$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa File: MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa (raw, json) Hash identifier: 8HiLG4q9uKOlW1+q72EezuyaMn4YofE9Z8O7WAIpGfg= Subject key identifier: 32:FB:42:AC:67:0E:DE:2E:D2:B8:B4:48:B0:14:97:44:08:B7:69:42 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 317C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa Signing time: Mon 26 Aug 2024 05:30:30 +0000 ROA not before: Mon 26 Aug 2024 05:30:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12668 (0x317c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=32FB42AC670EDE2ED2B8B448B014974408B76942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:25:7e:a2:d6:44:32:10:1d:88:e9:2d:e5: 87:56:0d:e0:99:01:89:c6:74:93:b0:ac:85:d0:23: df:02:81:47:03:11:f6:1f:5a:87:92:7a:99:37:c2: 20:51:8f:71:ff:5d:86:69:2f:0a:78:d6:3a:c8:e1: dd:7e:04:65:ee:62:e9:61:94:6a:df:ad:0e:96:21: c4:83:54:5b:32:9f:41:c7:03:d5:c6:42:03:75:6c: 60:3b:94:81:c9:10:87:d7:5a:ac:dd:04:46:92:fb: e3:79:4c:55:89:0e:57:b8:81:d4:fa:b3:3c:b4:af: fc:b7:ca:b2:1e:c7:65:16:3d:9e:9e:0d:fe:0c:32: 72:f4:e5:60:62:de:76:de:c2:19:d2:9d:5b:c8:af: e6:d8:b2:20:ff:08:db:96:af:fa:99:1c:3c:e5:c6: 2f:93:e5:a6:8e:28:20:4a:8b:82:e2:3c:33:a4:ee: d1:e7:13:a1:eb:ac:ac:8c:76:fc:ab:18:fe:f5:47: a3:8f:34:58:62:83:5e:18:bf:21:34:63:15:ee:61: ab:ff:62:3e:35:6f:0f:3d:6c:61:64:71:de:66:71: 16:fa:3e:6b:bf:43:32:1f:5c:1c:8d:8c:41:a9:14: a0:06:a4:dd:35:58:fe:d4:72:e2:c8:02:c0:21:fc: 3f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FB:42:AC:67:0E:DE:2E:D2:B8:B4:48:B0:14:97:44:08:B7:69:42 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.28.0/22 Signature Algorithm: sha256WithRSAEncryption a4:8b:38:5e:b5:7a:ee:f0:f8:50:4a:f2:a6:f7:29:bf:af:c9: 07:b9:01:7d:dc:1f:7c:b9:bc:07:b1:73:60:5a:78:59:11:44: 71:77:d6:a1:29:19:81:47:dc:55:7a:6f:ad:5a:b8:4d:5d:18: 1d:7e:e5:fc:ee:db:23:29:c7:09:51:36:50:81:c4:71:97:d3: 80:f3:51:48:b8:7a:3b:a8:34:49:d8:98:5f:00:af:bf:b4:94: 2e:ba:75:e7:e0:0c:cd:eb:84:eb:2b:09:99:b2:a8:7c:61:75: 07:36:c7:96:b7:89:6f:e9:fa:ac:6f:ff:a7:00:89:50:aa:96: fb:d7:24:d4:5a:6a:e7:79:17:d9:ea:89:5a:7d:4e:45:e3:68: 5c:d0:9d:b6:d8:e1:f9:a8:6d:50:11:17:a9:05:1c:d8:31:52: 95:a5:5f:d3:76:ad:26:bf:cb:1d:81:37:8d:70:2f:f0:ff:f0: d8:c8:d8:44:71:80:ac:ab:96:9f:8f:8f:b8:c9:de:8d:86:f2: 1f:ab:32:6f:7e:f9:25:b9:7e:bb:bc:28:94:1b:07:64:2b:8e: 1e:d0:84:ed:1a:70:fb:05:10:8c:d3:ef:cc:c8:39:f7:63:aa: 2a:a6:1c:6d:17:1d:50:36:9e:62:9b:85:d3:7b:1d:a1:c6:66: 9d:1d:c1:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyRkI0MkFDNjcwRURF MkVEMkI4QjQ0OEIwMTQ5NzQ0MDhCNzY5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSgyV+otZEMhAdiOkt5YdWDeCZAYnGdJOwrIXQI98CgUcDEfYf WoeSepk3wiBRj3H/XYZpLwp41jrI4d1+BGXuYulhlGrfrQ6WIcSDVFsyn0HHA9XG QgN1bGA7lIHJEIfXWqzdBEaS++N5TFWJDle4gdT6szy0r/y3yrIex2UWPZ6eDf4M MnL05WBi3nbewhnSnVvIr+bYsiD/CNuWr/qZHDzlxi+T5aaOKCBKi4LiPDOk7tHn E6HrrKyMdvyrGP71R6OPNFhig14YvyE0YxXuYav/Yj41bw89bGFkcd5mcRb6Pmu/ QzIfXByNjEGpFKAGpN01WP7UcuLIAsAh/D9HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMvtCrGcO3i7SuLRIsBSXRAi3aUIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL012dENyR2NPM2k3U3VMUklz QlNYUkFpM2FVSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6RwwDQYJKoZIhvcNAQELBQADggEBAKSLOF61eu7w+FBK8qb3Kb+vyQe5AX3cH3y5 vAexc2BaeFkRRHF31qEpGYFH3FV6b61auE1dGB1+5fzu2yMpxwlRNlCBxHGX04Dz UUi4ejuoNEnYmF8Ar7+0lC66defgDM3rhOsrCZmyqHxhdQc2x5a3iW/p+qxv/6cA iVCqlvvXJNRaaud5F9nqiVp9TkXjaFzQnbbY4fmobVARF6kFHNgxUpWlX9N2rSa/ yx2BN41wL/D/8NjI2ERxgKyrlp+Pj7jJ3o2G8h+rMm9++SW5fru8KJQbB2Qrjh7Q hO0acPsFEIzT78zIOfdjqiqmHG0XHVA2nmKbhdN7HaHGZp0dwf0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:51 2024 by rpki-client on console-ams.rpki-client.org