$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa File: Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa (raw, json) Hash identifier: oDXQLReku+f96xZbSvOK5BYEuTINHuXInjiVoiHGzBw= Subject key identifier: 11:E8:7C:C9:EA:80:2D:69:59:28:48:7C:A6:45:1F:8F:C6:FC:36:F8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3069 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa Signing time: Mon 26 Aug 2024 05:29:25 +0000 ROA not before: Mon 26 Aug 2024 05:29:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12393 (0x3069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=11E87CC9EA802D695928487CA6451F8FC6FC36F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:9f:81:15:3b:6d:e1:0f:2c:6c:ee:a7:39: c0:6b:82:f1:79:f1:04:7e:97:f4:36:59:c6:68:e7: 38:12:15:92:48:c1:67:6a:4e:05:e5:5d:4c:2d:e8: 01:76:a9:03:ab:8d:08:25:57:cb:d7:73:78:60:e6: ff:a7:6f:17:27:7e:26:42:05:27:a2:31:36:23:21: 0e:5c:8d:a5:63:5c:1a:ad:2e:f3:25:12:01:cc:8d: b8:f0:51:a1:06:89:85:8e:a8:7b:21:e6:58:f3:8e: 02:c5:5c:9b:79:cc:c6:61:11:27:3b:2f:0f:6e:71: be:84:db:5d:de:06:6d:54:b6:d7:5b:30:c9:64:44: 81:4c:99:31:75:42:c2:e2:07:8a:4e:ac:11:93:7b: b8:1b:3d:1e:62:20:1c:03:56:1b:aa:48:1f:9d:29: be:cb:bb:43:0f:41:f9:c3:0f:ae:1a:cf:1e:49:6e: 0b:00:8a:f5:6c:c2:4d:1e:f5:24:53:85:ec:81:50: 96:d9:f7:f2:90:f5:6f:68:c4:3a:ff:e6:df:58:a4: e2:67:c2:19:3e:ef:3a:9d:11:16:94:b5:ae:7d:da: 9c:84:98:eb:9b:d0:bc:33:3c:94:1c:bb:34:38:ff: 94:9e:27:fc:52:54:36:5e:0d:b1:11:9f:d1:72:65: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E8:7C:C9:EA:80:2D:69:59:28:48:7C:A6:45:1F:8F:C6:FC:36:F8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eeh8yeqALWlZKEh8pkUfj8b8Nvg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.168.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:df:d0:88:cf:9a:8d:ea:9f:a1:c8:2b:25:b8:9a:b9:53:78: b4:ec:65:c8:7b:98:c2:fe:63:41:3b:0f:f4:a0:3e:85:55:52: 1f:c4:81:82:d1:b5:71:18:61:2a:61:96:71:a2:0b:17:5f:fe: a1:24:67:34:36:bd:95:42:22:91:9d:44:02:44:0e:05:0c:2d: 88:77:66:34:ab:86:a9:50:fa:c7:cb:08:86:1e:e0:aa:b3:9a: 72:50:4c:06:c9:80:e2:35:7e:b9:6f:46:98:48:72:3b:1b:9e: ad:c8:c3:27:e7:72:28:83:b6:0c:08:8c:33:90:04:31:41:c0: d1:89:f8:e4:d6:78:e1:e3:21:53:2c:d5:e5:1a:44:c0:52:88: 02:a5:e7:f8:71:03:0d:68:8b:a4:f7:9e:ad:1f:5a:a3:eb:9b: 2a:c4:9b:8d:75:75:8b:bf:c1:6a:78:d2:67:ff:20:a5:9e:79: bc:36:36:6f:48:39:32:13:44:34:3e:c7:a1:b9:c8:ac:1b:6f: c3:c8:0a:2f:99:ff:a2:52:23:71:6d:51:68:61:41:53:cb:c1: 47:1f:6a:57:ff:9a:8e:53:af:98:27:3c:a7:bb:9f:5c:e8:af: 0b:cc:2f:50:36:4b:99:75:8c:e2:03:e9:87:15:4c:a7:91:9d: eb:e7:c0:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDExRTg3Q0M5RUE4MDJE Njk1OTI4NDg3Q0E2NDUxRjhGQzZGQzM2RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaz5+BFTtt4Q8sbO6nOcBrgvF58QR+l/Q2WcZo5zgSFZJIwWdq TgXlXUwt6AF2qQOrjQglV8vXc3hg5v+nbxcnfiZCBSeiMTYjIQ5cjaVjXBqtLvMl EgHMjbjwUaEGiYWOqHsh5ljzjgLFXJt5zMZhESc7Lw9ucb6E213eBm1UttdbMMlk RIFMmTF1QsLiB4pOrBGTe7gbPR5iIBwDVhuqSB+dKb7Lu0MPQfnDD64azx5JbgsA ivVswk0e9SRTheyBUJbZ9/KQ9W9oxDr/5t9YpOJnwhk+7zqdERaUta592pyEmOub 0LwzPJQcuzQ4/5SeJ/xSVDZeDbERn9FyZW1dAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEeh8yeqALWlZKEh8pkUfj8b8NvgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VlaDh5ZXFBTFdsWktFaDhw a1VmajhiOE52Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wqgwDQYJKoZIhvcNAQELBQADggEBAE3f0IjPmo3qn6HIKyW4mrlTeLTsZch7mML+ Y0E7D/SgPoVVUh/EgYLRtXEYYSphlnGiCxdf/qEkZzQ2vZVCIpGdRAJEDgUMLYh3 ZjSrhqlQ+sfLCIYe4KqzmnJQTAbJgOI1frlvRphIcjsbnq3IwyfnciiDtgwIjDOQ BDFBwNGJ+OTWeOHjIVMs1eUaRMBSiAKl5/hxAw1oi6T3nq0fWqPrmyrEm411dYu/ wWp40mf/IKWeebw2Nm9IOTITRDQ+x6G5yKwbb8PICi+Z/6JSI3FtUWhhQVPLwUcf alf/mo5Tr5gnPKe7n1zorwvML1A2S5l1jOID6YcVTKeRnevnwG8= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org