$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/74jkYMLYEm4CnE0Oh_vAglKssdE.roa File: 74jkYMLYEm4CnE0Oh_vAglKssdE.roa (raw, json) Hash identifier: yWzLc1dmXBn/bip5ERM6nKkHRAsm++kttqykzGz1b44= Subject key identifier: EF:88:E4:60:C2:D8:12:6E:02:9C:4D:0E:87:FB:C0:82:52:AC:B1:D1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30C2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/74jkYMLYEm4CnE0Oh_vAglKssdE.roa Signing time: Mon 26 Aug 2024 05:29:47 +0000 ROA not before: Mon 26 Aug 2024 05:29:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12482 (0x30c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EF88E460C2D8126E029C4D0E87FBC08252ACB1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:d0:f8:3e:d2:16:a8:2d:9f:45:cb:b3:c3: 38:af:85:c3:5f:cc:e1:6f:e3:78:10:4f:28:bb:81: c2:20:9c:18:47:df:be:8f:82:a6:c6:97:7d:ff:32: 0d:69:fa:29:92:2f:2a:b1:59:97:45:ad:ad:e2:bd: 30:45:0c:1d:e3:64:28:a6:1f:e7:78:f1:87:5f:79: 6b:58:3e:05:7c:11:e1:de:7b:ea:06:1c:02:25:fe: 07:7f:bd:62:82:8b:5c:0f:c1:d5:c2:0d:1c:3b:02: af:a1:a4:65:8c:8f:28:df:2e:20:82:ff:40:73:2b: 77:c1:5e:21:b7:73:9a:03:47:38:38:2a:a0:b3:b1: b9:ca:0c:24:78:47:81:6d:fc:78:15:15:f8:ef:6f: ea:6c:3b:a4:59:be:b1:77:82:6c:90:84:53:c0:a7: ec:14:ef:be:cd:f4:28:c3:a2:c7:61:99:95:ac:43: e0:6e:ba:5e:84:79:c4:49:05:0c:21:4d:54:c1:7b: f5:e5:6c:95:f3:be:7e:90:36:80:94:0c:c6:1f:c9: 1a:0f:fa:ff:57:2e:33:27:0d:e6:91:74:fb:a3:fd: e2:09:e3:5f:d6:e1:d4:e0:f0:c1:e4:74:57:54:ef: 99:3d:34:f0:c5:98:8f:00:6f:ff:ea:f4:11:e3:e4: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:88:E4:60:C2:D8:12:6E:02:9C:4D:0E:87:FB:C0:82:52:AC:B1:D1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/74jkYMLYEm4CnE0Oh_vAglKssdE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.112.0/24 Signature Algorithm: sha256WithRSAEncryption 69:a3:4e:30:60:31:71:cf:e9:e2:c3:e8:3c:ed:79:92:59:86: 5f:3b:00:dd:05:6d:8c:0a:27:d4:e7:b4:1b:97:38:0e:31:89: c9:4a:f5:f4:c1:1c:ca:1b:b5:c6:01:52:74:4d:40:8d:30:f4: ba:7b:fb:af:bd:e3:4d:af:71:0e:37:3c:b8:6a:34:8c:d7:46: 9b:f9:3f:e6:b9:a4:13:5f:5a:b3:f3:8d:f7:c1:a9:58:15:8f: c2:d2:db:d1:da:8f:e6:bc:1b:1a:b4:70:99:9e:36:6b:0a:11: bf:d3:73:45:f6:22:21:c9:60:65:48:0b:42:8b:e6:0e:2a:92: 3f:d1:3e:69:7c:8a:5f:fe:d5:c5:f1:0f:12:32:45:15:78:c0: a9:51:4d:1e:be:9f:24:da:ee:6d:6d:fa:48:2e:f7:d1:b8:09: b6:18:f5:7a:89:4a:1c:12:30:21:26:73:b5:8c:27:bd:40:1d: 9c:2e:ec:9b:42:4b:16:ed:6a:5a:1c:50:f7:98:8c:41:f9:e0: cf:4e:5d:d0:f0:1d:8b:3c:9e:cf:fa:2d:21:31:d1:d8:e1:34: 55:62:40:4b:e9:ba:dc:3d:cb:04:bf:8e:cb:6e:da:e8:60:a7: 7d:c1:b5:d9:3f:ad:b1:36:a9:6d:47:f4:fb:42:80:30:e3:c1: f7:f9:3b:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVGODhFNDYwQzJEODEy NkUwMjlDNEQwRTg3RkJDMDgyNTJBQ0IxRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOgND4PtIWqC2fRcuzwzivhcNfzOFv43gQTyi7gcIgnBhH376P gqbGl33/Mg1p+imSLyqxWZdFra3ivTBFDB3jZCimH+d48YdfeWtYPgV8EeHee+oG HAIl/gd/vWKCi1wPwdXCDRw7Aq+hpGWMjyjfLiCC/0BzK3fBXiG3c5oDRzg4KqCz sbnKDCR4R4Ft/HgVFfjvb+psO6RZvrF3gmyQhFPAp+wU777N9CjDosdhmZWsQ+Bu ul6EecRJBQwhTVTBe/XlbJXzvn6QNoCUDMYfyRoP+v9XLjMnDeaRdPuj/eIJ41/W 4dTg8MHkdFdU75k9NPDFmI8Ab//q9BHj5I2lAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU74jkYMLYEm4CnE0Oh/vAglKssdEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzc0amtZTUxZRW00Q25FME9o X3ZBZ2xLc3NkRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THAwDQYJKoZIhvcNAQELBQADggEBAGmjTjBgMXHP6eLD6DzteZJZhl87AN0FbYwK J9TntBuXOA4xiclK9fTBHMobtcYBUnRNQI0w9Lp7+6+9402vcQ43PLhqNIzXRpv5 P+a5pBNfWrPzjffBqVgVj8LS29Haj+a8Gxq0cJmeNmsKEb/Tc0X2IiHJYGVIC0KL 5g4qkj/RPml8il/+1cXxDxIyRRV4wKlRTR6+nyTa7m1t+kgu99G4CbYY9XqJShwS MCEmc7WMJ71AHZwu7JtCSxbtalocUPeYjEH54M9OXdDwHYs8ns/6LSEx0djhNFVi QEvputw9ywS/jstu2uhgp33Btdk/rbE2qW1H9PtCgDDjwff5Oww= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org