$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BMw6qmE7SJ8HDuWK70LmcM3rF1I.roa File: BMw6qmE7SJ8HDuWK70LmcM3rF1I.roa (raw, json) Hash identifier: ilmEqLPfDBCLp5Rlu4MRYsiEyfvScg1GeU7Kq93a+Ks= Subject key identifier: 04:CC:3A:AA:61:3B:48:9F:07:0E:E5:8A:EF:42:E6:70:CD:EB:17:52 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3277 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BMw6qmE7SJ8HDuWK70LmcM3rF1I.roa Signing time: Mon 26 Aug 2024 05:31:41 +0000 ROA not before: Mon 26 Aug 2024 05:31:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.192.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12919 (0x3277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=04CC3AAA613B489F070EE58AEF42E670CDEB1752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:6c:65:68:49:de:b3:ee:dc:58:eb:22:09: b6:2a:95:95:18:b4:55:c0:35:f3:b9:89:2e:ac:89: 63:a1:e3:de:3d:d0:16:69:f1:fd:df:a3:a5:74:c8: e9:ba:12:66:18:09:d2:14:d8:93:70:16:69:96:21: 9b:fe:97:5e:48:fb:85:63:de:65:dc:4c:83:65:f5: d4:43:5d:8b:1c:4a:88:3b:57:b9:ec:de:61:87:e8: a3:62:d7:d7:14:05:4e:3c:65:b8:f0:d5:dc:ec:47: cb:75:42:69:c2:0b:0f:34:ee:8e:ac:0d:4a:dc:27: dd:7b:34:ce:bf:dc:0c:85:48:7d:ab:96:be:a1:ec: d6:81:cc:c5:0e:df:53:47:a3:f3:f8:40:0f:a7:d9: 90:69:49:49:51:39:51:b9:24:e2:35:9c:6f:c9:dd: db:a8:7d:bb:73:c3:9a:4a:c8:25:d2:8b:9a:51:ca: c3:08:fa:db:cd:d8:03:77:82:13:4a:fc:82:b8:b3: 17:e4:dc:da:21:66:98:e1:c5:97:bb:c6:6a:84:78: 11:9f:ea:15:19:88:0b:01:b7:31:26:99:27:4a:3f: a7:ec:3b:41:99:33:10:34:9c:3b:8f:c4:e0:54:27: a6:71:5a:a9:3f:95:2c:c3:89:c6:ac:00:2b:60:e7: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CC:3A:AA:61:3B:48:9F:07:0E:E5:8A:EF:42:E6:70:CD:EB:17:52 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BMw6qmE7SJ8HDuWK70LmcM3rF1I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/14 Signature Algorithm: sha256WithRSAEncryption 74:0c:5e:5f:24:d7:38:6b:ff:03:19:fd:b9:f1:0d:b4:a3:6c: 3d:2e:72:fd:20:8b:5d:1f:a1:61:17:79:de:56:4b:7a:b2:32: c8:62:7f:0d:ca:5b:43:44:7d:66:4d:af:49:b6:02:f4:82:fd: 69:cc:8d:43:6d:26:30:ae:3a:4d:ea:7f:15:ba:64:ef:74:a1: 1b:0f:4e:64:8b:f9:2d:f6:cc:41:74:52:ae:8e:a0:c4:31:09: ad:85:bb:7c:eb:8d:cf:fc:bb:2e:1e:e3:d9:d0:3b:80:5c:f4: c1:de:02:64:f7:16:7c:76:9d:49:3f:40:ce:60:08:26:44:f6: d4:ed:9b:15:97:57:63:b4:d3:3f:71:3f:af:1f:f9:73:2d:27: 00:a4:01:90:2c:e0:0e:80:d5:80:77:14:09:f2:85:20:b7:19: f3:99:b6:65:04:c6:e5:e3:67:b7:d2:63:b0:32:ae:84:5c:ea: 8d:fe:51:72:80:50:57:c3:bb:5d:8e:74:d2:b7:e8:8b:c9:87: 98:bd:29:d6:ba:52:d7:b1:47:1d:46:ac:87:96:b0:f7:d8:cf: bf:9e:55:1e:6b:09:e2:8e:1b:cf:04:95:f0:09:82:26:e2:bd: a0:e3:e1:cd:ca:34:dd:7a:21:7a:43:a7:59:c8:83:4d:6a:90: a7:f3:7a:c4 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICMncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0Q0MzQUFBNjEzQjQ4 OUYwNzBFRTU4QUVGNDJFNjcwQ0RFQjE3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC58WxlaEnes+7cWOsiCbYqlZUYtFXANfO5iS6siWOh49490BZp 8f3fo6V0yOm6EmYYCdIU2JNwFmmWIZv+l15I+4Vj3mXcTINl9dRDXYscSog7V7ns 3mGH6KNi19cUBU48Zbjw1dzsR8t1QmnCCw807o6sDUrcJ917NM6/3AyFSH2rlr6h 7NaBzMUO31NHo/P4QA+n2ZBpSUlROVG5JOI1nG/J3duofbtzw5pKyCXSi5pRysMI +tvN2AN3ghNK/IK4sxfk3NohZpjhxZe7xmqEeBGf6hUZiAsBtzEmmSdKP6fsO0GZ MxA0nDuPxOBUJ6ZxWqk/lSzDicasACtg50cXAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUBMw6qmE7SJ8HDuWK70LmcM3rF1IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JNdzZxbUU3U0o4SER1V0s3 MExtY00zckYxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ7 wDANBgkqhkiG9w0BAQsFAAOCAQEAdAxeXyTXOGv/Axn9ufENtKNsPS5y/SCLXR+h YRd53lZLerIyyGJ/DcpbQ0R9Zk2vSbYC9IL9acyNQ20mMK46Tep/Fbpk73ShGw9O ZIv5LfbMQXRSro6gxDEJrYW7fOuNz/y7Lh7j2dA7gFz0wd4CZPcWfHadST9AzmAI JkT21O2bFZdXY7TTP3E/rx/5cy0nAKQBkCzgDoDVgHcUCfKFILcZ85m2ZQTG5eNn t9JjsDKuhFzqjf5RcoBQV8O7XY500rfoi8mHmL0p1rpS17FHHUash5aw99jPv55V HmsJ4o4bzwSV8AmCJuK9oOPhzco03XohekOnWciDTWqQp/N6xA== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:46 2024 by rpki-client on console-fra.rpki-client.org