$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JsrLHE5osAixGfnh7UwnfjHnz-4.roa File: JsrLHE5osAixGfnh7UwnfjHnz-4.roa (raw, json) Hash identifier: DpUiZOv77ny6rZKM9HmEmZITp6DEfwVN4NzvDNsy/eM= Subject key identifier: 26:CA:CB:1C:4E:68:B0:08:B1:19:F9:E1:ED:4C:27:7E:31:E7:CF:EE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FB1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JsrLHE5osAixGfnh7UwnfjHnz-4.roa Signing time: Mon 26 Aug 2024 05:28:46 +0000 ROA not before: Mon 26 Aug 2024 05:28:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00:ff0b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12209 (0x2fb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=26CACB1C4E68B008B119F9E1ED4C277E31E7CFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:15:f0:f0:88:dc:86:40:6f:28:6c:a9:d8: ff:66:a3:16:5a:2e:22:14:0d:2d:0e:dd:c3:7b:60: 3b:84:5f:17:04:7e:a1:13:21:cf:83:41:71:a3:21: 70:1b:0f:47:6f:9b:64:5c:8a:fd:ba:95:f2:c0:b0: 0c:77:41:a9:57:3b:29:d0:58:32:b1:c4:2a:72:da: 2e:2a:ce:4a:59:80:b9:62:7f:be:3f:01:12:b9:e2: 77:6a:fa:fe:99:80:0f:c2:b2:15:81:2e:6d:8c:cb: cb:60:f7:8b:45:16:32:fe:93:d2:c2:1f:21:e2:61: 89:88:fe:cb:3e:39:8a:29:94:51:94:ab:65:4a:f8: 53:e2:6c:18:5e:36:c9:bf:f3:d7:5e:07:2f:87:b9: 3a:08:6f:e2:5b:73:08:43:73:bf:b4:1c:0b:52:a6: 02:0e:ba:26:bf:e9:56:21:33:70:85:e6:ac:10:1a: 75:3f:4c:bf:f4:05:cc:75:ca:af:dc:e3:a3:b9:4b: fc:97:0a:51:43:f4:6b:f5:0a:8d:bc:73:c2:d2:4a: e6:44:71:6b:b1:1a:6c:c7:70:10:8b:f6:0d:29:52: 57:53:c9:8d:d2:64:9a:8e:22:6b:94:a9:1a:f7:08: 94:12:6d:09:89:61:30:1f:0b:49:46:7c:70:ec:a5: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:CB:1C:4E:68:B0:08:B1:19:F9:E1:ED:4C:27:7E:31:E7:CF:EE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JsrLHE5osAixGfnh7UwnfjHnz-4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff0b::/48 Signature Algorithm: sha256WithRSAEncryption 51:6c:df:09:83:91:f2:4d:e4:7a:64:6f:ab:1e:e3:0f:8e:23: a7:1d:8a:76:11:06:34:4d:bb:54:2f:d5:03:fd:bc:8b:c5:1d: e7:d3:9f:83:50:12:1f:3e:ca:86:b5:a1:39:92:36:20:15:d4: 2f:d7:6e:d1:92:aa:48:09:c8:08:e6:35:89:05:d9:60:18:ad: 73:4e:16:b6:df:8a:fa:58:25:df:30:e0:c0:db:3a:58:bd:4e: b3:d2:12:3c:b1:4e:9d:ea:5c:ff:3c:9c:f3:7e:e9:52:f0:78: d0:b3:a5:d1:96:6e:e5:9b:62:40:16:05:f8:32:f3:5f:16:d7: d6:54:fe:a2:68:8f:f9:79:e7:8d:67:38:e1:7f:cc:3a:7e:aa: 6f:02:50:87:d9:c2:cb:3d:ed:ec:b2:1b:2b:b5:22:69:c0:59: f2:77:3c:40:8c:d9:4f:58:ef:cd:16:47:6a:5f:62:a3:88:83: 19:c7:f1:ef:1b:c4:31:dd:82:13:c6:e9:ab:7f:d3:19:40:27: 28:47:53:33:d3:b6:65:c8:33:76:f0:4c:f7:b9:b8:dc:ac:1d: d2:63:9e:d9:05:c6:fa:1f:4d:9e:17:5d:6c:07:4c:25:cb:e5: 03:fc:fb:be:f7:b3:18:0f:8b:bb:01:7b:f0:3a:f1:89:ca:e5: 05:eb:9b:b7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICL7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2Q0FDQjFDNEU2OEIw MDhCMTE5RjlFMUVENEMyNzdFMzFFN0NGRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeMhXw8IjchkBvKGyp2P9moxZaLiIUDS0O3cN7YDuEXxcEfqET Ic+DQXGjIXAbD0dvm2Rciv26lfLAsAx3QalXOynQWDKxxCpy2i4qzkpZgLlif74/ ARK54ndq+v6ZgA/CshWBLm2My8tg94tFFjL+k9LCHyHiYYmI/ss+OYoplFGUq2VK +FPibBheNsm/89deBy+HuToIb+JbcwhDc7+0HAtSpgIOuia/6VYhM3CF5qwQGnU/ TL/0Bcx1yq/c46O5S/yXClFD9Gv1Co28c8LSSuZEcWuxGmzHcBCL9g0pUldTyY3S ZJqOImuUqRr3CJQSbQmJYTAfC0lGfHDspR79AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUJsrLHE5osAixGfnh7UwnfjHnz+4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pzckxIRTVvc0FpeEdmbmg3 VXduZmpIbnotNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wswDQYJKoZIhvcNAQELBQADggEBAFFs3wmDkfJN5Hpkb6se4w+OI6cdinYR BjRNu1Qv1QP9vIvFHefTn4NQEh8+yoa1oTmSNiAV1C/XbtGSqkgJyAjmNYkF2WAY rXNOFrbfivpYJd8w4MDbOli9TrPSEjyxTp3qXP88nPN+6VLweNCzpdGWbuWbYkAW Bfgy818W19ZU/qJoj/l5541nOOF/zDp+qm8CUIfZwss97eyyGyu1ImnAWfJ3PECM 2U9Y780WR2pfYqOIgxnH8e8bxDHdghPG6at/0xlAJyhHUzPTtmXIM3bwTPe5uNys HdJjntkFxvofTZ4XXWwHTCXL5QP8+773sxgPi7sBe/A68YnK5QXrm7c= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org