$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IKbzXKZ_ZcL9osP3TGTi10t34GM.roa File: IKbzXKZ_ZcL9osP3TGTi10t34GM.roa (raw, json) Hash identifier: dwl8Tc1DFrFh10HxNwFmwjKjddYQNsI7QqDxFTCTZrY= Subject key identifier: 20:A6:F3:5C:A6:7F:65:C2:FD:A2:C3:F7:4C:64:E2:D7:4B:77:E0:63 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3244 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IKbzXKZ_ZcL9osP3TGTi10t34GM.roa Signing time: Mon 26 Aug 2024 05:31:29 +0000 ROA not before: Mon 26 Aug 2024 05:31:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12868 (0x3244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=20A6F35CA67F65C2FDA2C3F74C64E2D74B77E063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:d2:ac:47:fc:51:e2:98:5f:b2:12:b8:bb: ee:98:85:0e:bd:83:7e:61:8d:18:11:13:ed:83:ea: 67:7b:62:da:db:24:12:61:90:81:3f:85:9e:3c:e6: 20:48:10:96:bf:16:a5:9a:33:ea:3c:67:4c:4f:7a: 6f:8f:85:44:7f:84:56:76:2f:1c:9b:ed:cc:86:07: c4:ba:ae:1f:be:56:d6:f2:8f:d0:bb:bf:36:d6:3c: bb:ff:66:7a:10:68:ee:06:dc:97:90:0f:01:b5:0e: 23:3a:83:b1:b4:66:91:32:46:0d:3b:b3:d7:5e:96: 79:c9:f4:1a:a7:61:47:12:25:69:85:a4:e8:65:25: 0d:b2:08:38:19:37:20:6b:8e:c7:61:b5:c8:d8:1c: 6c:57:58:f3:cc:04:7a:2a:d2:8f:48:5c:67:1c:f5: 73:e4:83:81:c4:39:d3:70:f2:cb:ad:e5:7a:70:40: b0:b4:bc:dc:d3:c2:66:88:99:a0:26:64:ba:f2:7e: f3:24:61:6a:78:73:cf:00:10:2d:44:6c:03:0d:16: 5b:ad:b0:66:7c:09:49:b9:ea:f4:7c:52:ae:48:71: 2f:32:de:5a:c4:70:50:fc:dd:36:03:91:4f:f4:02: 37:73:c4:d3:3d:54:eb:80:54:9f:4f:a0:46:dd:10: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A6:F3:5C:A6:7F:65:C2:FD:A2:C3:F7:4C:64:E2:D7:4B:77:E0:63 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IKbzXKZ_ZcL9osP3TGTi10t34GM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00::/32 Signature Algorithm: sha256WithRSAEncryption 7b:83:24:39:05:ff:3f:69:9d:a8:16:33:10:8f:c5:4e:48:61: a9:57:8d:56:52:bf:fa:38:3e:e9:26:7c:20:ac:ec:42:c1:b8: c4:47:4c:c1:08:db:db:6e:db:1a:0c:88:9a:e1:a6:23:b6:42: 03:d8:45:b2:20:a9:c8:57:18:18:e7:ce:98:58:e6:0a:3e:0c: 89:48:47:8f:9f:49:63:c9:a6:46:54:50:7e:d1:b3:c9:e4:6a: b1:5b:a4:d3:68:e9:6d:90:d2:22:b8:6f:29:f3:cc:3c:5a:d9: b1:31:96:16:15:02:97:78:79:34:6e:2d:3e:b3:5d:b0:a7:66: 2f:80:15:ae:66:87:5c:b1:23:40:cd:f9:54:e6:cf:a6:71:9e: 67:54:d1:ef:0a:a6:af:76:f0:8a:58:fd:b1:d4:b7:5d:43:dc: ee:30:74:95:ca:48:61:4a:af:43:57:1c:5c:88:49:94:2c:e4: 94:ef:f5:b2:96:37:51:c0:95:26:9d:6d:80:84:cd:45:3c:b1: 88:55:0e:91:46:24:69:95:de:02:5b:95:55:81:86:39:fe:b0: 8a:4b:8e:93:16:15:f2:7d:dc:a6:5e:e8:9a:fd:c7:5e:91:18: 62:2c:41:01:e4:ef:e8:db:1c:4a:98:12:1c:0d:e1:1b:53:2f: 7a:4c:a9:da -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMkQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwQTZGMzVDQTY3RjY1 QzJGREEyQzNGNzRDNjRFMkQ3NEI3N0UwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCSQ9KsR/xR4phfshK4u+6YhQ69g35hjRgRE+2D6md7YtrbJBJh kIE/hZ485iBIEJa/FqWaM+o8Z0xPem+PhUR/hFZ2Lxyb7cyGB8S6rh++Vtbyj9C7 vzbWPLv/ZnoQaO4G3JeQDwG1DiM6g7G0ZpEyRg07s9delnnJ9BqnYUcSJWmFpOhl JQ2yCDgZNyBrjsdhtcjYHGxXWPPMBHoq0o9IXGcc9XPkg4HEOdNw8sut5XpwQLC0 vNzTwmaImaAmZLryfvMkYWp4c88AEC1EbAMNFlutsGZ8CUm56vR8Uq5IcS8y3lrE cFD83TYDkU/0AjdzxNM9VOuAVJ9PoEbdEIr5AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUIKbzXKZ/ZcL9osP3TGTi10t34GMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lLYnpYS1pfWmNMOW9zUDNU R1RpMTB0MzRHTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B00AMA0GCSqGSIb3DQEBCwUAA4IBAQB7gyQ5Bf8/aZ2oFjMQj8VOSGGpV41WUr/6 OD7pJnwgrOxCwbjER0zBCNvbbtsaDIia4aYjtkID2EWyIKnIVxgY586YWOYKPgyJ SEePn0ljyaZGVFB+0bPJ5GqxW6TTaOltkNIiuG8p88w8WtmxMZYWFQKXeHk0bi0+ s12wp2YvgBWuZodcsSNAzflU5s+mcZ5nVNHvCqavdvCKWP2x1LddQ9zuMHSVykhh Sq9DVxxciEmULOSU7/WyljdRwJUmnW2AhM1FPLGIVQ6RRiRpld4CW5VVgYY5/rCK S46TFhXyfdymXuia/cdekRhiLEEB5O/o2xxKmBIcDeEbUy96TKna -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org