$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9nIVVVtrPVxUkG-NTs1mO-keiso.roa File: 9nIVVVtrPVxUkG-NTs1mO-keiso.roa (raw, json) Hash identifier: JwdCW/XufbCOieMQT53MMIRaL/Lu6vdXsPxwYCT98xs= Subject key identifier: F6:72:15:55:5B:6B:3D:5C:54:90:6F:8D:4E:CD:66:3B:E9:1E:8A:CA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 310C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9nIVVVtrPVxUkG-NTs1mO-keiso.roa Signing time: Mon 26 Aug 2024 05:30:03 +0000 ROA not before: Mon 26 Aug 2024 05:30:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12556 (0x310c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F67215555B6B3D5C54906F8D4ECD663BE91E8ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:ce:77:22:59:65:72:c8:f2:aa:fd:df:e0: 34:28:3b:c7:bd:ed:79:de:e8:74:fe:29:89:b5:34: 32:2f:d5:71:03:87:d2:97:af:09:af:fc:12:70:dc: 72:49:12:6d:86:47:46:04:84:c9:c3:3b:cf:e3:f4: 8b:75:90:84:7c:63:bf:1c:59:ce:49:d6:f3:3e:bf: 82:09:19:bd:7c:d6:ce:da:e1:70:60:12:72:ae:86: 8c:19:b7:74:32:4a:b9:06:f0:5e:57:dd:76:d6:72: a7:b7:b7:5f:60:4e:f7:5f:d4:f4:b1:be:d1:5b:63: 88:18:7e:29:5d:9c:e6:b6:da:e4:57:a1:62:55:94: e0:0e:7e:8e:2e:80:04:38:8f:04:9e:ea:9f:2a:ce: 52:74:29:10:32:b1:94:12:5a:db:d5:cb:be:1d:a7: 6f:e6:82:19:55:fe:f6:98:8b:e1:b2:eb:4d:71:94: ac:fb:bf:58:dd:bd:61:0a:be:33:b5:85:c6:25:60: aa:99:d9:c5:ed:ec:f6:dd:7f:86:5a:30:a9:ef:62: 47:b7:a9:3e:e9:d2:a1:b4:b7:1a:7e:dc:44:31:c2: 76:1f:f5:a1:f1:b5:56:dd:8a:26:e0:1d:8a:d1:4d: de:88:8a:23:bd:59:9d:25:d7:3a:72:95:03:38:b0: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:72:15:55:5B:6B:3D:5C:54:90:6F:8D:4E:CD:66:3B:E9:1E:8A:CA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9nIVVVtrPVxUkG-NTs1mO-keiso.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.220.0/24 Signature Algorithm: sha256WithRSAEncryption aa:95:b6:3f:8c:4e:aa:97:63:8f:7e:76:f7:dc:9a:6b:d8:09: 7f:ff:5c:ab:c1:98:7d:38:2d:ad:61:69:f1:8b:21:09:bb:f0: a0:c3:93:9c:f1:22:3c:9d:48:bd:03:67:78:18:c7:61:82:e6: ff:6b:10:71:d5:85:97:e8:22:3e:2b:27:80:c1:52:c4:46:46: 5a:52:ed:c2:72:4d:96:66:9e:36:5f:91:d1:b4:13:d1:ba:95: 8f:46:a4:48:ff:09:9a:c7:6b:d4:df:70:68:45:95:64:50:ca: 87:0a:06:a6:40:4f:c1:43:3c:16:59:65:29:cc:b9:12:03:78: 0d:d6:f6:f6:98:26:19:93:d2:c2:84:7e:6d:b5:e0:4c:03:8f: a0:34:29:83:44:e0:be:44:8f:fa:28:7a:9b:be:46:d4:01:0b: 0d:00:d1:3e:ce:54:15:98:f5:8b:de:ef:65:be:88:58:0b:2e: 35:65:f2:84:63:72:81:d1:cd:eb:b1:0a:21:35:b4:6c:33:13: 28:fd:93:21:06:a1:03:b9:2a:93:50:15:31:ad:20:0c:b1:55: 76:cd:08:67:ed:ad:78:6d:b6:31:9a:55:32:b2:93:c6:6e:5d: 6a:08:35:40:d5:04:af:ec:57:c6:b6:bf:d8:ba:08:d8:62:a8: 50:3c:9a:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY2NzIxNTU1NUI2QjNE NUM1NDkwNkY4RDRFQ0Q2NjNCRTkxRThBQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU3s53Illlcsjyqv3f4DQoO8e97Xne6HT+KYm1NDIv1XEDh9KX rwmv/BJw3HJJEm2GR0YEhMnDO8/j9It1kIR8Y78cWc5J1vM+v4IJGb181s7a4XBg EnKuhowZt3QySrkG8F5X3XbWcqe3t19gTvdf1PSxvtFbY4gYfildnOa22uRXoWJV lOAOfo4ugAQ4jwSe6p8qzlJ0KRAysZQSWtvVy74dp2/mghlV/vaYi+Gy601xlKz7 v1jdvWEKvjO1hcYlYKqZ2cXt7Pbdf4ZaMKnvYke3qT7p0qG0txp+3EQxwnYf9aHx tVbdiibgHYrRTd6IiiO9WZ0l1zpylQM4sCGXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9nIVVVtrPVxUkG+NTs1mO+keisowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzluSVZWVnRyUFZ4VWtHLU5U czFtTy1rZWlzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AdwwDQYJKoZIhvcNAQELBQADggEBAKqVtj+MTqqXY49+dvfcmmvYCX//XKvBmH04 La1hafGLIQm78KDDk5zxIjydSL0DZ3gYx2GC5v9rEHHVhZfoIj4rJ4DBUsRGRlpS 7cJyTZZmnjZfkdG0E9G6lY9GpEj/CZrHa9TfcGhFlWRQyocKBqZAT8FDPBZZZSnM uRIDeA3W9vaYJhmT0sKEfm214EwDj6A0KYNE4L5Ej/ooepu+RtQBCw0A0T7OVBWY 9Yve72W+iFgLLjVl8oRjcoHRzeuxCiE1tGwzEyj9kyEGoQO5KpNQFTGtIAyxVXbN CGftrXhttjGaVTKyk8ZuXWoINUDVBK/sV8a2v9i6CNhiqFA8mt0= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:37 2024 by rpki-client on console-fra.rpki-client.org