$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A778zPHLDwJggXSDgQ9X75Y_Uks.roa File: A778zPHLDwJggXSDgQ9X75Y_Uks.roa (raw, json) Hash identifier: BqKhaadqfsbjGhMiUW/jYyadY6VPn05cJtKUfy3xP1s= Subject key identifier: 03:BE:FC:CC:F1:CB:0F:02:60:81:74:83:81:0F:57:EF:96:3F:52:4B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 311F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A778zPHLDwJggXSDgQ9X75Y_Uks.roa Signing time: Mon 26 Aug 2024 05:30:07 +0000 ROA not before: Mon 26 Aug 2024 05:30:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12575 (0x311f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=03BEFCCCF1CB0F0260817483810F57EF963F524B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:18:2c:e1:da:91:6f:63:34:b1:0b:87:c6: a3:a0:43:55:ed:70:14:2a:c8:31:60:f9:7b:ef:d3: 8c:13:c5:11:43:10:75:8b:3a:ca:11:fa:9e:4c:b3: be:f9:76:8b:05:1b:6c:fa:45:7a:5a:c3:14:9a:70: 5d:de:c2:db:79:90:76:b5:ad:61:06:73:7e:f2:e3: 61:1b:02:c6:a3:3e:09:0e:df:10:1c:e8:0a:03:c0: d0:db:a6:da:73:a6:21:ad:01:74:83:dd:63:9d:12: a5:ef:bb:d4:9f:40:31:73:a3:e0:2c:c7:cd:29:81: 7f:f7:43:1c:a6:ba:05:a7:80:7d:e5:dc:c5:d9:50: 0b:47:47:bc:68:dd:55:62:cb:2b:04:25:93:f1:10: 94:b6:6c:be:cb:e0:fe:be:3a:68:9f:2a:a2:31:45: d2:0a:db:fa:5b:bb:ff:2a:41:55:c8:24:d9:48:32: 7c:ce:40:ce:b9:11:4d:a2:95:ed:cf:24:97:50:d7: fa:45:1f:a7:f8:0b:66:05:14:50:cc:4a:d6:9c:d6: b4:c8:47:54:4a:42:db:5d:3f:2c:ae:11:1a:67:c5: 95:3f:89:18:b7:af:1d:2a:77:00:e2:46:e2:3d:a9: d5:ad:30:3b:5c:c4:81:a3:57:84:2a:24:d9:24:02: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:FC:CC:F1:CB:0F:02:60:81:74:83:81:0F:57:EF:96:3F:52:4B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A778zPHLDwJggXSDgQ9X75Y_Uks.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.216.0/22 Signature Algorithm: sha256WithRSAEncryption 15:1f:5a:e9:00:40:2f:94:96:dd:f6:6a:20:19:a6:89:d3:0a: 51:de:6c:f9:09:e0:11:66:ad:30:1b:12:83:64:df:a1:63:bd: 76:40:f7:70:ad:76:c1:f8:e0:3a:eb:a2:68:84:eb:bb:8b:11: 69:ac:9c:e5:fa:d9:0b:1f:5e:d0:7d:36:0a:a7:f2:8e:40:fd: 7e:b3:4f:80:a6:60:a6:a3:44:eb:b2:28:ff:2b:01:e1:63:b3: e3:15:f6:5d:93:10:7a:f0:ad:9c:af:64:b3:28:e9:e8:ad:21: 9d:2f:1d:ce:0e:de:33:4e:32:f6:3d:99:ed:89:6f:45:8e:34: 97:9e:c0:c8:2e:70:a3:5c:74:9f:30:32:da:8d:54:b2:32:f3: 6e:06:30:b5:46:9b:fe:dc:41:f1:c5:2d:8c:67:ad:7c:8f:fb: 81:3e:f4:79:60:c5:51:51:cc:c5:64:dd:3c:27:0a:96:e3:0d: 68:7b:a9:72:47:df:7e:ca:84:53:63:3f:45:2f:83:d9:ea:ca: 58:ec:65:fb:12:6b:ff:3b:a8:0b:67:58:e7:cd:40:97:e7:ad: 95:a1:ab:7f:0d:eb:e1:ef:cf:58:d7:3c:9c:c7:93:9f:23:48: a3:43:be:14:7f:e1:3f:67:7b:a5:a2:fb:55:aa:42:aa:e8:47: de:40:dd:73 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAzQkVGQ0NDRjFDQjBG MDI2MDgxNzQ4MzgxMEY1N0VGOTYzRjUyNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC55Rgs4dqRb2M0sQuHxqOgQ1XtcBQqyDFg+Xvv04wTxRFDEHWL OsoR+p5Ms775dosFG2z6RXpawxSacF3ewtt5kHa1rWEGc37y42EbAsajPgkO3xAc 6AoDwNDbptpzpiGtAXSD3WOdEqXvu9SfQDFzo+Asx80pgX/3QxymugWngH3l3MXZ UAtHR7xo3VViyysEJZPxEJS2bL7L4P6+OmifKqIxRdIK2/pbu/8qQVXIJNlIMnzO QM65EU2ile3PJJdQ1/pFH6f4C2YFFFDMStac1rTIR1RKQttdPyyuERpnxZU/iRi3 rx0qdwDiRuI9qdWtMDtcxIGjV4QqJNkkAtyTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUA778zPHLDwJggXSDgQ9X75Y/UkswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0E3Nzh6UEhMRHdKZ2dYU0Rn UTlYNzVZX1Vrcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AdgwDQYJKoZIhvcNAQELBQADggEBABUfWukAQC+Ult32aiAZponTClHebPkJ4BFm rTAbEoNk36FjvXZA93CtdsH44DrromiE67uLEWmsnOX62QsfXtB9Ngqn8o5A/X6z T4CmYKajROuyKP8rAeFjs+MV9l2TEHrwrZyvZLMo6eitIZ0vHc4O3jNOMvY9me2J b0WONJeewMgucKNcdJ8wMtqNVLIy824GMLVGm/7cQfHFLYxnrXyP+4E+9HlgxVFR zMVk3TwnCpbjDWh7qXJH337KhFNjP0Uvg9nqyljsZfsSa/87qAtnWOfNQJfnrZWh q38N6+Hvz1jXPJzHk58jSKNDvhR/4T9ne6Wi+1WqQqroR95A3XM= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org