$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C4vRvhP07nW0knqI_B-VjoVfUhY.roa File: C4vRvhP07nW0knqI_B-VjoVfUhY.roa (raw, json) Hash identifier: HPeia10rP/y7dQs7Cal0i0CXzHuXtM7KkIjSEW4zebI= Subject key identifier: 0B:8B:D1:BE:13:F4:EE:75:B4:92:7A:88:FC:1F:95:8E:85:5F:52:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3062 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C4vRvhP07nW0knqI_B-VjoVfUhY.roa Signing time: Mon 26 Aug 2024 05:29:24 +0000 ROA not before: Mon 26 Aug 2024 05:29:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12386 (0x3062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0B8BD1BE13F4EE75B4927A88FC1F958E855F5216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:f1:28:d7:8d:61:77:05:57:94:24:ef:7b: 79:84:c7:d2:ab:75:c3:f7:a2:38:a8:5e:2e:03:ae: 88:66:9b:24:6c:05:8d:0b:4a:23:a9:c0:2e:2d:76: d6:f2:2a:59:4a:81:84:6d:64:a8:b4:26:cb:bf:81: 17:e1:63:08:62:c3:e3:3a:6e:3a:e2:f2:4e:f6:2b: b0:cd:f1:23:d1:18:9d:df:49:c3:ff:60:dd:16:0e: 0e:c1:7f:1d:3c:0d:2b:bc:59:46:9b:47:76:db:12: 66:8e:bf:66:d4:7e:7b:ad:f8:ba:c3:a1:4e:1a:a2: 0f:03:5b:57:b1:24:3a:6b:8d:c7:a3:b0:25:ef:57: de:26:82:b8:a9:1a:c3:f0:02:38:8e:72:89:31:fa: 90:ff:2a:10:d2:0e:75:76:c3:4f:7b:b9:ed:04:26: 13:95:df:11:20:ee:c1:3b:2c:ca:64:c5:28:72:0b: d9:c6:66:cc:e6:27:30:59:44:83:1f:8c:58:92:63: 7a:bf:ef:18:f3:69:39:9a:e8:cb:94:58:b7:5d:03: 6f:82:fc:5c:fc:dd:94:fd:3c:c1:0f:a0:5e:0f:7c: c2:2a:93:24:da:6f:8a:26:f3:95:81:57:98:de:4b: 6c:38:fd:68:32:2d:89:83:e0:46:1c:d1:fa:51:57: 34:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8B:D1:BE:13:F4:EE:75:B4:92:7A:88:FC:1F:95:8E:85:5F:52:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C4vRvhP07nW0knqI_B-VjoVfUhY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.136.0/21 Signature Algorithm: sha256WithRSAEncryption 56:0e:1b:31:7a:bc:d0:18:f0:df:f8:69:d0:2a:01:a9:a2:82: 7e:9a:24:1d:90:ce:94:ba:46:8c:92:09:fc:cf:5e:89:52:a6: 9f:21:b3:e8:c0:46:81:e3:eb:cb:bd:07:59:ef:54:97:44:7b: f1:c5:ff:c4:93:f9:89:9c:94:55:79:01:d2:45:a6:96:f2:78: 99:a9:91:ce:71:be:13:8e:4a:10:d1:58:6c:c3:a2:cd:b2:6f: a6:27:5a:bb:4d:5d:ad:58:c1:67:10:cd:3d:bb:d1:37:cf:fb: 80:0f:f5:63:93:f3:ff:82:78:23:8b:01:66:a2:6f:2a:57:6d: 98:41:0f:80:c4:05:d1:45:dc:92:20:df:3a:0f:1d:a0:7a:ee: 77:9e:3f:8f:45:2e:9b:80:4e:20:be:17:6a:b6:f7:8c:1b:1b: 50:0e:c9:82:2f:ee:b4:41:b1:90:d7:c6:da:a4:0c:f1:c4:bd: 9f:c1:05:08:09:e1:54:fc:fe:76:9d:55:95:5e:f1:98:84:0b: 4b:ff:f0:42:3f:ab:b6:5c:6d:e9:1d:c0:da:80:d4:05:b7:bb: e3:7d:5f:ce:39:14:c0:d2:8f:bb:a1:5a:dd:4b:31:9c:c3:1b: 18:d9:74:69:52:4d:68:95:06:fc:81:1c:98:af:a9:15:6f:8f: 56:1e:10:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCOEJEMUJFMTNGNEVF NzVCNDkyN0E4OEZDMUY5NThFODU1RjUyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9cvEo141hdwVXlCTve3mEx9KrdcP3ojioXi4DrohmmyRsBY0L SiOpwC4tdtbyKllKgYRtZKi0Jsu/gRfhYwhiw+M6bjri8k72K7DN8SPRGJ3fScP/ YN0WDg7Bfx08DSu8WUabR3bbEmaOv2bUfnut+LrDoU4aog8DW1exJDprjcejsCXv V94mgripGsPwAjiOcokx+pD/KhDSDnV2w097ue0EJhOV3xEg7sE7LMpkxShyC9nG ZszmJzBZRIMfjFiSY3q/7xjzaTma6MuUWLddA2+C/Fz83ZT9PMEPoF4PfMIqkyTa b4om85WBV5jeS2w4/WgyLYmD4EYc0fpRVzRBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC4vRvhP07nW0knqI/B+VjoVfUhYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0M0dlJ2aFAwN25XMGtucUlf Qi1Wam9WZlVoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w4gwDQYJKoZIhvcNAQELBQADggEBAFYOGzF6vNAY8N/4adAqAamign6aJB2QzpS6 RoySCfzPXolSpp8hs+jARoHj68u9B1nvVJdEe/HF/8ST+YmclFV5AdJFppbyeJmp kc5xvhOOShDRWGzDos2yb6YnWrtNXa1YwWcQzT270TfP+4AP9WOT8/+CeCOLAWai bypXbZhBD4DEBdFF3JIg3zoPHaB67neeP49FLpuATiC+F2q294wbG1AOyYIv7rRB sZDXxtqkDPHEvZ/BBQgJ4VT8/nadVZVe8ZiEC0v/8EI/q7ZcbekdwNqA1AW3u+N9 X845FMDSj7uhWt1LMZzDGxjZdGlSTWiVBvyBHJivqRVvj1YeEDk= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org