$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C0JnT0dAvruI4QoC6rwbvo4qHso.roa File: C0JnT0dAvruI4QoC6rwbvo4qHso.roa (raw, json) Hash identifier: 803IYu4vv3I6v0QoGqAMc8VKHWPZFDl7U3UT5nlONRk= Subject key identifier: 0B:42:67:4F:47:40:BE:BB:88:E1:0A:02:EA:BC:1B:BE:8E:2A:1E:CA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3170 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C0JnT0dAvruI4QoC6rwbvo4qHso.roa Signing time: Mon 26 Aug 2024 05:30:28 +0000 ROA not before: Mon 26 Aug 2024 05:30:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12656 (0x3170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0B42674F4740BEBB88E10A02EABC1BBE8E2A1ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:16:aa:ed:46:33:47:e4:0d:91:a7:92:df: 53:66:5d:25:b5:5e:74:d3:2c:1c:2d:39:96:70:1d: e3:e2:8d:cd:5f:02:e1:dc:e9:34:57:bd:b7:84:1d: 41:3d:e5:a6:c0:2b:58:34:c9:e4:3f:bb:7c:21:32: f3:14:12:e0:ac:8c:5e:42:d4:9f:de:b8:d5:2b:92: 9c:ff:d4:d1:13:7c:ef:c1:46:5b:67:34:9e:5a:f9: 81:f6:f0:66:80:f0:eb:e4:f5:0d:c3:11:5f:04:56: 57:12:32:88:4c:de:d1:88:b1:a9:68:8f:f9:e0:59: 7a:57:bf:d0:e4:6b:ba:12:d8:26:c0:f3:f7:05:a1: 10:23:f0:e3:09:27:c6:b7:4f:a7:82:31:94:73:49: 8e:d9:25:0a:fd:44:57:85:64:37:e4:26:60:23:7c: 98:c7:e5:16:dc:69:1e:25:99:ed:2f:78:b4:1f:da: 1e:60:e9:a1:cd:76:34:a8:d7:42:36:04:25:b6:87: bd:3a:d0:f8:1a:a0:a9:92:59:1d:0b:f7:d1:03:1d: 70:98:63:87:68:e0:ed:72:11:00:b5:dc:33:83:0f: 6c:58:06:5d:b7:16:a0:d7:fc:ab:0a:38:95:6d:bf: db:44:82:14:8e:1e:64:7b:03:5d:4d:5a:3c:66:41: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:42:67:4F:47:40:BE:BB:88:E1:0A:02:EA:BC:1B:BE:8E:2A:1E:CA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C0JnT0dAvruI4QoC6rwbvo4qHso.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.188.0/22 Signature Algorithm: sha256WithRSAEncryption ae:03:53:3b:90:45:93:26:36:5d:0e:e2:36:65:b1:79:91:70: cb:b1:1b:84:e0:93:61:9e:dd:3b:02:16:d0:51:3e:62:ea:7e: d4:bc:aa:f2:d5:db:d4:5f:54:ec:16:7b:34:e2:2b:a5:d5:e9: 3b:ba:91:f1:f8:6c:f1:a2:48:44:82:4d:cf:53:b6:8f:d9:6c: 21:1d:d4:7f:e0:cb:fe:9f:e4:f9:25:1e:3e:c4:eb:8f:45:20: 96:33:9d:9b:2b:8e:04:08:19:cc:87:15:b1:aa:4b:cd:69:2c: e2:5c:e8:44:58:8f:7b:e0:c4:4d:75:df:5e:45:d1:01:1c:a3: e1:18:ff:1d:24:1c:04:67:42:83:8d:0f:e7:de:36:69:1f:3f: 4b:92:c1:92:25:0f:1d:cf:1b:f4:92:8b:0d:53:b6:58:4a:38: d0:a7:12:a1:11:e2:6e:95:a8:b7:0a:24:41:22:35:7d:bb:b2: 4f:29:1c:43:21:e0:aa:a8:3d:49:50:04:04:d5:fe:5e:ba:13: 24:62:f5:8e:3a:72:08:b0:67:7b:54:b7:80:8b:98:71:1b:84: c2:9f:56:c9:55:09:24:24:ed:a0:fe:a9:2c:e8:35:bd:1e:20: c9:fc:0a:9f:05:bd:b0:f1:dd:58:60:80:e7:58:56:d3:8c:28: 23:a1:17:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCNDI2NzRGNDc0MEJF QkI4OEUxMEEwMkVBQkMxQkJFOEUyQTFFQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuLRaq7UYzR+QNkaeS31NmXSW1XnTTLBwtOZZwHePijc1fAuHc 6TRXvbeEHUE95abAK1g0yeQ/u3whMvMUEuCsjF5C1J/euNUrkpz/1NETfO/BRltn NJ5a+YH28GaA8Ovk9Q3DEV8EVlcSMohM3tGIsaloj/ngWXpXv9Dka7oS2CbA8/cF oRAj8OMJJ8a3T6eCMZRzSY7ZJQr9RFeFZDfkJmAjfJjH5RbcaR4lme0veLQf2h5g 6aHNdjSo10I2BCW2h7060PgaoKmSWR0L99EDHXCYY4do4O1yEQC13DODD2xYBl23 FqDX/KsKOJVtv9tEghSOHmR7A11NWjxmQUsXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC0JnT0dAvruI4QoC6rwbvo4qHsowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0MwSm5UMGRBdnJ1STRRb0M2 cndidm80cUhzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6bwwDQYJKoZIhvcNAQELBQADggEBAK4DUzuQRZMmNl0O4jZlsXmRcMuxG4Tgk2Ge 3TsCFtBRPmLqftS8qvLV29RfVOwWezTiK6XV6Tu6kfH4bPGiSESCTc9Tto/ZbCEd 1H/gy/6f5PklHj7E649FIJYznZsrjgQIGcyHFbGqS81pLOJc6ERYj3vgxE11315F 0QEco+EY/x0kHARnQoOND+feNmkfP0uSwZIlDx3PG/SSiw1TtlhKONCnEqER4m6V qLcKJEEiNX27sk8pHEMh4KqoPUlQBATV/l66EyRi9Y46cgiwZ3tUt4CLmHEbhMKf VslVCSQk7aD+qSzoNb0eIMn8Cp8FvbDx3VhggOdYVtOMKCOhF94= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org