$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DjdlcGxT86YLORhi8M3RmzOhOaA.roa File: DjdlcGxT86YLORhi8M3RmzOhOaA.roa (raw, json) Hash identifier: u66SgsaSjL7VYhfHaQB8CyYVqMVfZY17RPCItgIgCTo= Subject key identifier: 0E:37:65:70:6C:53:F3:A6:0B:39:18:62:F0:CD:D1:9B:33:A1:39:A0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32CB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DjdlcGxT86YLORhi8M3RmzOhOaA.roa Signing time: Mon 26 Aug 2024 05:32:01 +0000 ROA not before: Mon 26 Aug 2024 05:32:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.236.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13003 (0x32cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0E3765706C53F3A60B391862F0CDD19B33A139A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:4d:fd:4e:ab:9e:8d:a0:64:58:83:c6:2a: 2e:0e:43:55:9f:1c:41:53:82:af:e3:ca:09:a7:d2: f1:d5:a8:b8:43:cb:71:4a:06:6c:87:71:49:9f:48: 91:da:c3:0a:8c:31:b1:26:b6:bf:74:82:35:0a:6c: c0:55:71:60:30:07:f9:14:ba:ac:ab:94:60:90:b7: 96:b8:c1:63:43:9e:ef:20:f0:06:45:4b:3a:06:da: 16:9a:9d:2e:fe:be:c7:41:61:e4:7c:3f:66:f3:cb: 5f:56:70:0a:b8:58:28:36:35:c3:dc:21:53:4e:78: eb:cd:08:0c:3b:a9:94:67:bd:45:12:46:49:65:b8: 6f:76:a7:c8:82:a0:40:96:d1:9f:66:79:ee:83:ac: 12:b6:d6:76:24:ce:40:57:0a:c2:d9:16:b0:f9:b9: a1:4d:78:02:57:2b:7a:41:27:45:c5:f5:b2:3f:09: a8:38:71:49:39:e0:07:53:6e:87:6b:aa:ae:cd:43: a2:7b:b2:4d:7f:00:2a:36:17:ca:b0:49:e1:af:84: ad:b4:cf:df:8a:1a:93:4b:86:1d:5a:f5:fa:b5:a1: 49:6c:f5:63:70:7e:94:37:d5:16:01:8b:1b:12:90: 72:28:32:8e:32:bf:63:90:cf:a4:44:72:b1:65:ac: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:65:70:6C:53:F3:A6:0B:39:18:62:F0:CD:D1:9B:33:A1:39:A0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DjdlcGxT86YLORhi8M3RmzOhOaA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.236.0/25 Signature Algorithm: sha256WithRSAEncryption 62:e9:41:41:2b:d0:70:9b:d4:f7:52:fc:de:80:71:b3:a7:ea: 7b:f4:68:ce:4d:e0:ca:9a:a5:26:3d:40:a4:b2:7b:50:38:79: 05:d9:aa:bf:95:33:fa:8a:9b:b9:d8:6a:ab:22:e2:ff:4b:25: 2f:49:45:18:22:48:0c:82:e2:97:25:cd:69:76:94:23:3f:5c: 9d:83:c5:ce:3a:36:61:b8:5b:31:ea:1a:fb:71:a9:79:b6:23: 2d:80:94:cf:d8:e1:62:81:00:ad:93:ab:99:5e:2b:83:79:64: 9e:e7:91:b9:3e:42:58:99:06:4a:44:67:77:3c:73:57:81:c4: 2b:e3:28:26:98:de:ec:b7:5b:56:46:4b:05:cd:19:1c:26:3d: b6:76:22:f3:0c:09:78:27:41:ba:5c:a2:72:8d:17:74:b4:f4: 86:4c:f5:29:cb:33:4b:ee:6f:bd:c2:ab:ed:5c:39:9d:82:e3: e8:c0:60:47:a3:4f:c1:32:61:7a:70:1a:e4:97:b7:34:42:5d: 99:5c:d4:c5:08:e2:b9:ea:3b:57:26:a7:f6:79:42:6a:d7:78: 28:3a:25:06:39:9e:88:2c:11:7e:5d:25:d7:13:b6:d1:4b:fc: bf:09:fd:6e:2c:b0:7c:8f:67:5f:e7:b4:63:f1:3d:62:7e:15: e9:3a:9b:18 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBFMzc2NTcwNkM1M0Yz QTYwQjM5MTg2MkYwQ0REMTlCMzNBMTM5QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQRE39TquejaBkWIPGKi4OQ1WfHEFTgq/jygmn0vHVqLhDy3FK BmyHcUmfSJHawwqMMbEmtr90gjUKbMBVcWAwB/kUuqyrlGCQt5a4wWNDnu8g8AZF SzoG2haanS7+vsdBYeR8P2bzy19WcAq4WCg2NcPcIVNOeOvNCAw7qZRnvUUSRkll uG92p8iCoECW0Z9mee6DrBK21nYkzkBXCsLZFrD5uaFNeAJXK3pBJ0XF9bI/Cag4 cUk54AdTbodrqq7NQ6J7sk1/ACo2F8qwSeGvhK20z9+KGpNLhh1a9fq1oUls9WNw fpQ31RYBixsSkHIoMo4yv2OQz6REcrFlrKTHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUDjdlcGxT86YLORhi8M3RmzOhOaAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RqZGxjR3hUODZZTE9SaGk4 TTNSbXpPaE9hQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+wAMA0GCSqGSIb3DQEBCwUAA4IBAQBi6UFBK9Bwm9T3UvzegHGzp+p79GjOTeDK mqUmPUCksntQOHkF2aq/lTP6ipu52GqrIuL/SyUvSUUYIkgMguKXJc1pdpQjP1yd g8XOOjZhuFsx6hr7cal5tiMtgJTP2OFigQCtk6uZXiuDeWSe55G5PkJYmQZKRGd3 PHNXgcQr4ygmmN7st1tWRksFzRkcJj22diLzDAl4J0G6XKJyjRd0tPSGTPUpyzNL 7m+9wqvtXDmdguPowGBHo0/BMmF6cBrkl7c0Ql2ZXNTFCOK56jtXJqf2eUJq13go OiUGOZ6ILBF+XSXXE7bRS/y/Cf1uLLB8j2df57Rj8T1ifhXpOpsY -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org