$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa File: G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa (raw, json) Hash identifier: /O4UEj2Vwerc9a8/LecrVLiWYM3t39cXXkoeFQVoznc= Subject key identifier: 1B:BB:C5:BC:9E:63:13:BE:2D:90:E8:DB:65:B7:0B:09:E5:56:70:65 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31B1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa Signing time: Mon 26 Aug 2024 05:30:50 +0000 ROA not before: Mon 26 Aug 2024 05:30:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12721 (0x31b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1BBBC5BC9E6313BE2D90E8DB65B70B09E5567065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:d4:7e:9b:91:bf:01:07:fe:bc:d5:73:f1: 83:2e:74:cc:82:c0:90:b8:12:59:88:bc:09:b7:4a: 19:f3:72:5c:10:f0:7e:36:25:e0:24:7e:6d:19:5b: be:ff:52:a5:56:0b:45:46:13:38:da:54:00:ad:d5: b4:f8:4d:25:48:fd:51:48:44:22:37:08:c7:bd:97: a7:09:2f:85:20:80:46:d6:22:3d:46:44:b2:34:05: da:35:7d:4d:45:50:50:4e:cb:44:e9:6e:ca:40:40: 53:08:4e:aa:19:b8:73:57:6c:c7:c9:0e:01:83:be: ca:c8:b6:3d:b6:f4:d3:52:b0:58:b9:d2:3c:be:34: 54:32:5d:a7:49:2b:26:d0:2d:c0:cd:ae:17:86:3c: fc:34:0e:2e:0a:e1:7a:fd:d4:b1:52:b5:72:a4:b7: 72:86:a7:54:db:4c:50:64:e8:04:2b:07:ee:b0:85: dc:31:18:02:94:2b:88:ac:ed:cd:52:36:60:fe:a7: 97:b5:5f:04:e1:18:be:48:30:79:8a:f4:0e:a8:6d: 93:96:2f:70:57:bb:05:d0:fa:dd:b3:90:e7:fc:b5: 7d:c0:e6:78:66:da:6c:99:f3:b3:1e:8b:db:8c:76: ef:e6:9b:0b:e5:21:73:7b:75:02:b1:db:ac:10:f9: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BB:C5:BC:9E:63:13:BE:2D:90:E8:DB:65:B7:0B:09:E5:56:70:65 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7vFvJ5jE74tkOjbZbcLCeVWcGU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.232.0/23 Signature Algorithm: sha256WithRSAEncryption 25:ca:c4:2c:1a:99:fa:15:f8:a5:81:82:61:0e:2f:95:f8:b5: 69:17:35:da:0a:42:b9:89:6e:57:ea:c0:ff:71:44:9f:6d:4c: b1:c8:9f:ca:3e:44:18:57:c4:5d:62:5c:24:0d:62:ad:4f:b2: 94:c4:27:54:99:84:45:5a:95:8f:21:5a:c7:ae:56:95:0a:8e: 7c:16:b6:66:2f:e7:ba:47:0b:2a:9d:a8:c1:d8:84:95:cd:49: 7c:e8:75:27:85:79:88:91:20:29:bc:41:35:87:22:2d:30:54: a8:78:20:25:b4:0c:fb:6a:66:e2:e7:86:bc:64:c0:02:6b:5c: ae:9c:ad:93:d9:cf:14:7d:e3:02:04:6e:62:c4:53:bd:e1:ac: 49:2e:47:1c:a3:b8:22:0e:d0:57:a3:8e:ee:19:e2:7c:0c:f0: c4:9f:78:9c:2a:80:5e:2b:1a:ea:7f:04:a1:65:78:83:d0:38: 4d:c1:08:b9:1d:6e:d3:58:e5:76:b5:b5:18:f3:b2:f2:50:bf: 1c:f7:12:83:e7:e7:56:a9:bd:b6:e8:a0:d9:03:98:89:53:3f: b3:03:b3:fc:54:4b:b2:82:d5:3c:c0:9a:ec:03:e0:44:ab:b2: ef:b4:04:48:ca:17:ff:53:7a:84:f3:a8:56:73:83:01:a4:28: 13:84:f9:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCQkJDNUJDOUU2MzEz QkUyRDkwRThEQjY1QjcwQjA5RTU1NjcwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqpdR+m5G/AQf+vNVz8YMudMyCwJC4ElmIvAm3ShnzclwQ8H42 JeAkfm0ZW77/UqVWC0VGEzjaVACt1bT4TSVI/VFIRCI3CMe9l6cJL4UggEbWIj1G RLI0Bdo1fU1FUFBOy0TpbspAQFMITqoZuHNXbMfJDgGDvsrItj229NNSsFi50jy+ NFQyXadJKybQLcDNrheGPPw0Di4K4Xr91LFStXKkt3KGp1TbTFBk6AQrB+6whdwx GAKUK4is7c1SNmD+p5e1XwThGL5IMHmK9A6obZOWL3BXuwXQ+t2zkOf8tX3A5nhm 2myZ87Mei9uMdu/mmwvlIXN7dQKx26wQ+W/vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUG7vFvJ5jE74tkOjbZbcLCeVWcGUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0c3dkZ2SjVqRTc0dGtPamJa YmNMQ2VWV2NHVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6egwDQYJKoZIhvcNAQELBQADggEBACXKxCwamfoV+KWBgmEOL5X4tWkXNdoKQrmJ blfqwP9xRJ9tTLHIn8o+RBhXxF1iXCQNYq1PspTEJ1SZhEValY8hWseuVpUKjnwW tmYv57pHCyqdqMHYhJXNSXzodSeFeYiRICm8QTWHIi0wVKh4ICW0DPtqZuLnhrxk wAJrXK6crZPZzxR94wIEbmLEU73hrEkuRxyjuCIO0Fejju4Z4nwM8MSfeJwqgF4r Gup/BKFleIPQOE3BCLkdbtNY5Xa1tRjzsvJQvxz3EoPn51apvbbooNkDmIlTP7MD s/xUS7KC1TzAmuwD4ESrsu+0BEjKF/9TeoTzqFZzgwGkKBOE+XE= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org