$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IsJFGtIz667VAHwUDewqbG_dOmI.roa File: IsJFGtIz667VAHwUDewqbG_dOmI.roa (raw, json) Hash identifier: 27S2i41xh2TenVPsPAgbGtyAbTMXzItWgNI7TIYQrDk= Subject key identifier: 22:C2:45:1A:D2:33:EB:AE:D5:00:7C:14:0D:EC:2A:6C:6F:DD:3A:62 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31E9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IsJFGtIz667VAHwUDewqbG_dOmI.roa Signing time: Mon 26 Aug 2024 05:31:04 +0000 ROA not before: Mon 26 Aug 2024 05:31:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12777 (0x31e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=22C2451AD233EBAED5007C140DEC2A6C6FDD3A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:a1:5f:b4:75:2a:64:dc:4c:ea:bc:11:5f: 0c:6c:d9:96:d9:de:1e:3b:af:e5:2f:c9:36:24:ae: 1a:51:47:c0:1d:d6:c2:a4:05:c4:93:2e:e2:23:86: 05:64:a3:9d:16:b6:c0:d4:09:52:c3:ba:a6:f9:04: 06:60:d5:6b:7c:f5:bc:0c:ed:8f:d8:e0:d6:74:7d: dc:1c:76:24:37:1b:dd:54:4c:65:82:61:f7:12:fd: 6d:96:69:06:1e:41:e1:3f:a5:58:b4:78:8a:c6:30: ad:70:40:24:5b:42:03:76:90:8a:27:13:bd:27:14: f4:9f:a5:67:19:2b:12:e7:fe:27:b1:68:76:49:55: 63:8e:05:e6:48:79:5d:b4:c5:ec:16:d8:35:df:9c: 85:0a:31:42:4f:4a:3e:94:e5:f9:d8:b4:df:4a:8c: 8d:15:df:05:1f:b2:16:9c:5c:8d:bf:54:ce:d0:71: 16:25:f3:84:5c:f9:c6:98:25:68:de:e5:53:0f:55: 74:43:1a:1d:02:ef:2a:52:db:67:5c:bd:2f:3a:f0: f6:06:06:65:fe:4c:c2:24:04:16:71:86:29:cc:40: 6e:7f:03:e0:56:21:bd:f1:53:36:0b:23:d9:9c:89: 8b:73:2b:62:cf:95:5f:13:3f:55:75:40:18:92:30: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C2:45:1A:D2:33:EB:AE:D5:00:7C:14:0D:EC:2A:6C:6F:DD:3A:62 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IsJFGtIz667VAHwUDewqbG_dOmI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.164.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ff:4f:7a:1e:aa:8f:c9:54:ad:39:34:c0:df:d4:c4:7b:29: 57:99:c6:98:57:0c:f6:d2:c3:09:63:92:f7:b9:7a:37:d2:51: 9a:32:9d:88:ea:49:ee:d8:42:40:c1:08:73:e0:25:44:f3:33: d6:f9:1e:49:18:3b:f7:68:09:fb:5d:78:ce:38:9c:4d:e9:e6: 7e:f9:29:db:18:33:e5:15:61:09:22:0e:07:26:6a:45:ab:ed: 67:37:48:b3:b8:71:05:62:1f:b4:4a:cd:f8:5d:fd:58:29:34: 58:16:cf:58:46:f0:43:0d:59:46:fa:ae:35:26:ac:92:79:55: c7:38:76:d7:43:99:d6:3a:d6:ba:67:b1:85:5b:02:42:c3:3b: 65:f2:f8:bd:24:5a:c5:da:31:0e:59:f5:f5:22:13:54:00:14: be:f7:aa:02:b4:91:9a:73:40:37:12:2e:99:cf:98:83:cb:c1: 2c:3a:b2:77:83:34:ed:b7:fa:13:60:08:1a:74:57:47:33:2e: 74:54:5b:7c:f9:c4:fb:41:7f:cd:33:21:42:8f:a3:fa:17:39: 03:5e:7c:45:0f:df:fd:8b:b8:61:28:16:2e:d3:1a:53:89:14: 63:01:ad:a0:f2:b5:52:3c:53:8c:a6:1e:c6:44:7f:1d:d2:c7: a0:39:19:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyQzI0NTFBRDIzM0VC QUVENTAwN0MxNDBERUMyQTZDNkZERDNBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5DaFftHUqZNxM6rwRXwxs2ZbZ3h47r+UvyTYkrhpRR8Ad1sKk BcSTLuIjhgVko50WtsDUCVLDuqb5BAZg1Wt89bwM7Y/Y4NZ0fdwcdiQ3G91UTGWC YfcS/W2WaQYeQeE/pVi0eIrGMK1wQCRbQgN2kIonE70nFPSfpWcZKxLn/iexaHZJ VWOOBeZIeV20xewW2DXfnIUKMUJPSj6U5fnYtN9KjI0V3wUfshacXI2/VM7QcRYl 84Rc+caYJWje5VMPVXRDGh0C7ypS22dcvS868PYGBmX+TMIkBBZxhinMQG5/A+BW Ib3xUzYLI9mciYtzK2LPlV8TP1V1QBiSMOWbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIsJFGtIz667VAHwUDewqbG/dOmIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lzSkZHdEl6NjY3VkFId1VE ZXdxYkdfZE9tSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AaQwDQYJKoZIhvcNAQELBQADggEBALT/T3oeqo/JVK05NMDf1MR7KVeZxphXDPbS wwljkve5ejfSUZoynYjqSe7YQkDBCHPgJUTzM9b5HkkYO/doCftdeM44nE3p5n75 KdsYM+UVYQkiDgcmakWr7Wc3SLO4cQViH7RKzfhd/VgpNFgWz1hG8EMNWUb6rjUm rJJ5Vcc4dtdDmdY61rpnsYVbAkLDO2Xy+L0kWsXaMQ5Z9fUiE1QAFL73qgK0kZpz QDcSLpnPmIPLwSw6sneDNO23+hNgCBp0V0czLnRUW3z5xPtBf80zIUKPo/oXOQNe fEUP3/2LuGEoFi7TGlOJFGMBraDytVI8U4ymHsZEfx3Sx6A5GSs= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org