$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa File: CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa (raw, json) Hash identifier: NUWLJNzbjmkzoq7vUYeruNCf5YFgkXPZGIcnbao82nE= Subject key identifier: 09:4F:D7:E5:17:D0:C5:1C:A9:AB:51:19:EA:37:92:13:C1:6B:26:D5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 306C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa Signing time: Mon 26 Aug 2024 05:29:26 +0000 ROA not before: Mon 26 Aug 2024 05:29:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.237.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12396 (0x306c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=094FD7E517D0C51CA9AB5119EA379213C16B26D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:b1:d7:ca:6f:0c:d7:c0:80:70:6a:b0:63: a8:5f:1f:fc:85:f6:f5:c8:19:b7:97:17:07:fd:c3: 73:5e:65:89:b0:d1:33:3a:cc:c9:81:36:59:9e:34: 3e:52:7f:7c:2e:91:43:9b:e1:bd:ec:56:c1:2f:5e: 95:72:b1:08:4a:4a:6d:bc:4c:c8:4f:8b:d5:fe:7a: ea:be:80:bf:95:20:fb:31:92:76:5f:2f:6c:25:22: fa:71:17:07:93:64:ae:13:51:11:55:a5:48:a1:03: 2a:c5:8a:4e:28:6e:b8:36:76:66:27:ac:37:b1:41: 35:be:13:8d:56:bd:bd:77:43:a0:dd:01:a2:6b:bf: 22:d4:59:a4:0a:aa:9a:70:79:57:e1:25:54:1a:ac: 72:c5:e7:0d:a6:12:c7:86:5c:d5:93:37:d7:91:a6: 17:f2:8c:a5:62:8b:86:cc:2f:07:02:d0:0c:d0:06: f8:dd:87:54:13:98:15:57:c7:9b:24:47:73:af:df: 4a:a0:89:09:c8:1d:f4:dc:8f:2f:02:dd:69:86:ef: 29:11:af:05:aa:c3:b4:2c:83:ec:1e:37:3b:de:23: be:75:24:ba:29:35:a0:20:22:0a:a7:40:cc:7a:6a: 5e:5d:0e:3f:1d:3b:00:26:f3:32:e7:8f:9c:b8:19: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4F:D7:E5:17:D0:C5:1C:A9:AB:51:19:EA:37:92:13:C1:6B:26:D5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.128/25 Signature Algorithm: sha256WithRSAEncryption 7e:c1:4e:0c:19:c4:53:c7:e4:25:49:d5:56:fc:19:d2:22:77: e8:4e:21:39:05:c7:21:a3:0b:94:ed:3f:e4:31:dd:a9:74:14: 4c:80:c4:1a:cd:a1:c3:ab:f4:42:97:82:99:27:92:c5:e2:cc: 28:f3:59:a9:83:6d:68:20:88:d9:bf:f9:1f:88:61:9d:79:b3: c3:88:b4:fc:29:63:f6:3e:41:02:8a:28:05:2f:ee:a5:74:ad: 03:e8:10:62:c3:a7:dd:e2:9f:51:c6:8b:19:53:bf:d9:d0:a9: 81:05:7c:b1:28:82:fa:be:83:04:62:fe:97:dd:3a:cb:46:03: f4:38:b5:9a:b2:65:fc:7f:cd:ca:18:e1:46:63:50:09:75:93: 99:bf:e2:6d:33:07:a0:3b:34:38:58:bf:96:e6:c8:82:17:c5: 60:3d:0d:2c:05:f9:4b:5d:0d:de:8b:21:8b:2d:2e:ca:a4:81: 16:91:bc:9b:79:8c:6e:73:55:4f:df:e1:3e:50:74:9a:14:f7: e2:49:7d:2c:64:16:76:c7:c6:1f:8e:fb:5e:fb:95:a8:4c:1f: 8e:01:55:ef:6e:0e:0e:c2:b7:ff:56:f2:b1:00:f4:f8:aa:d3: e2:b7:79:8f:fa:16:3e:7c:d5:22:e3:e2:74:97:19:62:a7:e0: a1:47:13:67 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5NEZEN0U1MTdEMEM1 MUNBOUFCNTExOUVBMzc5MjEzQzE2QjI2RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEKbHXym8M18CAcGqwY6hfH/yF9vXIGbeXFwf9w3NeZYmw0TM6 zMmBNlmeND5Sf3wukUOb4b3sVsEvXpVysQhKSm28TMhPi9X+euq+gL+VIPsxknZf L2wlIvpxFweTZK4TURFVpUihAyrFik4obrg2dmYnrDexQTW+E41Wvb13Q6DdAaJr vyLUWaQKqppweVfhJVQarHLF5w2mEseGXNWTN9eRphfyjKVii4bMLwcC0AzQBvjd h1QTmBVXx5skR3Ov30qgiQnIHfTcjy8C3WmG7ykRrwWqw7Qsg+weNzveI751JLop NaAgIgqnQMx6al5dDj8dOwAm8zLnj5y4GcelAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUCU/X5RfQxRypq1EZ6jeSE8FrJtUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NVX1g1UmZReFJ5cHExRVo2 amVTRThGckp0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+2AMA0GCSqGSIb3DQEBCwUAA4IBAQB+wU4MGcRTx+QlSdVW/BnSInfoTiE5Bcch owuU7T/kMd2pdBRMgMQazaHDq/RCl4KZJ5LF4swo81mpg21oIIjZv/kfiGGdebPD iLT8KWP2PkECiigFL+6ldK0D6BBiw6fd4p9RxosZU7/Z0KmBBXyxKIL6voMEYv6X 3TrLRgP0OLWasmX8f83KGOFGY1AJdZOZv+JtMwegOzQ4WL+W5siCF8VgPQ0sBflL XQ3eiyGLLS7KpIEWkbybeYxuc1VP3+E+UHSaFPfiSX0sZBZ2x8Yfjvte+5WoTB+O AVXvbg4Owrf/VvKxAPT4qtPit3mP+hY+fNUi4+J0lxlip+ChRxNn -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:50 2024 by rpki-client on console-fra.rpki-client.org