$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Mx4_QLv8pkwAPmGjccNY5nmPSw.roa File: 7Mx4_QLv8pkwAPmGjccNY5nmPSw.roa (raw, json) Hash identifier: C0ZFgPmr4lpMuhKgYNA6y1/sD/oX5/O+35bu7bCbv3s= Subject key identifier: EC:CC:78:FD:02:EF:F2:99:30:00:F9:86:8D:C7:0D:63:99:E6:3D:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32A6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Mx4_QLv8pkwAPmGjccNY5nmPSw.roa Signing time: Mon 26 Aug 2024 05:31:52 +0000 ROA not before: Mon 26 Aug 2024 05:31:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12966 (0x32a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ECCC78FD02EFF2993000F9868DC70D6399E63D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:0b:5f:5f:44:4b:89:8d:80:11:42:29:d7: 89:dc:ae:13:41:04:96:0a:79:d6:12:27:39:ab:5d: e1:b6:c8:f7:3c:50:e6:24:7c:cb:aa:06:62:15:b4: 8d:83:0c:6c:4c:72:24:54:41:da:81:28:c7:15:ad: 6a:f2:8e:27:d8:f6:a4:8c:80:4c:97:0b:75:38:ac: 22:7e:cb:18:99:9c:cb:e9:15:99:d5:58:8c:49:56: f6:6d:9c:f5:05:c4:0b:ee:1e:11:88:67:87:f6:00: b4:95:3a:f4:e9:d4:00:f2:bd:ad:fb:09:00:7e:c5: c2:00:ee:8a:dc:0f:8f:50:01:a1:1b:97:75:ba:dd: a2:63:46:db:07:35:ab:a2:71:7d:f8:ae:12:0c:5c: 60:e8:d4:b0:5c:21:74:f6:65:d8:0a:b9:05:e5:d0: 7c:29:24:53:27:f2:d5:9f:54:97:8d:6b:38:cf:24: 88:aa:54:7d:1e:fd:14:29:5a:b6:74:a8:9c:e7:9f: dc:e6:74:80:ad:2b:ab:90:8c:08:28:06:9c:83:79: be:25:2d:18:f6:d0:f0:9f:d7:f1:d1:f4:fc:04:da: 34:45:27:25:5e:5f:20:95:bd:86:ce:d0:c4:e5:32: 64:d3:9c:32:f6:95:c1:39:b0:65:f3:38:50:b1:80: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CC:78:FD:02:EF:F2:99:30:00:F9:86:8D:C7:0D:63:99:E6:3D:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Mx4_QLv8pkwAPmGjccNY5nmPSw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.188.0/22 Signature Algorithm: sha256WithRSAEncryption 88:6c:76:02:6e:5f:59:54:f3:19:58:9d:ee:83:97:36:dd:58: 43:13:0d:20:a5:02:3a:32:1d:5f:e9:aa:da:e1:9d:30:31:d0: 68:25:aa:c3:12:0c:a2:de:e2:77:93:b0:e1:17:0b:dc:bc:95: c5:a1:bc:af:64:e1:6a:96:d7:33:1a:7c:87:fb:ae:1a:eb:47: e3:12:82:40:62:56:cf:13:7e:45:30:99:0a:1f:7b:36:a4:d9: d9:5a:22:31:6c:51:c2:03:de:d9:35:1f:0e:c0:e8:ff:d0:b2: c6:24:b9:b0:8c:e3:b8:99:ba:7c:47:5a:e2:0f:5f:3d:9b:62: da:64:23:cb:9b:a9:cf:a3:21:e2:63:6c:b7:1c:af:ab:24:83: 62:a6:d4:77:bd:8f:4f:45:4b:76:84:9e:f7:e4:47:00:80:bf: 16:e5:ce:51:91:7d:7e:40:97:dd:87:c1:38:57:b8:42:c6:10: 67:27:c7:6d:78:b6:a6:6e:77:65:d9:af:3e:73:c7:c2:49:aa: b5:d0:fc:87:e5:8d:e0:cc:99:40:d5:f8:3c:59:b1:1a:cb:29: b2:a7:cd:01:6b:de:b8:9d:d6:f8:8e:ca:c0:2a:9f:a7:d9:74: 56:a7:f3:34:53:da:81:db:d6:04:e9:cf:d7:f6:22:18:d0:76: bf:0e:20:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDQ0M3OEZEMDJFRkYy OTkzMDAwRjk4NjhEQzcwRDYzOTlFNjNEMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq7AtfX0RLiY2AEUIp14ncrhNBBJYKedYSJzmrXeG2yPc8UOYk fMuqBmIVtI2DDGxMciRUQdqBKMcVrWryjifY9qSMgEyXC3U4rCJ+yxiZnMvpFZnV WIxJVvZtnPUFxAvuHhGIZ4f2ALSVOvTp1ADyva37CQB+xcIA7orcD49QAaEbl3W6 3aJjRtsHNauicX34rhIMXGDo1LBcIXT2ZdgKuQXl0HwpJFMn8tWfVJeNazjPJIiq VH0e/RQpWrZ0qJznn9zmdICtK6uQjAgoBpyDeb4lLRj20PCf1/HR9PwE2jRFJyVe XyCVvYbO0MTlMmTTnDL2lcE5sGXzOFCxgBNHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU7Mx4/QLv8pkwAPmGjccNY5nmPSwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdNeDRfUUx2OHBrd0FQbUdq Y2NOWTVubVBTdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w7wwDQYJKoZIhvcNAQELBQADggEBAIhsdgJuX1lU8xlYne6DlzbdWEMTDSClAjoy HV/pqtrhnTAx0GglqsMSDKLe4neTsOEXC9y8lcWhvK9k4WqW1zMafIf7rhrrR+MS gkBiVs8TfkUwmQofezak2dlaIjFsUcID3tk1Hw7A6P/QssYkubCM47iZunxHWuIP Xz2bYtpkI8ubqc+jIeJjbLccr6skg2Km1He9j09FS3aEnvfkRwCAvxblzlGRfX5A l92HwThXuELGEGcnx214tqZud2XZrz5zx8JJqrXQ/IfljeDMmUDV+DxZsRrLKbKn zQFr3rid1viOysAqn6fZdFan8zRT2oHb1gTpz9f2IhjQdr8OIEQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:36 2024 by rpki-client on console-ams.rpki-client.org