$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FGTIDWdKzBq5PzxeRdU3vbXD33s.roa File: FGTIDWdKzBq5PzxeRdU3vbXD33s.roa (raw, json) Hash identifier: +kxdjdCWPQk3tlGxwDfokPn6DD/0560ahQuTFBow8/g= Subject key identifier: 14:64:C8:0D:67:4A:CC:1A:B9:3F:3C:5E:45:D5:37:BD:B5:C3:DF:7B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 327D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FGTIDWdKzBq5PzxeRdU3vbXD33s.roa Signing time: Mon 26 Aug 2024 05:31:42 +0000 ROA not before: Mon 26 Aug 2024 05:31:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.64.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12925 (0x327d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1464C80D674ACC1AB93F3C5E45D537BDB5C3DF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:71:b8:49:2d:a5:a5:dc:5f:3b:31:bb:51: 1b:16:c4:1a:be:ab:c4:17:7f:ea:90:eb:04:45:31: 7f:64:a8:4c:81:7d:ce:71:f3:f7:9d:90:57:f0:97: d7:5f:e3:1b:e9:b9:9d:d4:20:09:99:0f:23:18:2e: 10:b7:43:f9:41:5c:b8:62:28:a2:06:18:5c:1b:c4: bb:fc:39:63:d4:9e:72:04:a1:4f:f1:e9:82:17:ac: d0:61:ed:ec:ce:aa:fb:d2:56:d4:0b:0f:e8:1f:f6: df:c7:79:02:8e:86:14:1b:fd:f8:46:a3:10:6a:a8: 32:8e:6e:0c:b1:32:e9:e9:0d:6a:c9:83:90:81:cb: 41:9e:5b:ac:c0:7e:05:18:8e:1f:b5:61:47:0d:75: 6d:08:e0:43:fc:12:24:d3:3e:5b:80:44:9e:70:74: 0c:b4:2b:0e:76:3f:e1:f3:77:ef:b8:4c:d3:dc:c6: a3:fd:10:3c:8b:95:bd:13:94:e2:00:89:69:9a:d3: 4c:dd:06:41:56:df:b1:4d:af:97:0d:66:43:36:30: 5c:c2:13:71:c8:0d:d7:3c:96:5e:b4:49:6a:64:ac: c5:73:7b:c7:68:53:b4:1f:17:1f:45:e0:8a:f2:8d: dd:60:17:a8:80:65:e3:ee:6a:0a:5a:bb:f1:42:02: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:64:C8:0D:67:4A:CC:1A:B9:3F:3C:5E:45:D5:37:BD:B5:C3:DF:7B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FGTIDWdKzBq5PzxeRdU3vbXD33s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.64.0/21 Signature Algorithm: sha256WithRSAEncryption ba:4d:4b:2c:c6:fc:e8:f3:75:f4:19:d5:de:ca:23:ef:e2:fb: 56:86:22:5e:4d:8f:7c:27:22:80:b2:6e:eb:1d:3e:f0:8e:32: e3:29:ff:64:40:56:2a:62:dd:cf:ef:49:f6:fb:27:6c:34:d6: f0:09:98:47:77:d3:ae:02:46:bd:f6:01:d5:fe:eb:f0:cb:1b: a0:f7:27:c6:76:3a:c8:12:8f:f8:08:a1:40:62:e4:7c:c2:99: e2:74:12:15:b7:f5:bf:a8:fe:77:e8:40:c1:b3:81:54:d3:bd: ec:a4:f8:67:1e:b8:d6:31:b2:3f:34:98:aa:7d:7e:2a:54:d0: 89:de:5e:ab:38:2f:f3:c4:4e:96:eb:d1:b1:14:a0:07:b6:6f: ae:67:1d:a2:21:03:a9:18:83:28:75:57:6b:2f:93:59:2b:2b: 94:e2:d9:f3:88:a1:85:6a:f6:2a:a5:3e:61:72:1a:0d:78:50: 5a:c0:1d:a8:62:38:83:71:5b:55:f7:be:67:d0:12:87:fa:d5: 85:4d:51:56:98:69:94:0c:4c:db:70:9c:df:f5:24:93:17:ca: 3d:d4:91:79:66:b9:77:da:ce:14:63:b9:6d:f5:ea:79:ec:1b: e8:d4:95:4f:e8:51:9e:53:e6:0f:58:25:01:a2:87:3c:47:f9: 1a:a8:c5:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0NjRDODBENjc0QUND MUFCOTNGM0M1RTQ1RDUzN0JEQjVDM0RGN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNIXG4SS2lpdxfOzG7URsWxBq+q8QXf+qQ6wRFMX9kqEyBfc5x 8/edkFfwl9df4xvpuZ3UIAmZDyMYLhC3Q/lBXLhiKKIGGFwbxLv8OWPUnnIEoU/x 6YIXrNBh7ezOqvvSVtQLD+gf9t/HeQKOhhQb/fhGoxBqqDKObgyxMunpDWrJg5CB y0GeW6zAfgUYjh+1YUcNdW0I4EP8EiTTPluARJ5wdAy0Kw52P+Hzd++4TNPcxqP9 EDyLlb0TlOIAiWma00zdBkFW37FNr5cNZkM2MFzCE3HIDdc8ll60SWpkrMVze8do U7QfFx9F4Iryjd1gF6iAZePuagpau/FCAgIRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFGTIDWdKzBq5PzxeRdU3vbXD33swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZHVElEV2RLekJxNVB6eGVS ZFUzdmJYRDMzcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6EAwDQYJKoZIhvcNAQELBQADggEBALpNSyzG/OjzdfQZ1d7KI+/i+1aGIl5Nj3wn IoCybusdPvCOMuMp/2RAVipi3c/vSfb7J2w01vAJmEd3064CRr32AdX+6/DLG6D3 J8Z2OsgSj/gIoUBi5HzCmeJ0EhW39b+o/nfoQMGzgVTTveyk+GceuNYxsj80mKp9 fipU0IneXqs4L/PETpbr0bEUoAe2b65nHaIhA6kYgyh1V2svk1krK5Ti2fOIoYVq 9iqlPmFyGg14UFrAHahiOINxW1X3vmfQEof61YVNUVaYaZQMTNtwnN/1JJMXyj3U kXlmuXfazhRjuW316nnsG+jUlU/oUZ5T5g9YJQGihzxH+Rqoxb8= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org