$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FfbDzqcHNZAWwwyxMFaFJ_AGodU.roa File: FfbDzqcHNZAWwwyxMFaFJ_AGodU.roa (raw, json) Hash identifier: QobW4HhClD67OfV4MgZm4CqaXFKrWYc2Q5LApym7vws= Subject key identifier: 15:F6:C3:CE:A7:07:35:90:16:C3:0C:B1:30:56:85:27:F0:06:A1:D5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3300 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FfbDzqcHNZAWwwyxMFaFJ_AGodU.roa Signing time: Mon 26 Aug 2024 05:32:13 +0000 ROA not before: Mon 26 Aug 2024 05:32:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13056 (0x3300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=15F6C3CEA707359016C30CB130568527F006A1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:ae:5c:4a:94:f7:96:44:da:35:bb:f4:7e: bd:80:79:40:a7:12:a7:72:49:95:22:9a:cb:51:4c: d6:72:4a:75:58:d3:53:32:43:f9:7e:e6:0c:20:aa: ba:13:22:6b:12:c2:28:59:a4:9a:96:b6:be:08:af: 09:1e:10:cf:e3:6d:0b:60:45:16:71:8d:db:a7:24: 4a:51:63:46:57:9a:7a:97:6e:12:56:4c:97:59:6b: af:2e:40:5e:06:b2:3e:f0:20:4f:d6:89:89:55:72: 42:f2:0c:76:f7:b3:f0:c3:f5:0c:94:06:6e:7a:0f: f4:c9:1d:1b:17:cc:48:5b:12:a3:3d:7c:21:6e:77: 76:f5:a8:44:00:fd:99:c4:eb:a5:9a:24:eb:5b:01: 53:2e:59:a6:f7:4a:81:a9:52:d5:39:83:a1:88:fe: e5:73:9f:04:3e:50:68:e6:7c:5f:f0:a9:1d:39:7d: 92:0d:b4:d7:af:b6:e8:2c:87:e6:f5:fd:e8:e5:3f: b8:f4:7e:86:95:dc:1f:86:09:d0:84:0f:35:75:8d: 8c:74:84:7f:e9:6d:68:0a:9d:e7:dc:3f:37:4d:01: f1:da:64:76:e4:11:b5:20:50:d1:de:bc:a9:98:4a: 16:79:82:8f:81:9b:98:93:4e:48:15:4a:6f:0d:e6: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F6:C3:CE:A7:07:35:90:16:C3:0C:B1:30:56:85:27:F0:06:A1:D5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FfbDzqcHNZAWwwyxMFaFJ_AGodU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.196.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:58:7c:4b:e8:e8:ea:c0:2c:64:81:de:e0:8b:db:00:fe:b6: a3:6c:7b:d6:44:29:3b:0f:ff:f2:bd:83:f5:75:f5:14:cf:55: 80:69:ef:1a:10:46:5e:71:1e:c9:48:bf:40:c1:fb:08:1d:1a: 39:d2:7b:2f:d9:85:06:14:27:8b:a6:c4:17:44:e1:bd:e1:bf: 5d:c6:39:9a:10:29:b8:a6:37:57:39:23:7c:bc:3d:27:3a:1d: da:37:58:15:b6:ac:c7:c1:1c:16:ba:ae:39:9a:f4:3a:7f:0a: 2b:d1:fa:64:35:39:a8:b5:83:11:c1:86:d0:7b:38:48:66:94: be:86:fd:8d:f2:66:b2:9a:ee:d5:a7:3c:63:ca:56:e3:db:e5: 3a:96:28:4d:1a:f0:50:6e:bd:f1:9f:f5:d8:e1:df:8e:fd:04: 76:27:a8:e9:f8:3d:3f:32:f9:25:0b:b1:8e:9c:32:93:d0:f6: 22:d6:03:32:eb:e6:07:30:a8:d1:ff:e1:3e:f8:9b:2b:8e:87: b8:85:00:48:f8:ed:5d:78:74:7c:3d:f4:46:b3:02:d4:f8:4f: ca:51:cb:fb:e8:1e:02:04:d5:f2:20:48:a4:81:5a:1b:7a:d6: 98:fb:2c:e0:37:40:54:aa:d9:bd:e2:15:8d:e9:6c:2b:cb:82: 42:a5:36:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE1RjZDM0NFQTcwNzM1 OTAxNkMzMENCMTMwNTY4NTI3RjAwNkExRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaSK5cSpT3lkTaNbv0fr2AeUCnEqdySZUimstRTNZySnVY01My Q/l+5gwgqroTImsSwihZpJqWtr4IrwkeEM/jbQtgRRZxjdunJEpRY0ZXmnqXbhJW TJdZa68uQF4Gsj7wIE/WiYlVckLyDHb3s/DD9QyUBm56D/TJHRsXzEhbEqM9fCFu d3b1qEQA/ZnE66WaJOtbAVMuWab3SoGpUtU5g6GI/uVznwQ+UGjmfF/wqR05fZIN tNevtugsh+b1/ejlP7j0foaV3B+GCdCEDzV1jYx0hH/pbWgKnefcPzdNAfHaZHbk EbUgUNHevKmYShZ5go+Bm5iTTkgVSm8N5tGjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFfbDzqcHNZAWwwyxMFaFJ/AGodUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZmYkR6cWNITlpBV3d3eXhN RmFGSl9BR29kVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w8QwDQYJKoZIhvcNAQELBQADggEBACtYfEvo6OrALGSB3uCL2wD+tqNse9ZEKTsP //K9g/V19RTPVYBp7xoQRl5xHslIv0DB+wgdGjnSey/ZhQYUJ4umxBdE4b3hv13G OZoQKbimN1c5I3y8PSc6Hdo3WBW2rMfBHBa6rjma9Dp/CivR+mQ1Oai1gxHBhtB7 OEhmlL6G/Y3yZrKa7tWnPGPKVuPb5TqWKE0a8FBuvfGf9djh3479BHYnqOn4PT8y +SULsY6cMpPQ9iLWAzLr5gcwqNH/4T74myuOh7iFAEj47V14dHw99EazAtT4T8pR y/voHgIE1fIgSKSBWht61pj7LOA3QFSq2b3iFY3pbCvLgkKlNkw= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org