$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I72xTZcQZJMc_35thnQkO6pFoGY.roa File: I72xTZcQZJMc_35thnQkO6pFoGY.roa (raw, json) Hash identifier: Fa23ucKcYVOy6U2o8qCiRfsLnrAAKutcr0DljpXzo1U= Subject key identifier: 23:BD:B1:4D:97:10:64:93:1C:FF:7E:6D:86:74:24:3B:AA:45:A0:66 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 315B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I72xTZcQZJMc_35thnQkO6pFoGY.roa Signing time: Mon 26 Aug 2024 05:30:22 +0000 ROA not before: Mon 26 Aug 2024 05:30:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12635 (0x315b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=23BDB14D971064931CFF7E6D8674243BAA45A066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:3b:48:6d:1e:2f:45:8a:26:89:b3:62:e8: 0f:5e:03:89:14:f3:7f:35:cf:97:20:53:f9:f7:cd: 60:e3:cd:36:8d:04:a7:87:9f:32:90:18:7c:b1:cc: 17:e1:fb:cc:09:c9:a1:c0:d9:f7:53:88:ac:0d:3a: 05:4c:6d:90:9b:88:c1:00:ab:56:7b:22:95:ad:3f: 1e:0c:7a:92:0c:46:23:c8:a3:de:ce:38:f0:e0:ee: 65:e7:40:1a:6b:c4:5f:25:d7:31:54:55:78:67:8c: 48:f4:41:14:71:f9:a5:59:1d:cf:93:b5:ae:08:e6: f3:f4:f5:47:b6:28:d5:e7:9f:91:c7:f4:f7:69:e7: ac:a8:52:13:89:d3:3f:38:d6:40:9f:a8:bf:6c:1a: f9:09:de:17:df:df:01:70:db:fa:af:76:6b:57:a5: c7:22:80:0b:23:60:43:76:29:65:15:61:d0:65:62: 92:41:fd:7b:a9:d6:fa:58:ea:b4:3f:bc:05:f5:12: eb:cb:13:b4:ef:08:04:9c:2b:a8:fa:95:3c:4e:4b: ac:67:5e:81:c7:78:23:52:71:fe:6f:ab:cd:76:60: 77:be:b8:de:45:4b:85:41:bb:a9:9a:c6:63:3a:f8: 6b:b1:60:59:f6:85:97:aa:42:ba:8f:79:14:5d:69: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:B1:4D:97:10:64:93:1C:FF:7E:6D:86:74:24:3B:AA:45:A0:66 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I72xTZcQZJMc_35thnQkO6pFoGY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.132.0/24 Signature Algorithm: sha256WithRSAEncryption 22:d6:ca:95:ce:e1:91:3d:01:bf:2c:b4:78:b5:4b:2b:a3:25: 8e:b1:e7:b2:09:3c:29:64:ef:a3:c7:00:39:09:de:9f:00:02: 63:ac:0b:fc:2b:1d:e4:1d:98:22:4e:94:30:57:5f:df:c8:4a: 87:7f:ec:d0:38:7d:a5:f0:22:00:fb:0a:b2:6f:6c:79:ce:d4: 66:89:a4:7e:e2:4b:ff:41:50:10:b9:b2:c6:ae:15:03:4f:03: 59:17:15:82:ae:dc:5d:d7:14:a1:f7:35:f3:3c:04:7f:d8:8b: 93:66:3c:2f:42:ca:6d:a2:30:7c:86:df:0b:4e:c9:8c:d8:45: 8a:14:24:10:48:4c:42:b4:9d:92:05:f4:7c:34:c5:a2:29:5f: 42:02:2a:0d:2a:b0:37:98:9e:58:5a:6c:eb:85:17:13:29:3f: 9f:17:e5:fc:d3:8e:58:bb:6a:59:20:e0:9c:3b:af:d5:87:4a: 59:fe:0f:24:d0:f7:58:cd:c0:7e:ea:28:ed:52:ce:ef:4a:e4: 5d:1b:3b:02:40:30:6a:d6:91:6d:1f:af:12:1a:01:3f:11:89: 46:8b:5d:7c:92:ae:d5:5a:f3:9d:e1:98:26:49:30:99:65:e0: d3:fb:8a:d7:0d:45:96:b7:44:46:79:f6:9a:09:7e:20:f4:2e: 73:0c:53:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzQkRCMTREOTcxMDY0 OTMxQ0ZGN0U2RDg2NzQyNDNCQUE0NUEwNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLGztIbR4vRYomibNi6A9eA4kU8381z5cgU/n3zWDjzTaNBKeH nzKQGHyxzBfh+8wJyaHA2fdTiKwNOgVMbZCbiMEAq1Z7IpWtPx4MepIMRiPIo97O OPDg7mXnQBprxF8l1zFUVXhnjEj0QRRx+aVZHc+Tta4I5vP09Ue2KNXnn5HH9Pdp 56yoUhOJ0z841kCfqL9sGvkJ3hff3wFw2/qvdmtXpccigAsjYEN2KWUVYdBlYpJB /Xup1vpY6rQ/vAX1EuvLE7TvCAScK6j6lTxOS6xnXoHHeCNScf5vq812YHe+uN5F S4VBu6maxmM6+GuxYFn2hZeqQrqPeRRdaVcDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUI72xTZcQZJMc/35thnQkO6pFoGYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0k3MnhUWmNRWkpNY18zNXRo blFrTzZwRm9HWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYQwDQYJKoZIhvcNAQELBQADggEBACLWypXO4ZE9Ab8stHi1SyujJY6x57IJPClk 76PHADkJ3p8AAmOsC/wrHeQdmCJOlDBXX9/ISod/7NA4faXwIgD7CrJvbHnO1GaJ pH7iS/9BUBC5ssauFQNPA1kXFYKu3F3XFKH3NfM8BH/Yi5NmPC9Cym2iMHyG3wtO yYzYRYoUJBBITEK0nZIF9Hw0xaIpX0ICKg0qsDeYnlhabOuFFxMpP58X5fzTjli7 alkg4Jw7r9WHSln+DyTQ91jNwH7qKO1Szu9K5F0bOwJAMGrWkW0frxIaAT8RiUaL XXySrtVa853hmCZJMJll4NP7itcNRZa3REZ59poJfiD0LnMMUzg= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org