$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MX08OS3YuMJ0RNG_yeYxJvsi8Hg.roa File: MX08OS3YuMJ0RNG_yeYxJvsi8Hg.roa (raw, json) Hash identifier: 1tFJrPETbe+FaDKJ5Ptf/DijPQH2yxPI+fAcXyHu0GY= Subject key identifier: 31:7D:3C:39:2D:D8:B8:C2:74:44:D1:BF:C9:E6:31:26:FB:22:F0:78 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32E5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MX08OS3YuMJ0RNG_yeYxJvsi8Hg.roa Signing time: Mon 26 Aug 2024 05:32:07 +0000 ROA not before: Mon 26 Aug 2024 05:32:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13029 (0x32e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=317D3C392DD8B8C27444D1BFC9E63126FB22F078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:15:5f:22:fe:2a:fd:ea:ae:77:4b:38:45:13: 65:37:c1:cd:e7:fc:84:2b:59:a1:d9:50:e7:a8:e7: 08:76:af:f4:84:9d:4c:07:70:0e:90:4d:c8:4b:eb: 9e:dd:21:6e:50:c7:b7:1a:f7:49:cb:72:79:1f:25: 99:e8:22:00:43:ba:be:d4:7d:e1:47:97:9a:2a:dc: f7:3c:54:ad:91:50:11:c9:64:d9:15:3e:be:63:3d: 31:5f:3f:27:7c:2b:6f:b6:ce:7e:23:5c:8e:57:0a: 15:14:fb:ed:f3:f4:2f:79:32:c5:f3:d0:43:31:fa: f5:3b:8d:be:8c:e1:b9:a6:ba:b9:3c:a7:36:be:4a: 59:45:48:13:9a:7b:ec:0a:12:80:ec:e2:51:5a:87: 09:dd:2f:e8:0c:84:55:0a:f9:98:a8:31:56:51:9f: 37:d3:17:01:9c:af:a2:d4:4f:5b:f4:79:0c:6c:ca: 08:e0:db:68:4d:b2:4d:1f:4f:77:0c:fd:61:0b:04: 94:44:86:98:a2:6c:8f:53:3d:e7:48:a4:84:e5:cd: 87:e2:e6:84:41:61:f6:c7:35:3a:82:7c:0e:ff:3e: 67:23:5f:bc:c5:73:07:b7:2a:28:b1:63:c9:91:b7: a0:95:0d:3f:ce:27:7d:39:fc:11:45:f4:7b:00:f5: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7D:3C:39:2D:D8:B8:C2:74:44:D1:BF:C9:E6:31:26:FB:22:F0:78 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MX08OS3YuMJ0RNG_yeYxJvsi8Hg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.108.0/22 Signature Algorithm: sha256WithRSAEncryption 43:62:05:38:00:cd:f9:57:cd:32:f6:68:ab:0c:d4:ce:f2:f7: 33:bc:7c:df:27:af:10:c4:29:b8:51:45:d5:c7:9a:47:a0:05: 93:a1:44:9b:ad:71:d3:0b:53:25:4c:42:05:88:19:29:55:3d: a1:6e:8d:cf:60:ac:40:ce:04:4f:66:6e:35:eb:0f:cc:5d:be: ac:31:ef:6c:ea:94:cd:c8:ad:7d:f0:ac:8b:02:7e:4a:7e:df: 7e:6a:3e:c2:1e:bf:d1:6f:17:49:fc:bb:8c:b5:3e:b8:61:82: ac:d5:bf:22:2f:84:c4:e3:07:b8:82:ac:8c:57:46:6a:a7:49: 60:0a:99:6b:e8:91:40:e9:5c:de:9f:e8:b4:54:34:b4:93:d7: 2a:e6:1f:96:58:42:41:c6:29:0a:32:8a:ce:fe:e5:af:f3:08: bf:7f:c2:d0:e3:ab:b9:73:fc:c8:8d:cc:55:1b:c5:88:05:02: aa:e0:7e:5f:7d:2b:cc:bf:d2:e9:91:ef:0d:e1:ce:72:f1:12: b8:90:72:a4:5b:d2:85:b7:ea:4b:5c:46:8f:ef:16:23:57:63: 35:d8:47:4f:34:b9:a4:2b:15:c9:a0:e8:d9:eb:64:eb:8f:c6: 6f:98:04:6d:6c:4a:ae:5c:70:37:24:d7:4c:24:ce:4a:20:12: b3:d2:f4:f7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMxN0QzQzM5MkREOEI4 QzI3NDQ0RDFCRkM5RTYzMTI2RkIyMkYwNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvFV8i/ir96q53SzhFE2U3wc3n/IQrWaHZUOeo5wh2r/SEnUwH cA6QTchL657dIW5Qx7ca90nLcnkfJZnoIgBDur7UfeFHl5oq3Pc8VK2RUBHJZNkV Pr5jPTFfPyd8K2+2zn4jXI5XChUU++3z9C95MsXz0EMx+vU7jb6M4bmmurk8pza+ SllFSBOae+wKEoDs4lFahwndL+gMhFUK+ZioMVZRnzfTFwGcr6LUT1v0eQxsygjg 22hNsk0fT3cM/WELBJREhpiibI9TPedIpITlzYfi5oRBYfbHNTqCfA7/PmcjX7zF cwe3KiixY8mRt6CVDT/OJ305/BFF9HsA9UixAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMX08OS3YuMJ0RNG/yeYxJvsi8HgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01YMDhPUzNZdU1KMFJOR195 ZVl4SnZzaThIZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wGwwDQYJKoZIhvcNAQELBQADggEBAENiBTgAzflXzTL2aKsM1M7y9zO8fN8nrxDE KbhRRdXHmkegBZOhRJutcdMLUyVMQgWIGSlVPaFujc9grEDOBE9mbjXrD8xdvqwx 72zqlM3IrX3wrIsCfkp+335qPsIev9FvF0n8u4y1PrhhgqzVvyIvhMTjB7iCrIxX RmqnSWAKmWvokUDpXN6f6LRUNLST1yrmH5ZYQkHGKQoyis7+5a/zCL9/wtDjq7lz /MiNzFUbxYgFAqrgfl99K8y/0umR7w3hznLxEriQcqRb0oW36ktcRo/vFiNXYzXY R080uaQrFcmg6NnrZOuPxm+YBG1sSq5ccDck10wkzkogErPS9Pc= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org