$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B72wq0pHEIIlr0EF5lXVNRI8owA.roa File: B72wq0pHEIIlr0EF5lXVNRI8owA.roa (raw, json) Hash identifier: TpSxmJs4wjEyQ88CR2TeAW22huGGxBbPbQ33e/BTqHY= Subject key identifier: 07:BD:B0:AB:4A:47:10:82:25:AF:41:05:E6:55:D5:35:12:3C:A3:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 313F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B72wq0pHEIIlr0EF5lXVNRI8owA.roa Signing time: Mon 26 Aug 2024 05:30:16 +0000 ROA not before: Mon 26 Aug 2024 05:30:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12607 (0x313f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=07BDB0AB4A47108225AF4105E655D535123CA300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:91:12:69:f6:e2:b8:6e:c1:b1:f8:b9:fa: 9d:94:66:32:6f:40:40:60:52:39:8f:a2:a8:e0:02: 08:cf:05:7d:a2:8e:8c:8d:5c:5a:2c:6d:0f:fe:6e: f0:d0:19:65:bb:41:71:b4:e1:02:44:db:d5:a5:3f: 8a:d3:e7:14:9b:4b:c1:51:15:ae:39:8b:38:a3:17: 8a:60:28:27:3e:a6:28:d7:b0:c7:47:33:af:d9:87: 8f:db:2d:d4:6b:1a:d2:38:66:29:d6:1f:ad:92:39: cc:aa:a8:8b:67:77:a8:41:0f:15:e3:b0:de:54:c5: ea:f0:19:b7:d7:72:31:6f:87:d4:b4:e3:50:97:f6: 17:56:01:20:1f:ec:b5:7a:4a:9b:b5:47:bf:2b:98: 0e:f2:a2:3d:c6:ab:fa:a4:e9:f7:7a:08:20:dc:07: 2d:02:7e:1d:f1:36:b0:01:15:b0:96:4c:42:b2:5e: 73:34:c6:15:e7:7f:16:24:9a:3a:7c:0c:09:2e:67: 8f:8e:30:ea:5a:cc:d6:48:5e:a1:62:05:95:98:6c: 58:a4:ba:b8:ee:03:d7:06:fc:f6:b5:e6:f4:aa:a6: 9a:50:78:83:ac:61:2a:31:a2:a5:ba:fb:7c:8f:9d: fc:74:dd:0a:3e:1b:07:0f:b1:69:e9:40:82:87:21: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:B0:AB:4A:47:10:82:25:AF:41:05:E6:55:D5:35:12:3C:A3:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B72wq0pHEIIlr0EF5lXVNRI8owA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.144.0/21 Signature Algorithm: sha256WithRSAEncryption 56:b3:8f:9b:c7:11:bc:07:f4:49:3b:21:ad:e4:0d:09:4c:bd: ca:ba:aa:25:98:3a:62:43:94:6c:fa:55:bd:00:77:e5:ed:4f: 1a:cd:a2:fd:50:a7:24:2b:d3:80:33:c9:e0:67:2c:ee:c4:57: 82:9c:c9:93:df:ba:6e:e6:84:cf:5a:2f:73:86:7c:57:ca:fd: a2:69:2f:13:e7:ab:9f:67:8c:25:fc:c3:3b:51:9f:71:ef:57: ae:08:1a:d3:5d:8d:7a:1e:f5:ba:e8:30:7c:10:8b:07:e7:a8: ca:f3:50:51:6b:70:54:0b:0f:d1:dc:89:85:d2:3b:0f:b4:84: 21:fd:f0:54:ef:04:ed:01:a7:6c:25:02:e9:c9:c4:79:cd:ab: 8d:01:7a:34:2e:15:38:60:d3:15:6b:6e:95:a4:ab:78:ca:01: f7:de:e7:87:77:cd:e1:6b:68:7b:8d:a0:c8:ad:f6:b5:33:8b: 79:26:9e:82:d9:89:7d:6e:5b:22:97:4a:a1:40:72:72:49:ea: 09:f3:cb:da:20:0b:12:6b:e2:73:3b:52:2e:c7:3b:2c:0e:10: 50:4c:81:15:aa:e4:e0:cb:e1:51:76:1d:43:39:8b:1f:ef:5d: ae:dd:1a:2c:f9:0e:00:20:84:3b:b7:4e:8f:3a:b9:93:b4:94: a5:49:41:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3QkRCMEFCNEE0NzEw ODIyNUFGNDEwNUU2NTVENTM1MTIzQ0EzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVepESafbiuG7Bsfi5+p2UZjJvQEBgUjmPoqjgAgjPBX2ijoyN XFosbQ/+bvDQGWW7QXG04QJE29WlP4rT5xSbS8FRFa45izijF4pgKCc+pijXsMdH M6/Zh4/bLdRrGtI4ZinWH62SOcyqqItnd6hBDxXjsN5UxerwGbfXcjFvh9S041CX 9hdWASAf7LV6Spu1R78rmA7yoj3Gq/qk6fd6CCDcBy0Cfh3xNrABFbCWTEKyXnM0 xhXnfxYkmjp8DAkuZ4+OMOpazNZIXqFiBZWYbFikurjuA9cG/Pa15vSqpppQeIOs YSoxoqW6+3yPnfx03Qo+GwcPsWnpQIKHIUkRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUB72wq0pHEIIlr0EF5lXVNRI8owAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0I3MndxMHBIRUlJbHIwRUY1 bFhWTlJJOG93QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6JAwDQYJKoZIhvcNAQELBQADggEBAFazj5vHEbwH9Ek7Ia3kDQlMvcq6qiWYOmJD lGz6Vb0Ad+XtTxrNov1QpyQr04AzyeBnLO7EV4KcyZPfum7mhM9aL3OGfFfK/aJp LxPnq59njCX8wztRn3HvV64IGtNdjXoe9broMHwQiwfnqMrzUFFrcFQLD9HciYXS Ow+0hCH98FTvBO0Bp2wlAunJxHnNq40BejQuFThg0xVrbpWkq3jKAffe54d3zeFr aHuNoMit9rUzi3kmnoLZiX1uWyKXSqFAcnJJ6gnzy9ogCxJr4nM7Ui7HOywOEFBM gRWq5ODL4VF2HUM5ix/vXa7dGiz5DgAghDu3To86uZO0lKVJQY0= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:17 2024 by rpki-client on console-ams.rpki-client.org