ef:c4:9c:24: 89:82:cf:e7:4e:ed:c2:23:98:7c:19:b4:39:8e:75: c5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:56:E3:5C:70:84:74:C0:ED:99:83:91:75:C5:50:D7:21:48:04:49 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/71bjXHCEdMDtmYORdcVQ1yFIBEk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.192.0/20 Signature Algorithm: sha256WithRSAEncryption b8:a5:30:eb:ed:53:2b:2c:40:14:a4:3d:7c:68:54:f9:45:25: a5:bc:23:8b:5c:d9:80:86:b9:db:34:32:c6:fe:56:eb:f1:e7: ae:e4:39:00:00:b9:43:95:ff:34:c5:39:99:52:aa:97:6f:d4: 6c:e1:b3:e7:74:21:8d:cc:09:e8:ac:28:5c:2f:71:7c:ef:c5: 1a:ec:d3:4a:5f:11:fd:f0:ff:5b:10:39:9c:d7:72:23:60:f9: dd:fa:06:ad:44:bd:73:b0:b0:b8:70:ca:a7:a4:82:ea:2a:50: cb:f9:3c:28:5e:9d:5e:d4:20:86:cd:dd:c4:1e:5f:17:65:0f: b4:9f:f8:ce:2a:59:be:50:e2:c4:16:fb:aa:0c:a6:d6:a0:3c: ae:d8:0d:d7:f6:ed:16:da:7a:98:31:f2:58:06:de:79:a7:ea: 6d:55:f7:69:46:00:a0:4c:7b:44:9b:4c:e2:c7:6d:95:df:f9: b2:6a:87:fb:02:16:28:07:63:99:22:b1:62:31:2d:b4:54:38: e3:40:ce:b1:34:ac:0c:c8:e5:75:db:25:10:52:52:9f:83:f6: db:23:82:31:a2:fb:6f:64:c6:e5:60:c9:79:a3:3f:cf:1a:98: 09:b9:b3:b3:e7:c6:01:04:b7:7e:81:27:b9:af:ba:2c:93:7b: 83:4a:48:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVGNTZFMzVDNzA4NDc0 QzBFRDk5ODM5MTc1QzU1MEQ3MjE0ODA0NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ/V254aZioApphh0rJ5qHzbjWGM1VF1RAdQ0H7owO0rXYz+34 MJKdcfo8sLYau0Jii8vQgM+rwdD+NbWKpYahdDLb3rsJpY2qnwdwTIEflQQZpRMc XaHpImP6GJRQwZLuaJ7gUppKbb9pCzS7LtTVKkzDqbBSIprN5DpLOCkslKtUG6wB YOM9/450qV4PkcODnZQ7+bB1aOeo/xyU+2Vch3QoNDESWIJSt4uXdVGRcDBRXTbj zJDEmAAa07euAOVLqYGZ70h0fbZywTo7g30b7LGujq6Flj4Cnfa0t7Y9e1QE2zIx bU6d1d4B78ScJImCz+dO7cIjmHwZtDmOdcW/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU71bjXHCEdMDtmYORdcVQ1yFIBEkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzcxYmpYSENFZE1EdG1ZT1Jk Y1ZRMXlGSUJFay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wcAwDQYJKoZIhvcNAQELBQADggEBALilMOvtUyssQBSkPXxoVPlFJaW8I4tc2YCG uds0Msb+Vuvx567kOQAAuUOV/zTFOZlSqpdv1Gzhs+d0IY3MCeisKFwvcXzvxRrs 00pfEf3w/1sQOZzXciNg+d36Bq1EvXOwsLhwyqekguoqUMv5PChenV7UIIbN3cQe XxdlD7Sf+M4qWb5Q4sQW+6oMptagPK7YDdf27Rbaepgx8lgG3nmn6m1V92lGAKBM e0SbTOLHbZXf+bJqh/sCFigHY5kisWIxLbRUOONAzrE0rAzI5XXbJRBSUp+D9tsj gjGi+29kxuVgyXmjP88amAm5s7PnxgEEt36BJ7mvuiyTe4NKSDM= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org