$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K-upZj-7cK91G1r5et9arkIJskM.roa File: K-upZj-7cK91G1r5et9arkIJskM.roa (raw, json) Hash identifier: 4i5k/NofqsPrCqeLg2Oc8XWU1FOPes7zMJQs2oiXxg8= Subject key identifier: 2B:EB:A9:66:3F:BB:70:AF:75:1B:5A:F9:7A:DF:5A:AE:42:09:B2:43 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30DF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K-upZj-7cK91G1r5et9arkIJskM.roa Signing time: Mon 26 Aug 2024 05:29:54 +0000 ROA not before: Mon 26 Aug 2024 05:29:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12511 (0x30df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2BEBA9663FBB70AF751B5AF97ADF5AAE4209B243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:c6:b9:ce:31:d0:66:53:4b:82:d6:fd:e6: e7:c2:fd:85:ff:69:62:9d:d6:a8:53:1a:65:ed:46: 79:d4:2d:be:93:76:11:79:cc:89:12:c2:83:89:ae: 5d:b9:e3:4d:73:f4:77:38:e4:2e:e1:0c:53:44:12: f1:6d:b4:3f:f3:b1:8c:2c:c4:99:94:17:94:f5:41: 88:1e:cf:c4:7c:fe:e5:d6:54:11:5a:69:f6:c2:c1: 54:cf:9b:f7:c1:80:79:d9:43:a8:f8:34:41:d6:a5: 40:76:c5:08:3a:f8:9e:d2:b9:69:43:d8:77:b9:69: d4:12:77:73:13:a9:7a:58:eb:50:4d:b4:22:e3:99: dd:7c:55:98:43:52:e4:a9:c7:0c:26:af:be:41:f6: 7d:f1:51:20:d9:8e:cc:eb:16:37:99:88:05:6f:9a: 25:ec:57:02:e8:07:7f:f5:fc:4f:96:3b:95:f2:50: 53:d8:d7:a1:42:43:8f:3c:73:67:92:5a:3d:28:2b: 1c:fb:c9:77:8e:fe:04:09:b8:d0:bf:e2:ac:84:30: dc:7e:08:c4:5a:07:a4:6b:b5:d4:6b:9f:89:93:25: d1:e2:d6:a2:e1:da:6c:12:fb:37:a4:8f:7e:56:bd: 5d:65:b3:14:2e:7a:f1:26:e5:11:8f:a1:70:50:90: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EB:A9:66:3F:BB:70:AF:75:1B:5A:F9:7A:DF:5A:AE:42:09:B2:43 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K-upZj-7cK91G1r5et9arkIJskM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.156.0/22 Signature Algorithm: sha256WithRSAEncryption a6:18:58:66:09:91:c8:10:c9:7d:77:b4:b2:49:f1:38:8c:bc: bd:ce:ed:a9:41:e5:80:f4:9e:f3:4d:6c:e2:2c:e1:20:66:88: 21:1c:8e:48:74:31:7b:5d:8a:04:f3:9f:37:6a:cb:47:42:a9: 91:30:7a:26:2d:04:d4:6e:4c:de:7c:9c:2f:92:2e:b0:18:b9: b1:82:73:05:4c:8d:0f:22:31:5c:00:3a:de:ce:00:a8:96:00: 72:c0:76:43:3d:35:6a:de:ce:29:b8:8f:60:69:7a:f6:3d:76: 9c:be:68:34:ae:df:9b:b4:03:b8:c3:c1:70:67:43:5a:53:10: 89:85:8d:f7:34:2d:ea:6b:36:4f:1e:de:d0:ac:f6:0f:86:6d: 5c:19:98:d6:83:3d:fa:18:d7:54:86:6d:19:74:37:08:d3:3e: 88:77:09:ff:e3:8b:11:7d:c7:05:d1:2d:0e:f0:e1:97:b7:f9: 81:7c:95:20:44:e4:dd:93:5f:27:2c:dc:15:6c:1a:99:48:be: 02:ce:ba:44:8c:9b:a9:96:d1:e3:56:0f:6b:ac:63:f8:dd:4f: 90:83:5f:55:b7:43:12:05:92:fe:b3:5a:ee:3e:b5:ee:ef:69: 4e:42:23:29:d0:f5:19:a8:ad:01:f9:c0:60:38:98:a5:b5:20: 50:e6:ae:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJCRUJBOTY2M0ZCQjcw QUY3NTFCNUFGOTdBREY1QUFFNDIwOUIyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnfca5zjHQZlNLgtb95ufC/YX/aWKd1qhTGmXtRnnULb6TdhF5 zIkSwoOJrl25401z9Hc45C7hDFNEEvFttD/zsYwsxJmUF5T1QYgez8R8/uXWVBFa afbCwVTPm/fBgHnZQ6j4NEHWpUB2xQg6+J7SuWlD2He5adQSd3MTqXpY61BNtCLj md18VZhDUuSpxwwmr75B9n3xUSDZjszrFjeZiAVvmiXsVwLoB3/1/E+WO5XyUFPY 16FCQ488c2eSWj0oKxz7yXeO/gQJuNC/4qyEMNx+CMRaB6RrtdRrn4mTJdHi1qLh 2mwS+zekj35WvV1lsxQuevEm5RGPoXBQkLOvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUK+upZj+7cK91G1r5et9arkIJskMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0stdXBaai03Y0s5MUcxcjVl dDlhcmtJSnNrTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpwwDQYJKoZIhvcNAQELBQADggEBAKYYWGYJkcgQyX13tLJJ8TiMvL3O7alB5YD0 nvNNbOIs4SBmiCEcjkh0MXtdigTznzdqy0dCqZEweiYtBNRuTN58nC+SLrAYubGC cwVMjQ8iMVwAOt7OAKiWAHLAdkM9NWrezim4j2BpevY9dpy+aDSu35u0A7jDwXBn Q1pTEImFjfc0LeprNk8e3tCs9g+GbVwZmNaDPfoY11SGbRl0NwjTPoh3Cf/jixF9 xwXRLQ7w4Ze3+YF8lSBE5N2TXycs3BVsGplIvgLOukSMm6mW0eNWD2usY/jdT5CD X1W3QxIFkv6zWu4+te7vaU5CIynQ9RmorQH5wGA4mKW1IFDmrgY= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org