$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85WPk-0n7xn-YPBEws3ysqSznqE.roa File: 85WPk-0n7xn-YPBEws3ysqSznqE.roa (raw, json) Hash identifier: 9laV51ExXe4D34FHgTw5ypWxJNAl0VVIaze5D+tqZMY= Subject key identifier: F3:95:8F:93:ED:27:EF:19:FE:60:F0:44:C2:CD:F2:B2:A4:B3:9E:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 304A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85WPk-0n7xn-YPBEws3ysqSznqE.roa Signing time: Mon 26 Aug 2024 05:29:19 +0000 ROA not before: Mon 26 Aug 2024 05:29:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12362 (0x304a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F3958F93ED27EF19FE60F044C2CDF2B2A4B39EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:92:b4:60:34:4a:19:88:bb:40:ed:71:60: 29:21:1f:29:61:4f:65:81:97:bb:79:cc:ed:6b:a3: 77:aa:b7:e4:8e:79:64:0b:5e:2b:59:b2:33:e7:00: 48:9f:df:7b:94:51:ed:0a:d9:38:06:d9:f5:04:2e: 76:74:4c:49:56:c2:1f:46:96:88:e9:6c:2f:3c:8b: a4:73:f4:ea:ee:63:82:10:1e:c9:d8:f9:32:62:df: 27:9c:27:bd:9c:26:1b:e0:1e:29:9c:bc:a4:23:c8: 6b:3e:1a:1a:5a:b9:68:a5:68:20:a1:f5:66:89:cb: 70:63:96:c6:67:ae:95:9f:60:4c:3f:35:fc:34:7c: 95:5c:9d:63:a4:4f:a3:1e:30:ae:da:22:6c:71:ae: 8f:59:1d:2e:b7:3c:1b:a1:bc:a7:da:7a:62:61:30: 48:af:89:f2:be:c3:5f:32:fd:2b:cb:e8:45:f6:32: 1a:ce:8c:f2:fc:a3:4d:83:4b:ad:a0:eb:7d:b8:58: e4:02:cc:b1:90:45:9b:66:33:04:5f:e8:9c:44:44: 84:ab:84:3e:8e:99:ff:de:79:46:af:a5:ec:56:81: af:d9:35:af:ec:64:f5:98:4a:33:06:a6:ce:2d:92: 9b:35:ad:e5:53:a3:ce:cd:fc:01:6f:9f:de:06:62: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:95:8F:93:ED:27:EF:19:FE:60:F0:44:C2:CD:F2:B2:A4:B3:9E:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85WPk-0n7xn-YPBEws3ysqSznqE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.176.0/20 Signature Algorithm: sha256WithRSAEncryption 06:0d:f8:51:26:98:65:8d:ed:96:dd:e9:2e:3e:6d:60:62:de: cc:e4:6b:35:5d:b4:2c:43:f6:c7:84:63:22:fa:62:fa:39:2c: a0:40:d8:a9:22:12:9f:a9:b0:6c:13:98:4d:5f:b1:23:47:7c: 68:3b:3f:de:cb:22:84:fd:3a:03:33:01:91:4a:5a:3d:e8:be: e7:5d:56:e0:0d:2f:40:20:b2:50:8c:2f:6e:1b:6b:e8:6f:e3: a0:8a:82:4e:78:1c:64:52:3c:f5:cb:e5:83:84:1d:9e:df:51: 4a:0f:6f:52:66:b1:83:e6:23:a6:36:ef:26:bb:5f:0d:ff:4f: fc:2d:30:16:0c:3b:97:ae:d8:98:a9:ee:14:99:55:d8:65:ab: ae:11:b4:29:12:8a:bd:ef:6c:05:05:73:df:60:e5:a5:0a:0f: b8:0c:e8:85:f1:2b:95:28:b5:e4:f7:28:82:8d:42:67:eb:ce: 24:70:eb:c2:e8:90:17:88:51:01:72:b7:04:c0:26:e5:7b:d2: 74:b3:a3:68:e6:9b:2e:df:e6:45:77:92:ac:b4:86:66:7a:31: 56:e5:2a:2e:0b:21:b9:1c:b2:64:03:a2:6d:d1:2e:ed:a9:b4: ec:ce:81:4e:fc:30:4d:72:6c:7c:87:4f:cc:b3:8a:4e:b6:16: f1:10:f0:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzOTU4RjkzRUQyN0VG MTlGRTYwRjA0NEMyQ0RGMkIyQTRCMzlFQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeJ5K0YDRKGYi7QO1xYCkhHylhT2WBl7t5zO1ro3eqt+SOeWQL XitZsjPnAEif33uUUe0K2TgG2fUELnZ0TElWwh9GlojpbC88i6Rz9OruY4IQHsnY +TJi3yecJ72cJhvgHimcvKQjyGs+GhpauWilaCCh9WaJy3BjlsZnrpWfYEw/Nfw0 fJVcnWOkT6MeMK7aImxxro9ZHS63PBuhvKfaemJhMEivifK+w18y/SvL6EX2MhrO jPL8o02DS62g6324WOQCzLGQRZtmMwRf6JxERISrhD6Omf/eeUavpexWga/ZNa/s ZPWYSjMGps4tkps1reVTo87N/AFvn94GYiptAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU85WPk+0n7xn+YPBEws3ysqSznqEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzg1V1BrLTBuN3huLVlQQkV3 czN5c3FTem5xRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wbAwDQYJKoZIhvcNAQELBQADggEBAAYN+FEmmGWN7Zbd6S4+bWBi3szkazVdtCxD 9seEYyL6Yvo5LKBA2KkiEp+psGwTmE1fsSNHfGg7P97LIoT9OgMzAZFKWj3ovudd VuANL0AgslCML24ba+hv46CKgk54HGRSPPXL5YOEHZ7fUUoPb1JmsYPmI6Y27ya7 Xw3/T/wtMBYMO5eu2Jip7hSZVdhlq64RtCkSir3vbAUFc99g5aUKD7gM6IXxK5Uo teT3KIKNQmfrziRw68LokBeIUQFytwTAJuV70nSzo2jmmy7f5kV3kqy0hmZ6MVbl Ki4LIbkcsmQDom3RLu2ptOzOgU78ME1ybHyHT8yzik62FvEQ8Ps= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org