$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A3hxBCzl9p4y7nznJG0KIHnJuCE.roa File: A3hxBCzl9p4y7nznJG0KIHnJuCE.roa (raw, json) Hash identifier: 8Xbkcv7TUfm11luVUMWmVQ3z3gVvpHNe/05G159K2fU= Subject key identifier: 03:78:71:04:2C:E5:F6:9E:32:EE:7C:E7:24:6D:0A:20:79:C9:B8:21 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32E6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A3hxBCzl9p4y7nznJG0KIHnJuCE.roa Signing time: Mon 26 Aug 2024 05:32:07 +0000 ROA not before: Mon 26 Aug 2024 05:32:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13030 (0x32e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=037871042CE5F69E32EE7CE7246D0A2079C9B821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:bd:9f:39:92:64:ec:32:65:4a:f6:55:4d: 0d:58:29:c3:ad:ba:c8:ec:69:7f:97:4e:a9:86:b1: 29:aa:f6:d3:a6:99:57:1e:5b:35:46:ac:df:f8:f3: 11:de:05:4f:fc:a8:fe:89:21:f3:c5:da:56:70:f8: 5e:61:b7:b7:7b:ce:39:3d:ea:f5:d8:66:80:75:42: f0:d1:60:b7:31:ab:f8:e4:cf:4c:6c:82:ea:e1:ac: d5:fe:c4:03:56:f0:a3:11:32:7f:58:31:2a:87:ed: 50:3c:77:35:3a:16:91:37:f0:89:59:30:0b:a8:76: 35:8b:60:dc:95:63:5f:1b:f0:e5:64:11:7f:4f:17: 45:35:4f:18:76:a7:f5:96:4c:94:71:d9:de:79:e7: 4d:05:2d:54:bf:5e:87:c2:51:ed:7e:b8:f2:20:1c: 6e:89:fa:97:1d:87:0e:34:fb:bd:8f:1f:07:ee:63: 35:77:f4:24:0a:f7:48:fc:ef:7c:40:65:7d:62:9d: e7:84:0a:d9:d8:92:ec:69:05:2d:6d:22:15:20:f2: da:b1:a1:b1:65:23:24:c2:0b:6f:6e:4f:4e:be:78: 25:f3:da:fe:58:f0:80:72:e4:c2:08:63:4d:8a:65: ea:87:4d:f5:9b:e0:dc:2e:37:48:58:32:f3:6d:3e: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:78:71:04:2C:E5:F6:9E:32:EE:7C:E7:24:6D:0A:20:79:C9:B8:21 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A3hxBCzl9p4y7nznJG0KIHnJuCE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.16.0/22 Signature Algorithm: sha256WithRSAEncryption b8:75:f0:f8:9c:83:7b:8b:a0:3d:5c:f0:a4:66:75:a0:09:77: 7a:9e:31:64:c1:1d:2e:87:6d:16:b0:58:79:2b:00:52:b6:e4: 7a:6c:cb:4c:09:ef:a7:94:3d:18:ea:9f:10:05:1c:89:2b:27: ba:09:54:dd:18:3a:8b:85:cd:1f:4b:17:63:19:2e:97:9b:00: 25:ab:30:c4:2e:32:01:ff:40:2d:06:f0:c4:2c:b3:11:ef:bf: 67:29:17:06:06:10:bb:b9:84:a1:10:7a:43:97:0c:51:d5:f4: 57:66:83:7d:61:95:2f:42:f7:08:2d:96:e2:c7:fc:e9:b1:94: 1e:fd:d3:fc:b8:7d:ce:02:d7:b1:58:7e:1e:c2:5a:0b:87:36: 44:e1:91:5e:27:ca:e4:a6:ae:6a:04:5e:29:11:18:d6:f9:e3: d6:8f:da:f0:b1:cf:2d:f0:64:26:7c:e3:87:4a:b0:57:0a:e2: 71:10:ff:95:33:04:86:c3:5b:54:87:61:9c:af:f9:e3:b2:fc: f0:af:1b:37:03:21:02:f5:f8:f4:2f:7a:a9:6c:bc:04:a5:32: e3:90:69:95:15:dd:74:95:31:fc:3b:e6:46:68:b0:48:41:80: aa:3c:f1:5c:0e:d6:37:f9:ca:d5:55:64:86:e3:09:93:45:e3: 74:f3:5b:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAzNzg3MTA0MkNFNUY2 OUUzMkVFN0NFNzI0NkQwQTIwNzlDOUI4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyuL2fOZJk7DJlSvZVTQ1YKcOtusjsaX+XTqmGsSmq9tOmmVce WzVGrN/48xHeBU/8qP6JIfPF2lZw+F5ht7d7zjk96vXYZoB1QvDRYLcxq/jkz0xs gurhrNX+xANW8KMRMn9YMSqH7VA8dzU6FpE38IlZMAuodjWLYNyVY18b8OVkEX9P F0U1Txh2p/WWTJRx2d55500FLVS/XofCUe1+uPIgHG6J+pcdhw40+72PHwfuYzV3 9CQK90j873xAZX1ineeECtnYkuxpBS1tIhUg8tqxobFlIyTCC29uT06+eCXz2v5Y 8IBy5MIIY02KZeqHTfWb4NwuN0hYMvNtPn5fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUA3hxBCzl9p4y7nznJG0KIHnJuCEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0EzaHhCQ3psOXA0eTduem5K RzBLSUhuSnVDRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 whAwDQYJKoZIhvcNAQELBQADggEBALh18Picg3uLoD1c8KRmdaAJd3qeMWTBHS6H bRawWHkrAFK25Hpsy0wJ76eUPRjqnxAFHIkrJ7oJVN0YOouFzR9LF2MZLpebACWr MMQuMgH/QC0G8MQssxHvv2cpFwYGELu5hKEQekOXDFHV9Fdmg31hlS9C9wgtluLH /OmxlB790/y4fc4C17FYfh7CWguHNkThkV4nyuSmrmoEXikRGNb549aP2vCxzy3w ZCZ844dKsFcK4nEQ/5UzBIbDW1SHYZyv+eOy/PCvGzcDIQL1+PQveqlsvASlMuOQ aZUV3XSVMfw75kZosEhBgKo88VwO1jf5ytVVZIbjCZNF43TzW1o= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org