$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Et7kk4I0IE6p_JNBN4R5VShpYc8.roa File: Et7kk4I0IE6p_JNBN4R5VShpYc8.roa (raw, json) Hash identifier: RhEmLtNylyjaXUp+B0vbVIxdRHXlLHqU2Iy8Yd3Hu5g= Subject key identifier: 12:DE:E4:93:82:34:20:4E:A9:FC:93:41:37:84:79:55:28:69:61:CF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32E2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Et7kk4I0IE6p_JNBN4R5VShpYc8.roa Signing time: Mon 26 Aug 2024 05:32:06 +0000 ROA not before: Mon 26 Aug 2024 05:32:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 45.64.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13026 (0x32e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=12DEE4938234204EA9FC934137847955286961CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:0f:c9:f4:5d:2e:cf:d1:88:05:3b:9e:b1: ee:76:1c:a6:c9:3b:f5:96:43:1d:dd:d6:e6:28:3a: 25:a1:d9:91:87:16:f7:2e:ee:bf:6c:55:fe:62:35: f3:98:1f:ee:c6:3a:8e:e2:6e:47:1f:ce:1e:88:eb: c5:1b:d1:7e:16:7e:65:22:f7:54:d7:35:2f:5e:26: 76:e9:4d:f4:33:0a:10:dc:86:28:2b:10:a2:0d:91: e0:a4:ee:cc:96:a5:03:a5:9b:96:3b:43:d8:02:83: 19:62:e0:0b:29:48:78:bd:eb:73:46:c9:78:b0:08: ed:8c:15:22:44:2f:7a:36:81:bd:bd:73:66:13:6e: 85:ce:e5:22:6d:8b:36:a4:4f:70:26:59:4f:c2:9c: 1c:22:f0:24:43:5d:40:7f:38:a8:1b:b3:78:26:7b: 96:f9:a5:d4:b3:cc:89:2e:88:0a:2e:47:75:94:eb: 00:3d:f0:49:63:83:77:31:ca:9d:a6:91:fa:ab:6c: f7:6b:42:01:10:5f:9f:d7:67:0f:eb:54:1f:4c:f5: 1d:28:a9:06:ed:bd:2a:ad:f1:67:08:4c:6b:19:64: 3e:b4:5c:c5:b2:23:23:90:c0:f0:c7:cb:37:f9:0c: d9:f1:c6:6e:09:6f:58:63:9c:e7:60:ee:be:49:e4: f2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DE:E4:93:82:34:20:4E:A9:FC:93:41:37:84:79:55:28:69:61:CF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Et7kk4I0IE6p_JNBN4R5VShpYc8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.28.0/22 Signature Algorithm: sha256WithRSAEncryption 94:f7:90:f3:31:f4:28:22:21:c0:c2:c4:e4:ea:0b:78:04:ab: f7:c8:8b:f9:f4:39:30:94:6b:d3:92:6c:47:9d:e9:04:4d:12: d0:4a:a4:d4:26:c6:67:cb:33:d9:cf:14:44:69:fa:ed:a9:41: 35:6f:f5:ad:d0:8d:9d:d0:4a:87:77:6d:d1:23:58:3d:4f:0f: c5:69:03:bf:ea:ca:82:a1:37:5b:c7:0b:87:7f:10:27:75:4a: 92:45:68:bd:fb:a0:ca:64:13:62:b8:ba:49:18:0c:de:f6:a1: 68:c1:ad:bc:2e:b5:21:88:ef:6a:ea:74:98:c8:c8:e1:e3:c2: a6:24:da:d3:6a:f8:48:78:c4:a7:85:5f:a5:46:e0:be:0a:b8: d1:f4:30:11:00:35:77:b8:7f:ac:d1:08:c1:30:c4:9c:b0:cb: e7:d5:12:f0:69:17:b1:1a:9a:ba:cd:4d:ce:6f:1f:1e:d9:21: 71:6d:48:c4:40:c5:75:e1:18:a2:a9:25:a7:f9:e5:83:86:5d: 84:b0:d0:ab:11:6c:76:46:fd:e7:db:41:3f:70:6b:30:e7:90: 01:f2:e1:45:fd:86:c4:74:33:3a:86:b8:4b:1c:ef:0e:0e:be: 9f:5f:8a:a8:c4:1f:3b:c2:56:88:f1:86:dd:5a:04:6c:e9:19: b9:fc:32:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEyREVFNDkzODIzNDIw NEVBOUZDOTM0MTM3ODQ3OTU1Mjg2OTYxQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3Mw/J9F0uz9GIBTuese52HKbJO/WWQx3d1uYoOiWh2ZGHFvcu 7r9sVf5iNfOYH+7GOo7ibkcfzh6I68Ub0X4WfmUi91TXNS9eJnbpTfQzChDchigr EKINkeCk7syWpQOlm5Y7Q9gCgxli4AspSHi963NGyXiwCO2MFSJEL3o2gb29c2YT boXO5SJtizakT3AmWU/CnBwi8CRDXUB/OKgbs3gme5b5pdSzzIkuiAouR3WU6wA9 8Eljg3cxyp2mkfqrbPdrQgEQX5/XZw/rVB9M9R0oqQbtvSqt8WcITGsZZD60XMWy IyOQwPDHyzf5DNnxxm4Jb1hjnOdg7r5J5PIDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEt7kk4I0IE6p/JNBN4R5VShpYc8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0V0N2trNEkwSUU2cF9KTkJO NFI1VlNocFljOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt QBwwDQYJKoZIhvcNAQELBQADggEBAJT3kPMx9CgiIcDCxOTqC3gEq/fIi/n0OTCU a9OSbEed6QRNEtBKpNQmxmfLM9nPFERp+u2pQTVv9a3QjZ3QSod3bdEjWD1PD8Vp A7/qyoKhN1vHC4d/ECd1SpJFaL37oMpkE2K4ukkYDN72oWjBrbwutSGI72rqdJjI yOHjwqYk2tNq+Eh4xKeFX6VG4L4KuNH0MBEANXe4f6zRCMEwxJywy+fVEvBpF7Ea mrrNTc5vHx7ZIXFtSMRAxXXhGKKpJaf55YOGXYSw0KsRbHZG/efbQT9wazDnkAHy 4UX9hsR0MzqGuEsc7w4Ovp9fiqjEHzvCVojxht1aBGzpGbn8Mq4= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org