$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CsZg1CB4pMpgd16B_zMgabcFJes.roa File: CsZg1CB4pMpgd16B_zMgabcFJes.roa (raw, json) Hash identifier: /E/NN5OGYL3duGzgiNCOl6rz0wPMvToS1gYMNkL6sSg= Subject key identifier: 0A:C6:60:D4:20:78:A4:CA:60:77:5E:81:FF:33:20:69:B7:05:25:EB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3253 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CsZg1CB4pMpgd16B_zMgabcFJes.roa Signing time: Mon 26 Aug 2024 05:31:32 +0000 ROA not before: Mon 26 Aug 2024 05:31:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12883 (0x3253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0AC660D42078A4CA60775E81FF332069B70525EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:6d:f1:66:20:3a:66:d1:8f:ef:c7:6f:73: d4:cb:df:e9:f5:3f:22:96:c3:9f:2b:3b:43:17:7d: 3f:df:47:11:79:a1:ff:49:a6:c2:32:0f:01:6f:8e: e1:05:1a:a4:32:8c:3a:a5:9a:ce:cd:89:9a:e8:db: cb:b2:56:c7:1c:ea:3c:8a:0a:15:9d:ed:92:65:90: 18:87:46:e4:76:f4:75:6d:bb:b1:13:e8:b8:ba:19: ec:77:ea:66:ab:f4:c6:ce:5c:1f:c5:bb:19:b7:7a: 1e:ce:af:db:cc:3a:e1:34:b2:aa:47:a6:fe:27:dc: 25:af:a4:3a:88:6b:d8:52:db:cf:2b:c2:98:b8:78: f2:8a:bc:1b:50:de:ab:75:8f:11:61:d7:12:41:46: 44:e8:94:dc:35:1a:2a:36:89:e2:aa:8a:14:8c:f3: e7:31:50:fa:ec:4d:8a:f9:ac:3a:ac:92:49:8c:e2: 6e:ea:b5:8c:81:d0:fb:e1:76:94:e7:ca:39:d6:f9: 37:ea:82:e1:62:2c:24:ef:c0:be:05:d4:3b:88:e6: 9d:01:b3:da:ff:4b:aa:4a:78:da:11:f2:ac:27:29: 3c:9a:ef:1d:c0:9b:de:5f:0b:51:84:ff:a8:51:11: cd:c7:54:9f:0b:9d:e7:4a:47:9f:a9:5f:43:07:73: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C6:60:D4:20:78:A4:CA:60:77:5E:81:FF:33:20:69:B7:05:25:EB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CsZg1CB4pMpgd16B_zMgabcFJes.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.80.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:25:c3:88:97:31:89:46:0c:1f:60:b2:ea:2e:b8:36:05:bb: 75:ff:fa:86:c3:62:d3:40:68:4c:71:b5:e1:c4:74:93:7f:c1: 42:b5:fd:db:0e:fd:20:c0:8c:62:79:69:87:0d:3a:1b:73:28: bd:63:2d:d4:da:be:93:b3:e0:77:e8:30:05:eb:b1:b9:7d:56: 18:82:4b:44:ad:3e:b2:56:df:3c:37:bb:21:12:b1:96:6a:5a: a7:df:93:fb:a9:e2:de:4d:0c:e9:c5:4b:ec:19:00:43:db:20: a5:30:b5:27:bc:c8:71:88:73:cc:32:b1:84:e6:51:f1:93:14: 8f:c3:78:56:e6:b5:72:46:86:52:fc:70:91:2c:cd:b8:3f:8c: db:6f:1f:e7:86:9e:af:ca:83:34:a0:5e:61:ce:e5:3c:8e:a1: 6d:d1:29:65:e3:67:e8:dc:f8:c7:e9:49:c1:77:8b:f8:58:23: d6:63:93:e7:90:6d:70:8a:5f:37:12:6b:28:c8:3d:1a:9d:2a: f9:7f:d0:1d:4e:fb:11:99:e2:00:4d:33:51:ff:35:02:28:04: 21:9e:3c:63:cb:bf:95:eb:b6:5c:21:ea:53:70:3c:9b:7f:46: 9b:e9:c1:4d:8f:f7:18:d7:76:6a:f1:53:d7:c8:a2:63:5b:c1: 34:f9:5e:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBQzY2MEQ0MjA3OEE0 Q0E2MDc3NUU4MUZGMzMyMDY5QjcwNTI1RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjLm3xZiA6ZtGP78dvc9TL3+n1PyKWw58rO0MXfT/fRxF5of9J psIyDwFvjuEFGqQyjDqlms7NiZro28uyVscc6jyKChWd7ZJlkBiHRuR29HVtu7ET 6Li6Gex36mar9MbOXB/Fuxm3eh7Or9vMOuE0sqpHpv4n3CWvpDqIa9hS288rwpi4 ePKKvBtQ3qt1jxFh1xJBRkTolNw1Gio2ieKqihSM8+cxUPrsTYr5rDqskkmM4m7q tYyB0PvhdpTnyjnW+TfqguFiLCTvwL4F1DuI5p0Bs9r/S6pKeNoR8qwnKTya7x3A m95fC1GE/6hREc3HVJ8LnedKR5+pX0MHcybPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUCsZg1CB4pMpgd16B/zMgabcFJeswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NzWmcxQ0I0cE1wZ2QxNkJf ek1nYWJjRkplcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wlAwDQYJKoZIhvcNAQELBQADggEBAAslw4iXMYlGDB9gsuouuDYFu3X/+obDYtNA aExxteHEdJN/wUK1/dsO/SDAjGJ5aYcNOhtzKL1jLdTavpOz4HfoMAXrsbl9VhiC S0StPrJW3zw3uyESsZZqWqffk/up4t5NDOnFS+wZAEPbIKUwtSe8yHGIc8wysYTm UfGTFI/DeFbmtXJGhlL8cJEszbg/jNtvH+eGnq/KgzSgXmHO5TyOoW3RKWXjZ+jc +MfpScF3i/hYI9Zjk+eQbXCKXzcSayjIPRqdKvl/0B1O+xGZ4gBNM1H/NQIoBCGe PGPLv5Xrtlwh6lNwPJt/RpvpwU2P9xjXdmrxU9fIomNbwTT5Xmc= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org