$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LyEpk8NMPdrGh5anjFe3lbPVgv0.roa File: LyEpk8NMPdrGh5anjFe3lbPVgv0.roa (raw, json) Hash identifier: C2Sd7JbVd+ngpMMwaGXw3JeW5+aeAbisTR8UJ2g8y8Q= Subject key identifier: 2F:21:29:93:C3:4C:3D:DA:C6:87:96:A7:8C:57:B7:95:B3:D5:82:FD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 314E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LyEpk8NMPdrGh5anjFe3lbPVgv0.roa Signing time: Mon 26 Aug 2024 05:30:20 +0000 ROA not before: Mon 26 Aug 2024 05:30:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12622 (0x314e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2F212993C34C3DDAC68796A78C57B795B3D582FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:07:38:6a:26:2d:c5:e0:1f:c2:8d:af:df: 14:3d:ee:c8:e6:25:03:c8:ff:e3:9f:fe:c5:50:4d: ef:2e:c8:a1:a0:aa:aa:df:50:45:09:32:ae:a4:ed: 33:cd:bc:02:29:e7:4c:a6:a6:fb:20:80:52:27:db: c8:2b:a1:6d:79:1f:61:0d:24:e9:ba:f0:26:1a:56: 2d:43:3f:b8:f3:89:e9:cd:1a:0f:27:98:f3:4c:ff: 53:36:3f:16:12:d2:b0:22:b8:a8:d1:be:1b:a8:dd: e5:5c:84:f6:fd:50:29:ee:5d:35:dd:8e:57:26:af: d8:a3:fe:33:45:9f:15:be:98:82:28:ae:ee:d0:98: 8f:88:71:a7:5a:a5:18:65:0b:cd:07:5d:de:87:91: d4:6f:b7:ce:9f:d7:ec:1b:ea:32:6d:80:69:c4:6e: b2:64:c4:fb:39:53:1a:55:f6:5c:f7:e1:e0:42:75: 7a:a8:7a:6f:57:fc:8a:c0:ce:78:24:3e:ad:0f:10: 95:ee:f8:8d:8e:32:dd:62:0e:15:d5:85:2d:5c:55: d7:47:c5:06:07:5e:32:b3:b2:82:1b:78:4c:01:f1: f5:50:43:12:3b:24:20:22:21:b1:bb:63:87:8c:21: 87:f5:d2:e8:65:88:74:e7:d3:93:27:49:07:f8:ca: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:21:29:93:C3:4C:3D:DA:C6:87:96:A7:8C:57:B7:95:B3:D5:82:FD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LyEpk8NMPdrGh5anjFe3lbPVgv0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.115.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:98:9e:47:b6:8e:58:57:fd:c0:e6:06:02:fe:00:0f:fb:6c: 7b:4c:90:a3:f5:b1:10:45:6f:23:71:3d:8c:5d:d0:cc:6a:05: c1:c6:36:04:38:fb:90:b2:92:c3:7b:1e:a8:c9:a9:44:3e:6a: df:3a:47:df:fa:c4:9a:ce:5a:94:0a:79:d2:35:10:85:9e:b9: 53:d5:c0:7f:c8:bd:70:0d:9d:9c:39:b2:d8:a5:9a:bb:0f:38: 61:2f:f3:78:5d:35:ee:c6:f5:6f:b1:14:43:3e:46:b7:cc:f7: cc:98:51:16:75:09:a7:49:24:8f:31:60:b2:7a:bb:4f:82:5d: 44:f0:a9:19:ee:4c:4c:e7:fc:43:1e:8d:1a:a8:f6:9c:c7:73: 1e:18:b5:39:c8:08:62:67:76:8f:4a:49:ce:3e:6a:94:a9:93: ef:ca:7f:fb:eb:ec:68:5d:1c:4f:a1:8c:30:79:4a:f6:a1:4c: 11:8a:05:41:9b:f3:51:0a:7a:7b:c6:24:48:e6:c5:78:2e:7c: 9d:80:29:c9:15:6b:42:0a:b4:47:1e:68:36:65:b7:52:76:8b: e1:67:1a:ba:ac:85:51:88:3d:7f:22:af:4a:ad:0d:df:c6:f1: 8c:7d:74:9a:b0:27:2a:82:95:c0:13:d4:b9:e1:95:fd:0d:4d: bc:86:26:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGMjEyOTkzQzM0QzNE REFDNjg3OTZBNzhDNTdCNzk1QjNENTgyRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuKAc4aiYtxeAfwo2v3xQ97sjmJQPI/+Of/sVQTe8uyKGgqqrf UEUJMq6k7TPNvAIp50ympvsggFIn28groW15H2ENJOm68CYaVi1DP7jzienNGg8n mPNM/1M2PxYS0rAiuKjRvhuo3eVchPb9UCnuXTXdjlcmr9ij/jNFnxW+mIIoru7Q mI+IcadapRhlC80HXd6HkdRvt86f1+wb6jJtgGnEbrJkxPs5UxpV9lz34eBCdXqo em9X/IrAzngkPq0PEJXu+I2OMt1iDhXVhS1cVddHxQYHXjKzsoIbeEwB8fVQQxI7 JCAiIbG7Y4eMIYf10uhliHTn05MnSQf4yrEzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULyEpk8NMPdrGh5anjFe3lbPVgv0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0x5RXBrOE5NUGRyR2g1YW5q RmUzbGJQVmd2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THMwDQYJKoZIhvcNAQELBQADggEBAIuYnke2jlhX/cDmBgL+AA/7bHtMkKP1sRBF byNxPYxd0MxqBcHGNgQ4+5CyksN7HqjJqUQ+at86R9/6xJrOWpQKedI1EIWeuVPV wH/IvXANnZw5stilmrsPOGEv83hdNe7G9W+xFEM+RrfM98yYURZ1CadJJI8xYLJ6 u0+CXUTwqRnuTEzn/EMejRqo9pzHcx4YtTnICGJndo9KSc4+apSpk+/Kf/vr7Ghd HE+hjDB5SvahTBGKBUGb81EKenvGJEjmxXgufJ2AKckVa0IKtEceaDZlt1J2i+Fn GrqshVGIPX8ir0qtDd/G8Yx9dJqwJyqClcAT1Lnhlf0NTbyGJg4= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org