$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EMmBL34gu6Sgdwi725M0f15aawo.roa File: EMmBL34gu6Sgdwi725M0f15aawo.roa (raw, json) Hash identifier: g90zfWk298VjDijDP4bkUM5CtSKfy2gNMQYw6K7ej/U= Subject key identifier: 10:C9:81:2F:7E:20:BB:A4:A0:77:08:BB:DB:93:34:7F:5E:5A:6B:0A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3007 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EMmBL34gu6Sgdwi725M0f15aawo.roa Signing time: Mon 26 Aug 2024 05:29:04 +0000 ROA not before: Mon 26 Aug 2024 05:29:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.195.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12295 (0x3007) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=10C9812F7E20BBA4A07708BBDB93347F5E5A6B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:80:7a:7f:2b:9b:04:c4:de:46:4d:19:39: 2c:db:f9:e9:fc:f1:eb:e7:79:d6:21:01:32:f5:4c: 1a:73:0d:eb:dc:a1:90:2d:b2:17:38:b8:0f:9a:f0: 6f:30:e5:8a:85:4b:64:66:e0:75:45:f4:f2:e7:bf: 2d:b1:cd:b8:a4:0e:bc:80:88:ab:36:b5:91:a6:f4: 81:5a:8a:27:dc:16:8d:87:6d:0b:b0:76:e0:53:79: 52:e7:82:2a:77:88:8c:8b:b9:99:2d:62:a4:6b:40: 77:77:ce:29:76:c4:25:8e:dd:a6:d4:73:f6:29:44: 11:b6:93:e4:49:50:b9:75:f1:43:5b:7f:9e:81:9d: 62:dc:81:dd:22:2a:16:31:bf:c0:74:e4:61:6e:f9: 54:c5:58:38:c7:f8:b8:9d:ec:e9:7f:1b:b0:6e:df: 85:74:f4:33:98:14:3d:e2:fa:5e:1f:ea:f8:45:2c: b0:9d:b7:7c:b5:8a:96:8e:10:b3:d1:d8:94:ed:98: cb:c6:9f:14:e5:10:70:e8:7f:04:57:ff:49:29:d8: be:ae:68:8c:c9:a3:73:c8:17:5c:78:b5:a9:b8:75: 60:c4:7f:9b:10:f2:97:0c:48:03:00:18:6f:a3:6c: 76:ce:35:70:00:69:3d:7d:56:aa:82:fa:06:0f:42: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:81:2F:7E:20:BB:A4:A0:77:08:BB:DB:93:34:7F:5E:5A:6B:0A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EMmBL34gu6Sgdwi725M0f15aawo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:97:93:af:f8:11:73:0b:63:a9:ae:02:98:d5:ec:d5:56:41: 90:24:5b:e1:1f:41:f1:21:19:eb:87:5b:c4:6d:c7:33:bf:ef: a6:43:a8:a8:85:bd:93:6c:85:2b:76:f9:3a:35:31:b0:d5:8d: 93:da:a8:57:68:c1:cf:fd:8b:64:d0:c9:d4:2a:31:2d:04:d9: 28:4c:fd:58:84:53:e5:0a:bf:5f:cb:ff:2e:27:99:c7:e7:22: 01:e1:79:25:47:e2:e7:d1:6c:71:aa:6c:97:a4:a9:1f:3a:6d: 5a:89:19:4f:df:b5:23:33:b1:db:f1:f5:f2:b0:b7:6e:0c:a3: e6:ed:7f:76:69:59:6a:49:57:3a:c9:ab:5f:3e:df:c3:bf:77: 46:c6:51:a0:d1:bf:80:ae:39:73:a0:f2:3a:e6:33:32:1a:52: c9:94:2f:63:0f:b2:73:92:9c:59:91:0e:e6:de:15:29:a5:5f: f5:ee:78:61:c6:1f:11:77:6a:40:cd:69:8e:b3:b0:aa:c7:57: 6a:0b:91:dc:e5:c7:80:7a:92:01:e2:8d:b4:8a:d9:9f:d4:8c: 82:2c:d3:8b:73:f8:d0:f4:2a:3d:db:5d:4b:ab:ea:24:12:4d: 0b:65:08:bd:fd:ee:91:28:bf:6c:8f:d1:22:2c:bb:db:c5:9c: 7e:e8:06:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEwQzk4MTJGN0UyMEJC QTRBMDc3MDhCQkRCOTMzNDdGNUU1QTZCMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChnYB6fyubBMTeRk0ZOSzb+en88evnedYhATL1TBpzDevcoZAt shc4uA+a8G8w5YqFS2Rm4HVF9PLnvy2xzbikDryAiKs2tZGm9IFaiifcFo2HbQuw duBTeVLngip3iIyLuZktYqRrQHd3zil2xCWO3abUc/YpRBG2k+RJULl18UNbf56B nWLcgd0iKhYxv8B05GFu+VTFWDjH+Lid7Ol/G7Bu34V09DOYFD3i+l4f6vhFLLCd t3y1ipaOELPR2JTtmMvGnxTlEHDofwRX/0kp2L6uaIzJo3PIF1x4tam4dWDEf5sQ 8pcMSAMAGG+jbHbONXAAaT19VqqC+gYPQhkVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEMmBL34gu6Sgdwi725M0f15aawowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VNbUJMMzRndTZTZ2R3aTcy NU0wZjE1YWF3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+4wDQYJKoZIhvcNAQELBQADggEBAGuXk6/4EXMLY6muApjV7NVWQZAkW+EfQfEh GeuHW8RtxzO/76ZDqKiFvZNshSt2+To1MbDVjZPaqFdowc/9i2TQydQqMS0E2ShM /ViEU+UKv1/L/y4nmcfnIgHheSVH4ufRbHGqbJekqR86bVqJGU/ftSMzsdvx9fKw t24Mo+btf3ZpWWpJVzrJq18+38O/d0bGUaDRv4CuOXOg8jrmMzIaUsmUL2MPsnOS nFmRDubeFSmlX/XueGHGHxF3akDNaY6zsKrHV2oLkdzlx4B6kgHijbSK2Z/UjIIs 04tz+ND0Kj3bXUur6iQSTQtlCL397pEov2yP0SIsu9vFnH7oBmI= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:36 2024 by rpki-client on console-ams.rpki-client.org