$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa File: 8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa (raw, json) Hash identifier: curhGahBB+HcB2PCFvKv9cTL6Z/cGZ5n4RkKT1Ytk+Y= Subject key identifier: F0:F6:BE:EC:26:CA:EB:16:74:D9:6B:62:17:85:68:A5:77:79:42:45 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 310F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa Signing time: Mon 26 Aug 2024 05:30:04 +0000 ROA not before: Mon 26 Aug 2024 05:30:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12559 (0x310f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F0F6BEEC26CAEB1674D96B62178568A577794245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:37:71:d3:0d:3e:d9:45:f1:73:72:2a:64: 70:4d:64:65:85:87:c7:14:c8:40:a7:a2:21:d4:d2: 5f:b6:e6:71:fd:ab:dd:35:2e:f3:6f:54:d1:3d:92: a1:58:ad:7f:40:76:fc:b2:51:50:43:f5:70:2e:c6: 48:66:69:a7:80:25:2c:a6:57:2e:36:37:3a:90:9d: 32:87:65:d8:e4:5c:6e:3a:4e:5d:21:6e:0b:77:3f: 98:af:d3:53:49:40:89:97:f2:6e:84:c7:ec:2c:f7: 1a:39:33:96:e7:9b:fd:7a:1c:7f:e2:07:b6:99:05: 84:28:17:4b:18:4b:54:aa:50:b9:b8:3a:94:ef:61: 50:e0:99:00:2e:4f:b5:68:df:e3:34:a1:a2:09:6f: cb:7d:14:bd:7e:8d:98:34:d6:a0:cf:89:7d:fd:bd: 09:cb:c6:61:f9:ed:a6:a5:da:ff:41:3a:04:c2:f1: 45:4c:6c:bc:10:50:2d:94:e4:cd:6b:fa:79:59:de: b3:20:5f:57:44:b9:ae:4c:04:bf:6b:87:38:ae:df: db:7a:28:a4:55:e0:b6:bd:40:10:64:6b:f1:d1:07: 19:7b:d8:18:19:0e:8c:dd:c7:41:57:25:16:fa:98: 6e:09:ed:32:85:0a:a3:12:40:30:41:1b:ee:32:4e: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F6:BE:EC:26:CA:EB:16:74:D9:6B:62:17:85:68:A5:77:79:42:45 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Pa-7CbK6xZ02WtiF4VopXd5QkU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.32.0/22 Signature Algorithm: sha256WithRSAEncryption a3:38:44:b8:75:ab:b5:75:1f:7c:e5:a4:45:4f:7f:67:33:e6: f4:79:3f:8c:fb:56:82:de:d2:9a:50:c2:20:9d:fe:a6:2e:47: d1:2d:8e:08:c8:8a:e5:60:e9:38:d2:b5:8f:1f:4b:4a:ee:36: 58:19:21:66:64:0d:c1:ce:ce:d8:56:39:91:30:ea:00:c3:62: 09:85:40:d0:07:75:f2:6a:09:32:c7:22:6f:e2:74:f6:94:d9: ce:e3:46:29:75:08:be:fe:6c:f2:06:16:79:ed:30:7b:11:44: 2c:07:3d:f0:9b:b3:4f:56:e1:24:98:b1:26:f9:c6:ec:f5:64: f8:e0:70:4b:45:74:a4:f8:92:27:41:1e:2e:2c:c9:78:77:5b: 42:6b:ac:c3:b9:e3:43:36:a8:c1:76:29:c6:07:28:1f:06:75: 13:f8:1f:23:16:6a:55:b8:8d:75:8f:c4:bf:80:76:a1:02:a3: 74:5a:8a:6f:93:07:bf:98:f4:a7:e1:17:d4:21:ce:f8:18:3b: f1:a2:a9:c3:60:f9:3e:cc:11:a1:aa:f5:67:0a:eb:1a:b8:57: ed:66:54:76:1c:dc:fb:44:05:b2:9f:3b:c9:d8:4d:b8:87:70: c7:96:13:ff:cc:44:9f:85:f3:2f:f7:53:a8:92:fe:33:f6:6e: 69:b7:a2:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYwRjZCRUVDMjZDQUVC MTY3NEQ5NkI2MjE3ODU2OEE1Nzc3OTQyNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBpzdx0w0+2UXxc3IqZHBNZGWFh8cUyECnoiHU0l+25nH9q901 LvNvVNE9kqFYrX9AdvyyUVBD9XAuxkhmaaeAJSymVy42NzqQnTKHZdjkXG46Tl0h bgt3P5iv01NJQImX8m6Ex+ws9xo5M5bnm/16HH/iB7aZBYQoF0sYS1SqULm4OpTv YVDgmQAuT7Vo3+M0oaIJb8t9FL1+jZg01qDPiX39vQnLxmH57aal2v9BOgTC8UVM bLwQUC2U5M1r+nlZ3rMgX1dEua5MBL9rhziu39t6KKRV4La9QBBka/HRBxl72BgZ Dozdx0FXJRb6mG4J7TKFCqMSQDBBG+4yTmpzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8Pa+7CbK6xZ02WtiF4VopXd5QkUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhQYS03Q2JLNnhaMDJXdGlG NFZvcFhkNVFrVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wiAwDQYJKoZIhvcNAQELBQADggEBAKM4RLh1q7V1H3zlpEVPf2cz5vR5P4z7VoLe 0ppQwiCd/qYuR9EtjgjIiuVg6TjStY8fS0ruNlgZIWZkDcHOzthWOZEw6gDDYgmF QNAHdfJqCTLHIm/idPaU2c7jRil1CL7+bPIGFnntMHsRRCwHPfCbs09W4SSYsSb5 xuz1ZPjgcEtFdKT4kidBHi4syXh3W0JrrMO540M2qMF2KcYHKB8GdRP4HyMWalW4 jXWPxL+AdqECo3Raim+TB7+Y9KfhF9QhzvgYO/GiqcNg+T7MEaGq9WcK6xq4V+1m VHYc3PtEBbKfO8nYTbiHcMeWE//MRJ+F8y/3U6iS/jP2bmm3orM= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org