$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GpaofYGJDqDM1Ioj1rrlPeGeX9A.roa File: GpaofYGJDqDM1Ioj1rrlPeGeX9A.roa (raw, json) Hash identifier: MJD+3JfrOrjzXdh2jTlIv7xsf6qf2G62SIwl7g1/ziU= Subject key identifier: 1A:96:A8:7D:81:89:0E:A0:CC:D4:8A:23:D6:BA:E5:3D:E1:9E:5F:D0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 313E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GpaofYGJDqDM1Ioj1rrlPeGeX9A.roa Signing time: Mon 26 Aug 2024 05:30:15 +0000 ROA not before: Mon 26 Aug 2024 05:30:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12606 (0x313e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1A96A87D81890EA0CCD48A23D6BAE53DE19E5FD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:db:b9:70:e5:f6:66:da:02:06:f2:f6:af: 11:5b:6b:50:ba:bb:cd:92:f1:96:ba:98:43:0d:a6: 6b:0a:5c:34:1a:1b:38:4b:29:d7:17:85:9e:aa:05: 35:6f:b3:70:c4:26:90:de:83:d9:d8:fc:18:c4:fd: 04:83:67:93:fa:47:19:ba:6e:c6:48:14:74:52:d4: 6c:bc:b0:09:fe:01:98:0e:a2:60:0b:22:75:38:b4: 72:a3:66:10:a2:3f:b0:31:67:67:25:44:f4:21:16: f5:b4:ee:82:fc:15:ce:f3:ba:4a:c9:b6:73:0d:bd: 50:d9:4c:cd:32:ef:fd:bc:c9:76:10:b1:b8:dc:3b: e8:4c:be:8b:e0:da:a7:7f:4a:07:1f:1d:e6:95:9a: 4c:16:e1:41:68:94:66:74:13:0e:69:d8:9e:09:34: 67:33:1a:31:ae:d7:7a:d7:5c:6d:d9:eb:27:cc:0d: f1:41:a3:c5:bf:ec:af:57:2e:8e:2e:9f:86:ef:87: d1:95:e3:b9:28:99:69:20:7b:1e:04:0f:1b:24:89: 71:5a:68:c2:3d:d4:ec:02:0b:52:3c:94:9e:ef:e6: 78:79:a0:48:99:1f:0a:6b:f7:c0:7d:2b:9e:26:09: 83:bf:ab:95:96:cc:8b:56:b8:b8:4a:6a:59:cb:ca: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:A8:7D:81:89:0E:A0:CC:D4:8A:23:D6:BA:E5:3D:E1:9E:5F:D0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GpaofYGJDqDM1Ioj1rrlPeGeX9A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.56.0/21 Signature Algorithm: sha256WithRSAEncryption 53:3b:77:b9:90:42:c5:11:4e:55:42:09:29:07:b4:28:67:24: ca:fb:02:de:37:20:14:ba:2d:79:ee:2d:f7:7c:df:89:f8:df: fc:b2:72:18:ce:c7:61:fa:87:cd:ba:ec:f8:71:7d:c9:c1:27: d9:91:90:bd:fa:8d:73:df:43:16:00:8c:9c:c4:16:c0:58:78: 1f:86:b4:72:d1:b0:22:27:3d:9a:26:ca:f5:f8:b0:34:08:d1: 97:f9:1a:27:f3:44:c7:fc:3e:6b:74:3f:da:dc:d4:59:8a:74: 17:14:92:a5:83:ee:8d:e5:84:4e:9c:11:09:55:e4:72:ce:d0: 57:be:cb:24:1e:2f:b7:cf:7c:7d:36:c0:26:e8:5b:f9:eb:78: a4:18:d7:01:cd:ec:0a:0e:ed:14:e6:40:3c:cf:e4:53:35:a6: 2f:22:bf:fc:c3:38:8c:bb:4d:43:d8:82:79:5b:2d:0a:c2:c3: 06:7c:95:85:a4:9c:f9:62:d7:a0:66:f8:28:0b:d7:d5:b4:17: 75:93:67:f7:06:3b:3f:88:b6:49:f5:5e:3d:22:9f:61:a0:a5: 05:a8:28:c4:53:cf:c0:b2:07:f2:48:c5:cd:14:a0:90:c9:14: 24:84:0f:23:a7:58:48:9b:39:e9:14:ef:3b:4e:84:79:d7:b3: ff:56:03:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBOTZBODdEODE4OTBF QTBDQ0Q0OEEyM0Q2QkFFNTNERTE5RTVGRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY/Nu5cOX2ZtoCBvL2rxFba1C6u82S8Za6mEMNpmsKXDQaGzhL KdcXhZ6qBTVvs3DEJpDeg9nY/BjE/QSDZ5P6Rxm6bsZIFHRS1Gy8sAn+AZgOomAL InU4tHKjZhCiP7AxZ2clRPQhFvW07oL8Fc7zukrJtnMNvVDZTM0y7/28yXYQsbjc O+hMvovg2qd/SgcfHeaVmkwW4UFolGZ0Ew5p2J4JNGczGjGu13rXXG3Z6yfMDfFB o8W/7K9XLo4un4bvh9GV47komWkgex4EDxskiXFaaMI91OwCC1I8lJ7v5nh5oEiZ Hwpr98B9K54mCYO/q5WWzItWuLhKalnLyuZnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGpaofYGJDqDM1Ioj1rrlPeGeX9AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dwYW9mWUdKRHFETTFJb2ox cnJsUGVHZVg5QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wzgwDQYJKoZIhvcNAQELBQADggEBAFM7d7mQQsURTlVCCSkHtChnJMr7At43IBS6 LXnuLfd834n43/yychjOx2H6h8267PhxfcnBJ9mRkL36jXPfQxYAjJzEFsBYeB+G tHLRsCInPZomyvX4sDQI0Zf5GifzRMf8Pmt0P9rc1FmKdBcUkqWD7o3lhE6cEQlV 5HLO0Fe+yyQeL7fPfH02wCboW/nreKQY1wHN7AoO7RTmQDzP5FM1pi8iv/zDOIy7 TUPYgnlbLQrCwwZ8lYWknPli16Bm+CgL19W0F3WTZ/cGOz+Itkn1Xj0in2GgpQWo KMRTz8CyB/JIxc0UoJDJFCSEDyOnWEibOekU7ztOhHnXs/9WA4U= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:38 2024 by rpki-client on console-fra.rpki-client.org