$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HeD3R364SNFgEe_aIxqfym7AkI4.roa File: HeD3R364SNFgEe_aIxqfym7AkI4.roa (raw, json) Hash identifier: jsVTjjMRW5In3omwC+7syr9HJg6UyIOU/58ttCJktd8= Subject key identifier: 1D:E0:F7:47:7E:B8:48:D1:60:11:EF:DA:23:1A:9F:CA:6E:C0:90:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2F92 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HeD3R364SNFgEe_aIxqfym7AkI4.roa Signing time: Mon 26 Aug 2024 05:28:37 +0000 ROA not before: Mon 26 Aug 2024 05:28:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12178 (0x2f92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1DE0F7477EB848D16011EFDA231A9FCA6EC0908E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:d4:3a:a6:6e:04:ba:38:51:6c:be:c0:cc: c0:07:bb:db:3c:96:5d:b5:9c:e2:d6:a4:dc:33:fd: ab:a4:2e:e3:02:b6:0e:93:42:7e:95:64:1c:69:c7: 89:c6:17:86:eb:14:42:5b:94:c6:05:cf:97:5d:cf: a8:4f:51:ec:8d:51:1a:25:60:f2:5f:0a:cb:4a:fe: 6d:9a:97:2a:43:70:e3:40:d8:1b:a8:9f:af:65:53: 56:a0:95:c1:cf:b6:e3:3e:44:cd:65:a1:8e:17:39: 6c:d5:05:9b:d9:4b:a9:89:7c:d3:d0:64:fa:8d:dc: e7:11:5b:42:d8:64:2a:53:d5:e1:10:ea:4d:a7:6d: 15:8f:98:50:20:46:b0:db:86:b9:8d:82:34:b4:54: 51:c0:aa:1e:b8:a4:0d:b4:9a:b0:c8:ef:0e:88:a2: e8:23:75:3d:04:60:57:e9:77:e0:95:2c:fe:d2:92: 84:94:35:24:f2:12:be:98:d0:34:a8:43:f6:90:65: 9c:49:c5:e3:c0:3a:10:9c:82:b1:f5:17:b3:b1:03: 36:46:b6:9f:92:e4:d1:fd:28:be:59:59:0e:3e:1e: f5:4a:cd:42:3e:eb:db:51:18:a3:59:80:b2:22:24: 38:ec:9f:17:1c:94:a2:09:30:cf:fd:10:c1:d6:05: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E0:F7:47:7E:B8:48:D1:60:11:EF:DA:23:1A:9F:CA:6E:C0:90:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HeD3R364SNFgEe_aIxqfym7AkI4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.136.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:8e:02:30:be:a4:fd:7c:b9:6e:dd:d3:b5:67:69:6b:a6:06: 78:59:ee:bb:63:d6:ed:f2:11:29:bf:b6:74:14:a7:3f:8d:50: e7:e8:14:b1:26:bf:37:1d:54:6c:21:e7:fd:9d:f6:7b:c1:ec: e9:27:e4:f3:d2:55:eb:9f:a0:1a:2b:42:13:54:f9:8b:f3:81: ba:18:b6:b4:90:02:15:09:d6:7a:06:7c:02:4f:33:3b:40:f0: ef:3e:78:cc:b1:20:74:6a:fe:16:09:39:d9:dc:15:45:de:49: 20:14:7e:80:0f:9a:80:ad:10:db:4f:73:05:5a:75:7a:08:48: 12:94:8a:58:14:d0:7a:81:52:cf:f3:b8:6e:21:1f:07:29:2f: a0:2a:05:1b:1f:f2:37:9b:78:52:00:2d:dc:90:ad:1c:2f:0f: 34:d7:64:ee:df:69:05:64:d3:75:b4:07:96:02:e5:e7:4f:e6: ec:5b:2a:9e:9c:78:2f:ac:17:6b:53:b5:98:cc:02:cf:ce:6c: c8:de:8b:88:db:93:2f:4c:28:d5:7c:cd:08:c3:e9:87:68:96: 44:c4:18:c8:1f:3a:f4:7b:28:12:80:c2:74:10:82:77:08:b9: 07:2c:73:55:3a:fd:ba:c0:ea:56:a9:73:9f:f2:20:cf:c0:b4: e7:1c:87:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFERTBGNzQ3N0VCODQ4 RDE2MDExRUZEQTIzMUE5RkNBNkVDMDkwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClctQ6pm4EujhRbL7AzMAHu9s8ll21nOLWpNwz/aukLuMCtg6T Qn6VZBxpx4nGF4brFEJblMYFz5ddz6hPUeyNURolYPJfCstK/m2alypDcONA2Buo n69lU1aglcHPtuM+RM1loY4XOWzVBZvZS6mJfNPQZPqN3OcRW0LYZCpT1eEQ6k2n bRWPmFAgRrDbhrmNgjS0VFHAqh64pA20mrDI7w6IougjdT0EYFfpd+CVLP7SkoSU NSTyEr6Y0DSoQ/aQZZxJxePAOhCcgrH1F7OxAzZGtp+S5NH9KL5ZWQ4+HvVKzUI+ 69tRGKNZgLIiJDjsnxcclKIJMM/9EMHWBYB/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHeD3R364SNFgEe/aIxqfym7AkI4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hlRDNSMzY0U05GZ0VlX2FJ eHFmeW03QWtJNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6IgwDQYJKoZIhvcNAQELBQADggEBAE+OAjC+pP18uW7d07VnaWumBnhZ7rtj1u3y ESm/tnQUpz+NUOfoFLEmvzcdVGwh5/2d9nvB7Okn5PPSVeufoBorQhNU+YvzgboY trSQAhUJ1noGfAJPMztA8O8+eMyxIHRq/hYJOdncFUXeSSAUfoAPmoCtENtPcwVa dXoISBKUilgU0HqBUs/zuG4hHwcpL6AqBRsf8jebeFIALdyQrRwvDzTXZO7faQVk 03W0B5YC5edP5uxbKp6ceC+sF2tTtZjMAs/ObMjei4jbky9MKNV8zQjD6YdolkTE GMgfOvR7KBKAwnQQgncIuQcsc1U6/brA6lapc5/yIM/AtOcchww= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org