$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JaqgREM-VG-AlJI3rIG6m5EWgI0.roa File: JaqgREM-VG-AlJI3rIG6m5EWgI0.roa (raw, json) Hash identifier: q43pArnOQatgxeG3KBrq65b6bhzojQ3E7cB+3XlvH7k= Subject key identifier: 25:AA:A0:44:43:3E:54:6F:80:94:92:37:AC:81:BA:9B:91:16:80:8D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3074 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JaqgREM-VG-AlJI3rIG6m5EWgI0.roa Signing time: Mon 26 Aug 2024 05:29:28 +0000 ROA not before: Mon 26 Aug 2024 05:29:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12404 (0x3074) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=25AAA044433E546F80949237AC81BA9B9116808D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:b8:97:4c:e5:c1:75:cb:9f:85:c3:b2:d7: 70:fb:49:81:c3:7e:41:62:64:49:57:3e:9d:4d:ab: 60:af:96:8a:71:27:89:50:d6:50:87:29:ba:24:d7: 6f:a9:f2:db:27:36:06:72:d7:b4:12:45:8f:43:b8: 94:19:b5:ac:32:55:af:e3:2a:8c:d6:fa:11:fe:f9: 23:bc:65:c8:4d:25:af:19:61:c0:b7:c2:e5:df:05: 35:67:b9:40:33:ec:8d:58:56:ce:4d:dc:ac:27:e7: ab:6d:6b:0c:04:76:d6:22:93:3d:99:be:d1:50:9a: ce:46:67:bb:74:46:53:ae:08:ab:b1:f5:01:03:d4: cc:f1:30:d4:e1:51:c1:79:6b:b6:42:d8:25:4f:59: d0:93:9d:55:72:26:61:e9:5a:18:ad:d5:7d:ea:8b: 2a:d6:8c:af:07:f7:c1:96:eb:ee:ca:d6:93:ef:a3: 42:70:86:ae:dd:0b:50:fb:81:ed:5c:71:d6:42:a8: 09:d9:a2:fa:44:d1:73:01:bf:99:74:6e:2f:43:07: 7c:f6:57:e4:e8:20:16:2e:ca:a3:a2:15:b5:31:87: 28:18:1f:75:b3:95:57:54:28:0b:85:39:17:37:e0: db:1e:59:a3:79:05:d3:82:ff:6a:e5:47:35:95:f1: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AA:A0:44:43:3E:54:6F:80:94:92:37:AC:81:BA:9B:91:16:80:8D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JaqgREM-VG-AlJI3rIG6m5EWgI0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.112.0/21 Signature Algorithm: sha256WithRSAEncryption 63:6f:c4:a5:48:8e:0d:f4:80:39:cb:22:db:b6:55:1a:a7:d7: f6:8a:41:c0:71:71:12:c0:bb:5e:30:07:ac:62:ce:f8:12:51: 52:d0:21:bc:ee:63:e3:29:29:95:ed:73:f3:dc:91:df:12:61: fe:2c:68:c8:8b:c3:2b:1b:84:67:1d:76:2f:b8:9b:73:25:41: ac:5d:08:0c:35:78:cf:a4:6f:0a:6f:f2:6a:89:4e:2f:f0:b9: 04:6f:46:f3:41:69:3c:64:bb:13:b8:06:2b:ca:1c:8e:9f:d7: f4:f1:23:38:e9:cf:98:66:c4:71:58:2e:86:db:6f:80:fe:44: 04:9a:33:1b:75:d3:65:0e:f6:08:e6:86:67:73:de:2e:7f:57: 7f:01:1f:97:9e:1f:22:f0:42:df:49:a7:7d:a9:ce:11:19:30: be:c7:44:47:8b:72:0a:7a:6d:6b:cf:e3:d5:81:94:e8:61:29: 02:27:02:8a:ae:9c:67:d3:c4:bf:da:29:2a:69:3b:fd:dd:ed: 98:90:56:e9:f0:44:4f:c2:f9:87:74:a7:a3:a9:af:47:13:ba: 6d:2e:8e:33:63:f7:26:a6:fb:68:06:9d:62:46:ca:7c:6d:8a: 5a:68:e4:23:dd:82:b5:17:8b:b5:ce:d6:1c:36:a5:93:37:65: f1:76:61:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1QUFBMDQ0NDMzRTU0 NkY4MDk0OTIzN0FDODFCQTlCOTExNjgwOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl1LiXTOXBdcufhcOy13D7SYHDfkFiZElXPp1Nq2CvlopxJ4lQ 1lCHKbok12+p8tsnNgZy17QSRY9DuJQZtawyVa/jKozW+hH++SO8ZchNJa8ZYcC3 wuXfBTVnuUAz7I1YVs5N3Kwn56ttawwEdtYikz2ZvtFQms5GZ7t0RlOuCKux9QED 1MzxMNThUcF5a7ZC2CVPWdCTnVVyJmHpWhit1X3qiyrWjK8H98GW6+7K1pPvo0Jw hq7dC1D7ge1ccdZCqAnZovpE0XMBv5l0bi9DB3z2V+ToIBYuyqOiFbUxhygYH3Wz lVdUKAuFORc34NseWaN5BdOC/2rlRzWV8XXtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJaqgREM+VG+AlJI3rIG6m5EWgI0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0phcWdSRU0tVkctQWxKSTNy SUc2bTVFV2dJMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wHAwDQYJKoZIhvcNAQELBQADggEBAGNvxKVIjg30gDnLItu2VRqn1/aKQcBxcRLA u14wB6xizvgSUVLQIbzuY+MpKZXtc/Pckd8SYf4saMiLwysbhGcddi+4m3MlQaxd CAw1eM+kbwpv8mqJTi/wuQRvRvNBaTxkuxO4BivKHI6f1/TxIzjpz5hmxHFYLobb b4D+RASaMxt102UO9gjmhmdz3i5/V38BH5eeHyLwQt9Jp32pzhEZML7HREeLcgp6 bWvP49WBlOhhKQInAoqunGfTxL/aKSppO/3d7ZiQVunwRE/C+Yd0p6Opr0cTum0u jjNj9yam+2gGnWJGynxtilpo5CPdgrUXi7XO1hw2pZM3ZfF2Yc0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org