$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa File: FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa (raw, json) Hash identifier: mNw9YntkTtmSLOplP1nBkxXweiOfY9YW3oYwMpw+Zzc= Subject key identifier: 14:6F:43:D3:A0:9B:5E:04:72:7C:5C:C8:7C:B6:4E:1A:6B:83:76:54 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3263 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa Signing time: Mon 26 Aug 2024 05:31:37 +0000 ROA not before: Mon 26 Aug 2024 05:31:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12899 (0x3263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=146F43D3A09B5E04727C5CC87CB64E1A6B837654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:64:cc:db:b7:ff:7f:99:77:77:b5:d0:55: ba:89:22:9b:f7:98:76:11:85:b9:3c:74:ab:5e:25: 56:19:a2:88:b6:52:b9:6e:31:52:51:0a:f3:20:28: 39:cb:33:ae:e6:27:15:3e:e9:a7:20:4d:74:05:92: 28:9a:c5:e4:14:c2:9e:02:df:3c:5d:6d:d7:57:53: 09:ad:4d:eb:3f:15:f0:76:d6:41:67:12:23:c0:93: 4d:7b:71:c4:9e:18:14:55:69:c6:2c:b7:25:5e:68: 28:80:95:58:f0:e7:d1:77:eb:02:49:77:7a:db:83: 3d:3d:eb:5e:6c:5a:88:8c:6f:6e:af:5f:06:3b:08: 7d:8d:bb:67:dc:8c:5f:e1:e4:88:91:d9:c9:14:fd: 51:5d:d0:cd:83:37:34:ce:66:03:6f:8e:1e:65:ac: eb:e8:ce:80:73:0d:84:7e:84:de:2c:d2:de:b1:9f: 34:a5:19:18:96:8e:a7:ab:0c:14:69:20:82:53:7c: 42:5b:8c:1a:ae:e3:cc:9a:41:ae:ce:70:03:57:df: 6d:79:8d:13:d2:7b:9d:8f:cf:dd:a5:96:36:c6:1f: 6d:b0:f4:b2:ee:80:84:74:9f:3b:12:de:01:5e:29: 82:47:07:b5:03:a1:7f:9d:5e:bc:02:00:8d:48:b4: 04:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6F:43:D3:A0:9B:5E:04:72:7C:5C:C8:7C:B6:4E:1A:6B:83:76:54 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FG9D06CbXgRyfFzIfLZOGmuDdlQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.214.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:39:a5:31:a9:90:16:3f:ac:4e:12:93:5c:67:2c:fc:8d:23: 1c:7f:8a:a9:f3:95:73:28:21:63:b5:c5:3b:f4:44:f0:58:ff: e0:e4:7f:aa:58:b3:00:37:03:fc:85:8c:74:41:40:d7:0e:fd: 6a:47:43:72:dc:f1:76:3c:fa:ae:d6:8f:c9:ad:23:a4:bb:2b: 0b:0c:b3:92:18:1a:7e:4b:69:8b:66:9d:39:51:8d:52:6f:9c: a5:20:54:fc:78:3e:18:51:e9:68:f5:68:ec:a2:73:8e:d1:2d: 87:91:77:02:69:11:1c:4e:f1:c8:60:92:6e:c9:fd:32:15:8f: f0:91:da:05:09:4c:01:2a:29:25:cb:aa:fa:ae:05:41:96:8f: 7a:10:c8:af:4b:e9:15:9b:2d:f9:27:01:36:95:d8:c4:01:fe: ac:5a:b0:ec:d6:93:1d:39:36:cf:90:e2:87:6e:b0:8e:d4:d1: b9:8c:59:9c:eb:cf:c1:ce:9c:93:1d:c9:38:4d:d8:16:18:6f: 6e:52:93:e8:7d:83:ab:35:f7:d1:35:c5:f8:00:24:28:b1:4e: 6d:dc:d0:fc:e5:d8:51:ca:47:bc:38:39:0f:80:2f:f9:b6:a5: c1:07:c7:cd:7a:12:bd:75:f1:f8:e0:35:1a:12:10:16:70:e1: dd:55:f7:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0NkY0M0QzQTA5QjVF MDQ3MjdDNUNDODdDQjY0RTFBNkI4Mzc2NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA2WTM27f/f5l3d7XQVbqJIpv3mHYRhbk8dKteJVYZooi2Urlu MVJRCvMgKDnLM67mJxU+6acgTXQFkiiaxeQUwp4C3zxdbddXUwmtTes/FfB21kFn EiPAk017ccSeGBRVacYstyVeaCiAlVjw59F36wJJd3rbgz09615sWoiMb26vXwY7 CH2Nu2fcjF/h5IiR2ckU/VFd0M2DNzTOZgNvjh5lrOvozoBzDYR+hN4s0t6xnzSl GRiWjqerDBRpIIJTfEJbjBqu48yaQa7OcANX3215jRPSe52Pz92lljbGH22w9LLu gIR0nzsS3gFeKYJHB7UDoX+dXrwCAI1ItATdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFG9D06CbXgRyfFzIfLZOGmuDdlQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZHOUQwNkNiWGdSeWZGeklm TFpPR211RGRsUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AdYwDQYJKoZIhvcNAQELBQADggEBAA85pTGpkBY/rE4Sk1xnLPyNIxx/iqnzlXMo IWO1xTv0RPBY/+Dkf6pYswA3A/yFjHRBQNcO/WpHQ3Lc8XY8+q7Wj8mtI6S7KwsM s5IYGn5LaYtmnTlRjVJvnKUgVPx4PhhR6Wj1aOyic47RLYeRdwJpERxO8chgkm7J /TIVj/CR2gUJTAEqKSXLqvquBUGWj3oQyK9L6RWbLfknATaV2MQB/qxasOzWkx05 Ns+Q4odusI7U0bmMWZzrz8HOnJMdyThN2BYYb25Sk+h9g6s199E1xfgAJCixTm3c 0Pzl2FHKR7w4OQ+AL/m2pcEHx816Er118fjgNRoSEBZw4d1V9+s= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:38 2024 by rpki-client on console-fra.rpki-client.org