$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKoxEErx70U9n7bzfxJQVxjIPB0.roa File: JKoxEErx70U9n7bzfxJQVxjIPB0.roa (raw, json) Hash identifier: 5W3jWBaTZH6pxK4Lj8GbZhtbQdmttwkdco8XP3TBaxg= Subject key identifier: 24:AA:31:10:4A:F1:EF:45:3D:9F:B6:F3:7F:12:50:57:18:C8:3C:1D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3206 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKoxEErx70U9n7bzfxJQVxjIPB0.roa Signing time: Mon 26 Aug 2024 05:31:10 +0000 ROA not before: Mon 26 Aug 2024 05:31:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12806 (0x3206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=24AA31104AF1EF453D9FB6F37F12505718C83C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:cd:4c:83:5c:cd:02:8d:08:bd:fb:2e:bd: e6:e6:88:ae:b9:8f:c7:93:5a:ee:fa:48:c6:20:a6: 57:d9:df:dd:07:9e:c5:5d:8c:3f:98:6d:f2:94:17: ca:86:68:37:ad:f8:b1:3d:be:1e:fe:69:cf:16:a7: e4:1c:3d:7c:cd:9a:e7:ec:0a:0e:cc:f9:3d:09:8d: f7:f8:bd:64:cc:20:6e:b3:58:1a:04:c6:ea:6c:1f: 5c:7d:70:7e:e1:92:1a:77:39:f5:98:57:3a:ac:8e: cb:d8:f3:24:77:af:d2:4f:b8:46:ca:f0:c9:c7:20: 06:9b:ac:0f:61:53:f3:b9:c1:85:5e:f6:21:8a:b7: 87:66:71:02:8a:1b:b1:de:d7:b6:5b:7c:e0:37:1f: 35:8c:e1:80:c8:a2:6f:b0:85:9c:32:19:9e:84:e6: de:b9:12:dd:d6:24:66:66:46:c8:b0:1e:73:a4:b1: 6c:aa:91:a4:48:65:5e:84:c5:29:65:55:cc:0d:28: 12:38:0b:54:bd:e2:3d:b8:02:fa:28:b0:75:73:e4: bd:ef:b3:a6:f4:6c:77:f1:84:d5:35:5b:da:bc:61: 9d:b1:b6:d0:47:d0:05:9c:d2:5c:b5:10:95:c7:2e: 2a:2d:32:ac:f4:8c:3b:3e:31:18:48:34:f8:b2:81: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:31:10:4A:F1:EF:45:3D:9F:B6:F3:7F:12:50:57:18:C8:3C:1D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKoxEErx70U9n7bzfxJQVxjIPB0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.198.0/23 Signature Algorithm: sha256WithRSAEncryption 16:9e:96:ec:4e:18:2d:e7:77:4a:c6:68:87:b7:07:83:27:fe: ec:bc:c8:a2:35:9b:be:7a:c0:99:3b:f2:9a:d6:8d:5b:80:62: c1:8e:10:9f:5e:bc:d9:4f:61:2d:68:3b:16:b9:4d:a0:a6:c4: b3:85:11:d6:3c:07:cd:43:13:86:e5:0d:58:a6:b7:b1:39:bf: bd:f3:68:f6:f8:8e:4f:8c:e7:24:21:bf:6f:c0:35:ea:ad:39: 3f:79:ef:9c:74:29:c9:e3:9e:95:5c:93:ca:04:dd:8e:ca:52: bf:49:c1:28:4d:74:bb:a8:44:c0:bc:7c:c6:07:b0:b9:96:40: a8:32:5f:1b:77:84:d0:2d:25:63:d8:c6:17:9b:53:67:9c:8b: eb:fc:15:7c:a7:b6:9b:b1:71:68:32:f7:ed:cc:e3:75:f8:fc: 03:86:bc:9b:cd:6f:58:77:19:20:6b:f3:30:bb:55:ba:a7:5a: 12:42:63:00:a9:ac:f3:15:f1:e7:2a:03:6b:39:fa:52:28:b3: 5a:74:cb:87:b5:09:9c:90:ee:1a:45:e9:ea:4a:0b:c9:87:95: 6b:6a:a3:63:f6:5f:c7:6b:6b:1e:16:b6:e2:15:cb:0b:d4:28: 33:c9:0d:25:dc:42:00:2c:ef:18:e6:5d:4f:98:13:5c:88:6e: 58:c7:78:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0QUEzMTEwNEFGMUVG NDUzRDlGQjZGMzdGMTI1MDU3MThDODNDMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1k81Mg1zNAo0IvfsuvebmiK65j8eTWu76SMYgplfZ390HnsVd jD+YbfKUF8qGaDet+LE9vh7+ac8Wp+QcPXzNmufsCg7M+T0Jjff4vWTMIG6zWBoE xupsH1x9cH7hkhp3OfWYVzqsjsvY8yR3r9JPuEbK8MnHIAabrA9hU/O5wYVe9iGK t4dmcQKKG7He17ZbfOA3HzWM4YDIom+whZwyGZ6E5t65Et3WJGZmRsiwHnOksWyq kaRIZV6ExSllVcwNKBI4C1S94j24AvoosHVz5L3vs6b0bHfxhNU1W9q8YZ2xttBH 0AWc0ly1EJXHLiotMqz0jDs+MRhINPiygYaPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJKoxEErx70U9n7bzfxJQVxjIPB0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pLb3hFRXJ4NzBVOW43Ynpm eEpRVnhqSVBCMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wcYwDQYJKoZIhvcNAQELBQADggEBABaeluxOGC3nd0rGaIe3B4Mn/uy8yKI1m756 wJk78prWjVuAYsGOEJ9evNlPYS1oOxa5TaCmxLOFEdY8B81DE4blDVimt7E5v73z aPb4jk+M5yQhv2/ANeqtOT9575x0KcnjnpVck8oE3Y7KUr9JwShNdLuoRMC8fMYH sLmWQKgyXxt3hNAtJWPYxhebU2eci+v8FXyntpuxcWgy9+3M43X4/AOGvJvNb1h3 GSBr8zC7VbqnWhJCYwCprPMV8ecqA2s5+lIos1p0y4e1CZyQ7hpF6epKC8mHlWtq o2P2X8drax4WtuIVywvUKDPJDSXcQgAs7xjmXU+YE1yIbljHeN0= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org