$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8dq9stEV6LB5yQEv-wFmNGlOHi8.roa File: 8dq9stEV6LB5yQEv-wFmNGlOHi8.roa (raw, json) Hash identifier: iZwncfvJrjnP5kEjxDFBa1+wKfgPg66ECIQpQt3R0ro= Subject key identifier: F1:DA:BD:B2:D1:15:E8:B0:79:C9:01:2F:FB:01:66:34:69:4E:1E:2F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 329A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8dq9stEV6LB5yQEv-wFmNGlOHi8.roa Signing time: Mon 26 Aug 2024 05:31:49 +0000 ROA not before: Mon 26 Aug 2024 05:31:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 45.64.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12954 (0x329a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F1DABDB2D115E8B079C9012FFB016634694E1E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:1f:1f:68:9d:3d:b9:4b:e9:4c:ce:53:8e: e1:b6:01:ce:2c:4a:c7:b9:df:33:34:32:59:7e:0d: 4a:e7:39:dc:db:b5:b3:ce:ae:4d:23:3d:94:b1:5e: 2b:3a:89:f9:e8:9f:f0:bf:de:60:d7:17:19:29:34: 25:34:63:85:98:6c:1c:13:0b:13:df:67:16:16:1b: 9a:b7:08:68:8a:f3:9a:8c:04:37:46:2a:f4:51:bb: 8e:41:73:5c:4b:02:cd:ef:1c:6b:6d:bc:cb:bd:1c: 07:e8:9e:21:11:52:95:55:bd:67:e1:f5:16:0a:09: 13:3d:cc:c1:c5:85:18:5d:88:0d:77:10:06:a7:58: a6:5d:9b:b0:e6:86:af:42:f6:08:4e:fe:22:74:30: b1:2d:be:26:cd:3b:57:cb:6d:f0:7a:29:d4:d6:a4: f3:c9:99:3d:06:fd:d1:1b:d8:c4:08:bf:f9:b5:cd: 7d:cc:ee:6d:9c:a8:14:dc:7a:c0:2a:53:54:2c:33: 0d:77:ae:da:45:d6:f8:df:7c:a9:56:67:72:02:7b: 15:9f:08:40:03:68:df:d8:f6:98:12:a8:12:50:b8: e1:9d:4c:dc:85:97:65:f1:51:5f:81:4e:d2:29:e6: 57:1a:26:24:c9:30:59:e2:df:35:92:e7:9a:85:82: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DA:BD:B2:D1:15:E8:B0:79:C9:01:2F:FB:01:66:34:69:4E:1E:2F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8dq9stEV6LB5yQEv-wFmNGlOHi8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.29.0/24 Signature Algorithm: sha256WithRSAEncryption 45:94:f3:4c:a4:35:b6:b2:24:c3:83:22:82:89:e2:65:90:a3: 9d:42:38:c6:86:c8:d3:f0:13:be:ad:c2:37:81:91:3c:2e:0e: 94:97:fc:92:4a:bf:aa:ee:4e:7a:27:e9:00:a9:e3:fe:c7:a3: 7f:c5:07:ed:9f:6f:0d:de:39:dc:b5:c2:43:18:bf:04:7d:eb: 5d:c5:e9:a5:8e:46:18:38:3c:fd:a0:2c:ef:82:ff:96:6b:4a: 0b:b6:da:b1:21:fc:71:87:5d:7a:e8:84:c9:6d:a0:3f:cb:0e: 66:66:20:7c:d5:1a:5a:e7:f7:8b:7a:08:d0:2f:92:79:81:76: 55:1c:43:99:77:85:23:3f:c2:9a:9b:5d:60:f0:de:1f:0e:d2: 7c:f4:ab:94:5f:fc:ac:d9:c5:42:bc:d8:64:3f:36:d7:ac:6e: c7:30:03:d4:d0:43:85:19:1d:bf:78:56:33:57:bc:ea:ce:70: 78:02:1f:1c:fd:25:61:48:d1:0a:87:78:3d:6b:a0:18:c5:bf: 9e:f6:f8:7b:b3:3a:86:6f:5b:1f:3c:b5:ff:18:3f:85:40:57: 5a:72:ed:6a:c8:65:3f:75:bb:b2:84:59:07:56:f5:2c:5c:bb: 03:6b:16:94:48:32:46:9e:16:61:b5:5c:1f:3b:e7:9e:b9:de: 1b:69:70:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxREFCREIyRDExNUU4 QjA3OUM5MDEyRkZCMDE2NjM0Njk0RTFFMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDETB8faJ09uUvpTM5TjuG2Ac4sSse53zM0Mll+DUrnOdzbtbPO rk0jPZSxXis6ifnon/C/3mDXFxkpNCU0Y4WYbBwTCxPfZxYWG5q3CGiK85qMBDdG KvRRu45Bc1xLAs3vHGttvMu9HAfoniERUpVVvWfh9RYKCRM9zMHFhRhdiA13EAan WKZdm7Dmhq9C9ghO/iJ0MLEtvibNO1fLbfB6KdTWpPPJmT0G/dEb2MQIv/m1zX3M 7m2cqBTcesAqU1QsMw13rtpF1vjffKlWZ3ICexWfCEADaN/Y9pgSqBJQuOGdTNyF l2XxUV+BTtIp5lcaJiTJMFni3zWS55qFgjFjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU8dq9stEV6LB5yQEv+wFmNGlOHi8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhkcTlzdEVWNkxCNXlRRXYt d0ZtTkdsT0hpOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QB0wDQYJKoZIhvcNAQELBQADggEBAEWU80ykNbayJMODIoKJ4mWQo51COMaGyNPw E76twjeBkTwuDpSX/JJKv6ruTnon6QCp4/7Ho3/FB+2fbw3eOdy1wkMYvwR9613F 6aWORhg4PP2gLO+C/5ZrSgu22rEh/HGHXXrohMltoD/LDmZmIHzVGlrn94t6CNAv knmBdlUcQ5l3hSM/wpqbXWDw3h8O0nz0q5Rf/KzZxUK82GQ/NtesbscwA9TQQ4UZ Hb94VjNXvOrOcHgCHxz9JWFI0QqHeD1roBjFv572+HuzOoZvWx88tf8YP4VAV1py 7WrIZT91u7KEWQdW9SxcuwNrFpRIMkaeFmG1XB8755653htpcKE= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org