$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ddgp2TjcQpFAa3xBTBk6kQChJ00.roa File: Ddgp2TjcQpFAa3xBTBk6kQChJ00.roa (raw, json) Hash identifier: URwZDLLsBe1DlscPpjfU35/1wuCtpVyZc8gvJD1ccQk= Subject key identifier: 0D:D8:29:D9:38:DC:42:91:40:6B:7C:41:4C:19:3A:91:00:A1:27:4D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3012 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ddgp2TjcQpFAa3xBTBk6kQChJ00.roa Signing time: Mon 26 Aug 2024 05:29:06 +0000 ROA not before: Mon 26 Aug 2024 05:29:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.9.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12306 (0x3012) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0DD829D938DC4291406B7C414C193A9100A1274D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:11:6c:7a:32:8b:04:0a:72:37:9b:98:c4: 4c:10:24:e1:6f:e4:2c:31:87:85:3e:1c:24:59:d5: 8c:a0:58:94:56:93:34:1a:e8:ae:b5:ba:49:5c:4f: e0:27:a2:b3:56:11:1f:6b:e5:e1:b4:c7:2a:20:26: 0c:d5:c4:8d:e1:e0:56:77:9b:86:9f:fe:5f:e5:93: 59:64:ca:aa:a9:45:b9:f4:27:bc:49:54:bb:87:00: c0:3c:30:b3:a9:01:7b:26:c7:46:c7:1f:21:90:a1: c3:14:6f:97:88:9b:f6:ee:92:d3:8d:5d:20:00:a3: 24:ed:b6:14:41:a9:f4:ce:24:3f:5b:68:ee:79:1b: 9c:46:a8:0b:80:35:40:02:17:bc:c0:5f:2a:0e:e1: 07:c8:c7:94:a8:6c:ec:f4:25:60:a3:3f:34:b7:04: d2:b6:e5:47:fb:48:c4:91:c3:ca:8c:db:3f:0d:72: 29:85:a5:96:6d:b7:76:c3:ea:8f:af:82:00:9f:bf: 0c:8c:9e:f3:c7:8b:09:b2:d4:c3:3f:dd:0d:4c:7a: 4c:49:9e:ce:54:e3:24:94:3d:ac:fd:16:2d:84:29: dd:ef:a5:24:db:75:46:46:6c:ea:5f:a8:4e:a9:df: 2e:f1:c7:4d:7d:33:9e:b1:e3:cb:8d:c4:9b:dd:77: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D8:29:D9:38:DC:42:91:40:6B:7C:41:4C:19:3A:91:00:A1:27:4D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ddgp2TjcQpFAa3xBTBk6kQChJ00.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.9.64/26 Signature Algorithm: sha256WithRSAEncryption 0d:db:96:a5:05:66:33:cc:c4:5e:91:30:f2:02:35:a2:ab:d4: af:b3:19:15:83:43:98:a3:56:98:a0:b0:9e:5e:46:8e:ca:fa: 20:6f:7c:5b:35:4c:b3:2c:5a:97:ea:f7:79:43:27:02:16:d7: 0b:01:39:57:b8:74:1c:36:6c:d0:c4:ab:de:eb:60:f6:76:dc: ab:3a:c5:53:30:43:ae:06:a9:6f:f2:45:cc:1d:45:ef:3e:d0: da:22:12:37:8e:4c:75:25:0c:4c:fd:3e:58:d8:dd:57:3b:9b: 68:c9:00:7e:9a:5c:5d:bd:e2:c5:35:4d:d5:bd:6d:6e:f9:ab: 4a:e3:24:ab:3c:89:be:1e:0b:f7:e8:42:40:9c:35:0c:c7:8c: f7:e3:d3:7b:e3:d6:09:aa:82:a9:b1:b5:3c:b9:db:90:6a:be: 7c:2b:6c:8d:8e:94:bb:9d:42:09:0d:15:40:20:e9:ed:ee:38: 91:34:d6:7c:80:06:3a:d7:0c:c4:45:d5:9e:fa:24:01:2d:82: 57:6e:b1:81:b3:e4:1a:d4:dc:b3:16:19:e5:b1:6c:da:a4:d4: 59:a8:d8:d2:3a:6e:a6:83:3e:fe:2d:9a:c6:06:b0:89:4a:e9: f5:be:c8:49:4e:6f:9a:5f:1d:89:44:f3:cf:9d:88:ab:d2:e9: 2c:b5:bd:8c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBERDgyOUQ5MzhEQzQy OTE0MDZCN0M0MTRDMTkzQTkxMDBBMTI3NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7hBFsejKLBApyN5uYxEwQJOFv5Cwxh4U+HCRZ1YygWJRWkzQa 6K61uklcT+AnorNWER9r5eG0xyogJgzVxI3h4FZ3m4af/l/lk1lkyqqpRbn0J7xJ VLuHAMA8MLOpAXsmx0bHHyGQocMUb5eIm/buktONXSAAoyTtthRBqfTOJD9baO55 G5xGqAuANUACF7zAXyoO4QfIx5SobOz0JWCjPzS3BNK25Uf7SMSRw8qM2z8NcimF pZZtt3bD6o+vggCfvwyMnvPHiwmy1MM/3Q1MekxJns5U4ySUPaz9Fi2EKd3vpSTb dUZGbOpfqE6p3y7xx019M56x48uNxJvdd15fAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUDdgp2TjcQpFAa3xBTBk6kQChJ00wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RkZ3AyVGpjUXBGQWEzeEJU Qms2a1FDaEowMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wwlAMA0GCSqGSIb3DQEBCwUAA4IBAQAN25alBWYzzMRekTDyAjWiq9SvsxkVg0OY o1aYoLCeXkaOyvogb3xbNUyzLFqX6vd5QycCFtcLATlXuHQcNmzQxKve62D2dtyr OsVTMEOuBqlv8kXMHUXvPtDaIhI3jkx1JQxM/T5Y2N1XO5toyQB+mlxdveLFNU3V vW1u+atK4ySrPIm+Hgv36EJAnDUMx4z349N749YJqoKpsbU8uduQar58K2yNjpS7 nUIJDRVAIOnt7jiRNNZ8gAY61wzERdWe+iQBLYJXbrGBs+Qa1NyzFhnlsWzapNRZ qNjSOm6mgz7+LZrGBrCJSun1vshJTm+aXx2JRPPPnYir0ukstb2M -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org