$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa File: HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa (raw, json) Hash identifier: zRuAoPIztrxCS3IBnS4ZdzBQ2e/GEl1s1hAcOAlpGGA= Subject key identifier: 1D:13:2E:23:62:A0:5D:7E:42:55:AE:63:05:FC:D2:18:E6:89:FA:88 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 316D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa Signing time: Mon 26 Aug 2024 05:30:27 +0000 ROA not before: Mon 26 Aug 2024 05:30:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12653 (0x316d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1D132E2362A05D7E4255AE6305FCD218E689FA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:bd:59:0b:be:f7:b7:66:1e:d6:5d:6e:78: e9:80:bc:83:99:f2:98:da:eb:26:ef:10:b4:0a:2f: 9a:7a:d4:b9:06:16:68:04:a5:7b:f7:87:3e:a0:3f: 2b:c3:fb:26:aa:92:6e:29:60:56:1a:43:fb:58:be: 34:1b:17:84:59:33:d7:17:8a:8e:fb:cc:38:51:83: 30:60:1c:bf:6c:94:d4:ed:d3:a4:8c:94:de:4d:b0: a4:60:f6:7f:4f:77:d4:17:d2:18:92:d4:90:e9:c9: 6b:e6:33:e7:d3:47:11:55:b7:b1:8f:59:5c:8d:8a: 5a:39:0a:6a:f3:57:54:99:cc:a4:d6:fe:95:16:e5: fc:4a:aa:37:87:8e:38:85:84:b3:cc:53:bc:30:bb: be:c4:12:ea:9b:8d:4d:51:de:49:4f:4b:2e:53:cf: 01:65:18:e2:02:1b:9f:90:7b:45:c4:b3:8a:46:f6: d8:3f:19:41:5b:5f:17:0c:bd:f3:d8:29:74:28:98: 3b:fd:2d:50:89:33:4f:04:cf:7c:29:a5:dc:35:38: 57:b5:65:93:f7:a3:23:8a:72:1a:61:5f:a6:a9:e1: 1e:d6:51:ae:7a:81:28:db:e9:bc:32:86:9c:e9:b5: 30:d1:fc:29:11:69:ef:c2:1f:3a:fa:a2:ab:6e:fc: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:13:2E:23:62:A0:5D:7E:42:55:AE:63:05:FC:D2:18:E6:89:FA:88 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HRMuI2KgXX5CVa5jBfzSGOaJ-og.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.144.0/21 Signature Algorithm: sha256WithRSAEncryption 61:af:9f:e7:30:ec:d0:aa:55:23:61:bb:92:87:cd:e9:8a:55: af:74:9c:71:7c:e7:64:ad:ea:7c:d4:f4:12:81:09:00:09:a4: f0:26:0d:75:63:25:a0:be:35:2d:c6:a4:d9:d2:8d:67:bd:a3: 55:38:98:1f:e4:1b:67:fe:7b:c0:47:83:42:a2:9f:2b:e9:f7: f0:e1:af:e1:49:d7:fa:c1:9b:2b:03:f3:51:66:1f:96:b6:b8: b6:09:0b:0a:33:e0:e7:d2:04:b3:a5:30:ba:86:68:58:74:a7: c7:5f:9d:8b:26:e1:a5:b3:19:18:01:e2:d2:bd:e0:87:43:ff: 6c:ff:bc:b3:53:13:3f:22:48:97:5c:7c:38:0c:aa:84:b3:3f: 65:72:44:19:fd:d9:4b:14:0e:f2:9c:95:2c:93:54:bb:57:7a: 24:f7:1e:3f:6d:be:fc:f3:80:42:6d:71:be:2e:b9:cb:16:b6: 06:b7:af:f2:9e:cc:57:cb:d3:83:74:a9:92:f2:74:2e:9d:d9: 5c:10:d5:96:2f:9c:32:80:37:2c:b0:48:a8:91:4d:d8:44:05: 4c:8b:2a:75:9f:f8:1d:8b:ab:ad:dc:5d:dc:df:02:3a:18:15: 48:00:78:5a:7c:aa:f8:4e:b7:08:1e:12:b1:a9:b1:c2:44:a3: 92:e8:b3:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFEMTMyRTIzNjJBMDVE N0U0MjU1QUU2MzA1RkNEMjE4RTY4OUZBODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrwr1ZC773t2Ye1l1ueOmAvIOZ8pja6ybvELQKL5p61LkGFmgE pXv3hz6gPyvD+yaqkm4pYFYaQ/tYvjQbF4RZM9cXio77zDhRgzBgHL9slNTt06SM lN5NsKRg9n9Pd9QX0hiS1JDpyWvmM+fTRxFVt7GPWVyNilo5CmrzV1SZzKTW/pUW 5fxKqjeHjjiFhLPMU7wwu77EEuqbjU1R3klPSy5TzwFlGOICG5+Qe0XEs4pG9tg/ GUFbXxcMvfPYKXQomDv9LVCJM08Ez3wppdw1OFe1ZZP3oyOKchphX6ap4R7WUa56 gSjb6bwyhpzptTDR/CkRae/CHzr6oqtu/MGJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHRMuI2KgXX5CVa5jBfzSGOaJ+ogwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hSTXVJMktnWFg1Q1ZhNWpC ZnpTR09hSi1vZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6ZAwDQYJKoZIhvcNAQELBQADggEBAGGvn+cw7NCqVSNhu5KHzemKVa90nHF852St 6nzU9BKBCQAJpPAmDXVjJaC+NS3GpNnSjWe9o1U4mB/kG2f+e8BHg0Kinyvp9/Dh r+FJ1/rBmysD81FmH5a2uLYJCwoz4OfSBLOlMLqGaFh0p8dfnYsm4aWzGRgB4tK9 4IdD/2z/vLNTEz8iSJdcfDgMqoSzP2VyRBn92UsUDvKclSyTVLtXeiT3Hj9tvvzz gEJtcb4uucsWtga3r/KezFfL04N0qZLydC6d2VwQ1ZYvnDKANyywSKiRTdhEBUyL KnWf+B2Lq63cXdzfAjoYFUgAeFp8qvhOtwgeErGpscJEo5Los+I= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:38 2024 by rpki-client on console-fra.rpki-client.org