$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KKu-4gTzXgc1aZFAWVkSIHPLLHs.roa File: KKu-4gTzXgc1aZFAWVkSIHPLLHs.roa (raw, json) Hash identifier: nSdT8sesBYXEKHfabl7iRAkAoLHCVeHEbpr01uhrkB8= Subject key identifier: 28:AB:BE:E2:04:F3:5E:07:35:69:91:40:59:59:12:20:73:CB:2C:7B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3224 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KKu-4gTzXgc1aZFAWVkSIHPLLHs.roa Signing time: Mon 26 Aug 2024 05:31:19 +0000 ROA not before: Mon 26 Aug 2024 05:31:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12836 (0x3224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=28ABBEE204F35E07356991405959122073CB2C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:f6:2d:e3:a6:ef:5b:f8:27:59:83:67:3f: d1:1d:ed:74:5a:5f:38:a3:b8:93:9f:61:24:8e:d8: ac:8c:8d:ae:c4:40:06:20:8c:ff:08:3f:e1:2d:19: 4b:f6:b0:e8:9e:8b:30:a3:89:7c:db:dc:97:52:79: 9a:7e:89:4d:c4:02:f9:22:b5:cd:61:a7:50:53:11: 0d:18:02:cc:76:5a:31:83:38:c7:98:c8:c4:df:de: c7:75:af:b8:1f:42:e6:d8:96:bb:0a:e8:2a:83:a2: b2:32:ec:3e:78:fd:92:46:24:19:66:cd:94:94:e0: 2e:e0:d7:af:39:fb:88:60:8f:d0:94:54:cd:f0:8b: 80:4a:41:7e:ba:8f:51:78:bb:c3:53:99:21:6c:af: b6:e4:e4:c6:80:6a:b8:ac:2c:5c:95:c9:b5:2a:38: cf:a0:a8:bf:cb:0b:cf:7a:97:8d:f4:01:c9:fb:3a: 6f:76:d1:b4:f5:94:c5:62:8b:53:76:0a:1f:6d:61: fe:3e:3c:24:72:08:26:10:3c:fc:f2:91:6c:72:6d: 0c:bf:23:5b:ad:85:1a:2e:ad:6a:86:74:2a:26:df: 43:d8:1d:92:7f:31:60:27:a0:89:a7:41:c6:c6:17: 73:bc:fa:7b:bc:61:67:5e:77:4e:fd:d2:a5:fa:e8: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AB:BE:E2:04:F3:5E:07:35:69:91:40:59:59:12:20:73:CB:2C:7B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KKu-4gTzXgc1aZFAWVkSIHPLLHs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.248.0/22 Signature Algorithm: sha256WithRSAEncryption 14:92:fd:fb:44:0b:2f:14:ac:1d:46:b2:bb:04:73:cb:06:3e: 9f:55:9f:75:11:30:32:f7:ac:bb:0d:a0:2c:93:70:7c:ba:1a: cc:bc:fc:9c:94:9f:d8:43:f5:3a:a6:d3:9c:0f:89:28:e9:5e: 86:42:e1:e9:8c:b4:f9:33:1b:36:9b:d1:a9:f4:d9:29:7f:6e: b5:f2:9d:9a:f9:02:7d:ec:9c:bd:bd:e4:a3:c1:cb:3a:df:7b: 86:26:09:e2:93:e3:9b:10:56:18:16:53:88:9b:fb:46:f6:2c: 5d:f2:c2:80:1f:de:cb:56:e8:38:42:6f:2d:da:5f:8d:b9:b8: 70:68:5e:15:10:89:56:34:3c:c4:90:31:e4:9b:be:38:5c:5b: 64:58:7a:a1:16:cb:bf:a0:f0:29:bf:fa:fc:cf:b9:0b:d5:28: c9:0a:77:80:7e:01:77:ff:d5:82:e0:27:26:88:39:7f:ea:44: c7:2f:9e:9d:3d:fa:62:d2:bc:e3:c5:32:35:91:c8:c2:70:be: 5c:97:1e:77:41:92:54:90:97:7c:26:af:e5:05:b1:31:53:16: 37:d5:2a:27:f4:90:8c:d4:1b:e5:a1:44:6f:61:3b:c9:9f:b9: b0:62:7d:c6:de:d3:77:1e:30:6b:a3:c3:71:f4:49:61:08:ba: fa:5a:a4:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI4QUJCRUUyMDRGMzVF MDczNTY5OTE0MDU5NTkxMjIwNzNDQjJDN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBPvYt46bvW/gnWYNnP9Ed7XRaXzijuJOfYSSO2KyMja7EQAYg jP8IP+EtGUv2sOieizCjiXzb3JdSeZp+iU3EAvkitc1hp1BTEQ0YAsx2WjGDOMeY yMTf3sd1r7gfQubYlrsK6CqDorIy7D54/ZJGJBlmzZSU4C7g1685+4hgj9CUVM3w i4BKQX66j1F4u8NTmSFsr7bk5MaAarisLFyVybUqOM+gqL/LC896l430Acn7Om92 0bT1lMVii1N2Ch9tYf4+PCRyCCYQPPzykWxybQy/I1uthRourWqGdCom30PYHZJ/ MWAnoImnQcbGF3O8+nu8YWded0790qX66HoPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKKu+4gTzXgc1aZFAWVkSIHPLLHswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tLdS00Z1R6WGdjMWFaRkFX VmtTSUhQTExIcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w/gwDQYJKoZIhvcNAQELBQADggEBABSS/ftECy8UrB1GsrsEc8sGPp9Vn3URMDL3 rLsNoCyTcHy6Gsy8/JyUn9hD9Tqm05wPiSjpXoZC4emMtPkzGzab0an02Sl/brXy nZr5An3snL295KPByzrfe4YmCeKT45sQVhgWU4ib+0b2LF3ywoAf3stW6DhCby3a X425uHBoXhUQiVY0PMSQMeSbvjhcW2RYeqEWy7+g8Cm/+vzPuQvVKMkKd4B+AXf/ 1YLgJyaIOX/qRMcvnp09+mLSvOPFMjWRyMJwvlyXHndBklSQl3wmr+UFsTFTFjfV Kif0kIzUG+WhRG9hO8mfubBifcbe03ceMGujw3H0SWEIuvpapL4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:37 2024 by rpki-client on console-ams.rpki-client.org