$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DgmxYpieuTjHp46-phLJF_uW0uI.roa File: DgmxYpieuTjHp46-phLJF_uW0uI.roa (raw, json) Hash identifier: xnSCAuNURssJGzL3661OPKATiW/BxAGk261Ck13wmkE= Subject key identifier: 0E:09:B1:62:98:9E:B9:38:C7:A7:8E:BE:A6:12:C9:17:FB:96:D2:E2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31C5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DgmxYpieuTjHp46-phLJF_uW0uI.roa Signing time: Mon 26 Aug 2024 05:30:55 +0000 ROA not before: Mon 26 Aug 2024 05:30:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12741 (0x31c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0E09B162989EB938C7A78EBEA612C917FB96D2E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:64:1d:c2:92:d5:57:2f:74:ae:8a:02:13:f0: 10:0a:b1:99:eb:31:91:8c:0d:0b:ad:12:28:03:86: e8:f7:7d:55:87:01:8d:ad:ea:ed:bb:b9:7f:00:d9: 75:60:e2:5a:51:c5:4a:47:60:62:93:1b:42:9d:f8: 93:35:43:4f:9e:e8:8f:73:16:7a:ff:95:42:44:20: 9a:de:bf:f1:88:0f:1b:25:f6:22:ee:29:7a:5d:f2: e5:12:89:cd:72:d5:9d:72:08:d8:8e:41:86:40:01: c9:95:6d:f6:93:70:88:57:7b:ce:d9:be:c0:d3:55: e3:ad:c4:9c:27:dc:04:13:b0:9a:26:28:9b:75:c7: 87:8e:05:68:f8:2b:01:67:7c:aa:e0:ff:27:f2:71: 68:b4:71:96:ac:ef:8c:8a:d2:7c:00:cc:5f:df:9d: 2e:8e:f6:f4:69:9d:21:62:62:ac:d4:5b:fc:4c:d9: 30:7c:45:2a:33:ca:4f:f8:7b:66:9c:c1:ba:4c:f5: 57:85:95:3d:d3:36:3e:8b:ef:de:3d:07:1d:c6:cf: a9:42:15:54:f5:18:b3:54:d6:ae:08:39:15:70:ce: c6:26:d1:eb:5f:6f:de:a3:24:3f:82:cb:b7:88:94: 20:d1:cc:66:32:27:d6:9f:5e:84:57:eb:75:a8:0c: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:09:B1:62:98:9E:B9:38:C7:A7:8E:BE:A6:12:C9:17:FB:96:D2:E2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DgmxYpieuTjHp46-phLJF_uW0uI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.128.0/19 Signature Algorithm: sha256WithRSAEncryption 65:fd:0f:72:09:08:58:17:8d:29:5a:c1:17:66:b8:0f:e6:38: ba:3e:33:1c:43:1b:06:79:73:c6:74:24:86:73:c1:67:06:f7: fb:d9:f1:14:99:25:5b:16:38:c2:8b:11:fa:df:85:1e:e4:02: be:e0:10:19:d2:0d:42:f6:a7:83:6f:0a:52:4c:50:b4:74:ac: f7:99:fc:df:f9:98:01:1a:c2:25:4a:11:e4:c2:3f:aa:a9:73: e2:b6:a0:eb:24:a2:82:2f:9d:ac:c9:8c:af:60:35:f7:a7:28: e7:ab:26:7d:2b:d0:bf:2a:ba:55:e9:86:97:bc:d3:cb:ac:2f: 16:97:f0:b1:36:bc:87:80:cb:64:6b:01:36:d0:d4:09:0f:a1: e0:e6:60:32:38:cb:69:24:d3:bf:d4:03:a7:3d:58:6b:a5:30: c0:fd:46:28:14:41:5c:3e:3e:2f:62:fb:ca:01:9d:b5:a1:58: 76:40:dd:3d:3c:4f:62:f4:77:f1:6e:89:d7:3e:75:01:75:75: e0:f4:42:56:a7:da:e1:2d:45:13:46:ec:fc:32:f2:67:4c:5a: 38:c6:7a:24:7b:fb:af:19:99:98:a7:25:b3:31:12:fb:36:9c: e8:a0:ca:2e:9e:4c:b2:0b:8f:93:83:06:8d:a7:87:fe:6a:87: c3:c0:f3:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBFMDlCMTYyOTg5RUI5 MzhDN0E3OEVCRUE2MTJDOTE3RkI5NkQyRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkZB3CktVXL3SuigIT8BAKsZnrMZGMDQutEigDhuj3fVWHAY2t 6u27uX8A2XVg4lpRxUpHYGKTG0Kd+JM1Q0+e6I9zFnr/lUJEIJrev/GIDxsl9iLu KXpd8uUSic1y1Z1yCNiOQYZAAcmVbfaTcIhXe87ZvsDTVeOtxJwn3AQTsJomKJt1 x4eOBWj4KwFnfKrg/yfycWi0cZas74yK0nwAzF/fnS6O9vRpnSFiYqzUW/xM2TB8 RSozyk/4e2acwbpM9VeFlT3TNj6L7949Bx3Gz6lCFVT1GLNU1q4IORVwzsYm0etf b96jJD+Cy7eIlCDRzGYyJ9afXoRX63WoDEhXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDgmxYpieuTjHp46+phLJF/uW0uIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RnbXhZcGlldVRqSHA0Ni1w aExKRl91VzB1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 woAwDQYJKoZIhvcNAQELBQADggEBAGX9D3IJCFgXjSlawRdmuA/mOLo+MxxDGwZ5 c8Z0JIZzwWcG9/vZ8RSZJVsWOMKLEfrfhR7kAr7gEBnSDUL2p4NvClJMULR0rPeZ /N/5mAEawiVKEeTCP6qpc+K2oOskooIvnazJjK9gNfenKOerJn0r0L8qulXphpe8 08usLxaX8LE2vIeAy2RrATbQ1AkPoeDmYDI4y2kk07/UA6c9WGulMMD9RigUQVw+ Pi9i+8oBnbWhWHZA3T08T2L0d/Fuidc+dQF1deD0Qlan2uEtRRNG7Pwy8mdMWjjG eiR7+68ZmZinJbMxEvs2nOigyi6eTLILj5ODBo2nh/5qh8PA8zk= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org