$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhDn-WaJwgY5C99Mjq2C8XQPBwY.roa File: MhDn-WaJwgY5C99Mjq2C8XQPBwY.roa (raw, json) Hash identifier: Fo5DDGKrelOuh1057ruEMaSv0ZnqOGv/8O9ehfDeu64= Subject key identifier: 32:10:E7:F9:66:89:C2:06:39:0B:DF:4C:8E:AD:82:F1:74:0F:07:06 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32CC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhDn-WaJwgY5C99Mjq2C8XQPBwY.roa Signing time: Mon 26 Aug 2024 05:32:02 +0000 ROA not before: Mon 26 Aug 2024 05:32:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13004 (0x32cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3210E7F96689C206390BDF4C8EAD82F1740F0706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:52:49:79:ac:46:84:c5:66:cb:a6:a3:3c: 3d:13:fd:e7:04:99:4f:7f:29:03:1f:3f:42:bc:48: 5c:60:57:db:d6:79:27:6c:eb:a0:e6:24:7b:ac:1d: 86:5a:c5:c8:75:1a:53:ab:3b:75:b4:b9:70:81:28: 69:db:fe:b9:ea:73:f2:f6:0d:24:d4:8f:e5:29:c0: d5:f5:72:78:18:93:f0:bb:f0:c4:06:e3:e6:da:62: af:dc:3c:c0:f3:f0:6e:e1:c6:9f:a0:40:b1:5a:5a: 86:da:88:cb:52:c4:9c:45:b5:0a:92:5c:fc:d7:47: f3:4f:f1:d2:2c:ca:75:58:10:41:bc:64:38:81:73: a5:8d:2b:e5:f3:d5:a7:b6:9d:0a:58:51:f1:72:d7: 3c:11:b4:a2:9f:bf:e9:36:ab:a0:f3:78:6f:17:30: ca:ed:0d:96:fa:d2:85:09:e2:b3:0c:23:67:13:dc: ec:e4:af:69:f0:5b:f1:9a:2b:e6:74:55:84:11:21: 29:96:09:65:38:e8:78:c3:6f:0c:bd:8a:03:c4:19: 17:c1:af:9c:96:e1:ed:49:2c:f5:26:d4:d0:d3:a5: a9:59:70:74:69:28:c3:b6:b1:c7:f1:ff:41:f6:76: 96:30:fb:86:49:0b:6f:fa:9f:de:2e:d2:29:54:4e: 3e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:10:E7:F9:66:89:C2:06:39:0B:DF:4C:8E:AD:82:F1:74:0F:07:06 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhDn-WaJwgY5C99Mjq2C8XQPBwY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.122.0/23 Signature Algorithm: sha256WithRSAEncryption b0:75:65:f2:d6:5a:d9:fa:1c:67:76:18:e9:01:d2:fc:0a:ea: 1e:ed:be:ac:81:d8:17:09:31:70:c0:4f:88:f6:b0:8a:e9:fd: 3b:c4:f6:4b:7a:6c:1e:6e:26:e4:7b:ce:73:3f:93:c9:26:48: d0:16:4f:2b:dc:54:b3:4e:07:cd:84:50:df:98:24:80:2a:74: dd:e4:0c:a5:0d:e8:97:a1:08:56:96:8b:77:2e:9f:47:53:db: 64:7b:5d:ff:c6:5e:67:c2:6e:8b:ed:e4:11:4d:6e:4c:8a:91: c4:bd:53:d0:42:48:f8:81:1f:77:2d:86:55:ba:76:06:c9:60: b2:89:e8:62:c9:44:6b:ae:02:6f:3a:a1:dc:48:60:2b:3f:44: ed:42:43:70:5b:de:bf:ad:b2:82:35:f7:d9:f9:88:c2:d7:75: d3:de:f7:80:07:fb:15:d2:8c:54:39:1f:cc:97:09:7c:fd:ab: 40:62:e2:21:5f:73:4f:2a:b1:69:4c:e6:bd:a5:10:e2:38:1e: d5:6d:8f:26:1d:e8:05:42:42:61:dc:59:bf:65:4d:ab:e2:5d: b2:52:2c:c2:25:4b:87:20:56:9a:38:d3:14:a2:50:6c:28:1c: df:68:5e:6c:bc:90:b9:a6:c1:4b:ce:dc:99:21:9a:6f:30:4e: 02:5b:c4:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyMTBFN0Y5NjY4OUMy MDYzOTBCREY0QzhFQUQ4MkYxNzQwRjA3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCPFJJeaxGhMVmy6ajPD0T/ecEmU9/KQMfP0K8SFxgV9vWeSds 66DmJHusHYZaxch1GlOrO3W0uXCBKGnb/rnqc/L2DSTUj+UpwNX1cngYk/C78MQG 4+baYq/cPMDz8G7hxp+gQLFaWobaiMtSxJxFtQqSXPzXR/NP8dIsynVYEEG8ZDiB c6WNK+Xz1ae2nQpYUfFy1zwRtKKfv+k2q6DzeG8XMMrtDZb60oUJ4rMMI2cT3Ozk r2nwW/GaK+Z0VYQRISmWCWU46HjDbwy9igPEGRfBr5yW4e1JLPUm1NDTpalZcHRp KMO2scfx/0H2dpYw+4ZJC2/6n94u0ilUTj7NAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMhDn+WaJwgY5C99Mjq2C8XQPBwYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01oRG4tV2FKd2dZNUM5OU1q cTJDOFhRUEJ3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6XowDQYJKoZIhvcNAQELBQADggEBALB1ZfLWWtn6HGd2GOkB0vwK6h7tvqyB2BcJ MXDAT4j2sIrp/TvE9kt6bB5uJuR7znM/k8kmSNAWTyvcVLNOB82EUN+YJIAqdN3k DKUN6JehCFaWi3cun0dT22R7Xf/GXmfCbovt5BFNbkyKkcS9U9BCSPiBH3cthlW6 dgbJYLKJ6GLJRGuuAm86odxIYCs/RO1CQ3Bb3r+tsoI199n5iMLXddPe94AH+xXS jFQ5H8yXCXz9q0Bi4iFfc08qsWlM5r2lEOI4HtVtjyYd6AVCQmHcWb9lTaviXbJS LMIlS4cgVpo40xSiUGwoHN9oXmy8kLmmwUvO3Jkhmm8wTgJbxG4= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org