$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BNMF9o9WhRYuiE99j0QNWxHmjhw.roa File: BNMF9o9WhRYuiE99j0QNWxHmjhw.roa (raw, json) Hash identifier: DLHq093fuXlcxatBWMDqhbfxjgHzQGR//0LBibcxrGI= Subject key identifier: 04:D3:05:F6:8F:56:85:16:2E:88:4F:7D:8F:44:0D:5B:11:E6:8E:1C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3098 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BNMF9o9WhRYuiE99j0QNWxHmjhw.roa Signing time: Mon 26 Aug 2024 05:29:37 +0000 ROA not before: Mon 26 Aug 2024 05:29:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12440 (0x3098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=04D305F68F5685162E884F7D8F440D5B11E68E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:4a:ff:7d:f6:5d:a4:34:f6:3e:45:2e:31: 92:b7:60:2b:f3:c0:ee:31:23:02:05:44:f8:4c:cd: bd:35:b2:9b:88:c1:7d:fb:aa:2f:0f:e1:26:50:6e: d6:9d:5f:97:85:39:e8:de:98:0e:f9:a9:e8:34:f3: 7b:d5:f2:d2:8c:31:99:2f:72:cb:cd:fa:7b:45:40: cf:0e:15:79:dd:b8:03:5e:bd:81:6e:2c:28:30:1f: 36:08:00:04:ce:78:bc:c7:73:71:a9:78:f3:d8:8f: 42:7e:32:3c:55:76:5b:c0:4f:e7:cd:5f:84:03:58: 24:34:d6:f1:68:ed:91:9c:43:66:f8:e7:15:06:18: 4f:63:03:ca:d6:3b:7e:8e:f6:d2:95:98:b0:b5:bc: 0b:a2:5d:5d:15:82:3a:25:4b:53:ac:4d:3b:b5:9b: 77:df:9d:11:a6:ec:51:32:57:5d:26:40:1c:1f:d9: f7:c9:42:71:42:47:88:99:3d:39:1a:ef:54:5b:fa: 78:24:70:8c:08:52:f6:4d:55:fe:be:de:35:72:25: 6c:36:44:3c:a4:63:40:b9:fc:f4:14:a7:5f:2b:55: 6c:7f:79:f5:96:18:92:db:07:ab:82:d9:8e:50:c2: 75:c5:24:b4:dc:ef:93:51:d3:35:74:e3:ed:93:82: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D3:05:F6:8F:56:85:16:2E:88:4F:7D:8F:44:0D:5B:11:E6:8E:1C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BNMF9o9WhRYuiE99j0QNWxHmjhw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.111.0/24 Signature Algorithm: sha256WithRSAEncryption 56:37:f0:8c:f3:fd:57:4d:03:24:1e:3e:7c:b8:05:7c:b9:94: 69:80:9c:31:20:c4:5a:09:dd:3d:cf:16:e3:b3:2a:8a:e4:8e: df:3c:cc:f6:44:19:3e:3b:b1:cb:69:97:88:c1:88:ef:fe:2a: 5f:4d:48:e0:8b:16:c6:44:66:cd:60:b1:c8:0c:22:24:2a:ab: 18:38:68:96:e0:90:4e:5f:c8:88:db:82:0d:f5:ea:f3:fb:14: b4:24:5b:da:3e:81:42:1e:00:f6:cf:09:93:71:fe:ec:34:57: 12:bc:b1:a4:4a:e7:8f:6c:70:13:2c:08:a8:69:19:4f:7e:9f: 28:01:45:46:1c:5e:79:dc:fe:b6:81:7e:ad:38:b7:aa:f5:c9: 64:37:83:46:5a:d3:6c:9c:a7:72:57:73:dc:59:30:cc:54:55: 1f:63:af:bf:28:aa:76:41:9c:75:df:4b:3a:cc:a8:1a:aa:9c: 73:37:6d:62:91:29:64:3b:9b:b4:69:38:63:fc:27:33:f7:a8: a9:60:d2:5d:8e:91:9e:45:c4:51:94:5c:c2:ea:5e:2c:46:49: 46:a8:c5:8f:c6:1d:80:92:77:d7:bf:9d:8c:b5:d3:ec:5b:93: 98:11:12:9f:08:e0:83:b1:8a:93:e7:92:32:3f:d8:ae:0d:33: 88:70:1b:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0RDMwNUY2OEY1Njg1 MTYyRTg4NEY3RDhGNDQwRDVCMTFFNjhFMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2jkr/ffZdpDT2PkUuMZK3YCvzwO4xIwIFRPhMzb01spuIwX37 qi8P4SZQbtadX5eFOejemA75qeg083vV8tKMMZkvcsvN+ntFQM8OFXnduANevYFu LCgwHzYIAATOeLzHc3GpePPYj0J+MjxVdlvAT+fNX4QDWCQ01vFo7ZGcQ2b45xUG GE9jA8rWO36O9tKVmLC1vAuiXV0VgjolS1OsTTu1m3ffnRGm7FEyV10mQBwf2ffJ QnFCR4iZPTka71Rb+ngkcIwIUvZNVf6+3jVyJWw2RDykY0C5/PQUp18rVWx/efWW GJLbB6uC2Y5QwnXFJLTc75NR0zV04+2Tgp/1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBNMF9o9WhRYuiE99j0QNWxHmjhwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JOTUY5bzlXaFJZdWlFOTlq MFFOV3hIbWpody5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wW8wDQYJKoZIhvcNAQELBQADggEBAFY38Izz/VdNAyQePny4BXy5lGmAnDEgxFoJ 3T3PFuOzKorkjt88zPZEGT47sctpl4jBiO/+Kl9NSOCLFsZEZs1gscgMIiQqqxg4 aJbgkE5fyIjbgg316vP7FLQkW9o+gUIeAPbPCZNx/uw0VxK8saRK549scBMsCKhp GU9+nygBRUYcXnnc/raBfq04t6r1yWQ3g0Za02ycp3JXc9xZMMxUVR9jr78oqnZB nHXfSzrMqBqqnHM3bWKRKWQ7m7RpOGP8JzP3qKlg0l2OkZ5FxFGUXMLqXixGSUao xY/GHYCSd9e/nYy10+xbk5gREp8I4IOxipPnkjI/2K4NM4hwG7Q= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org