$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NeZ7exQVsG3id5nfdS0WwWbfEcg.roa File: NeZ7exQVsG3id5nfdS0WwWbfEcg.roa (raw, json) Hash identifier: 3fd+TtMqX2giRdPQP8mckmqLid3fPKSSNsVb1BHtjCE= Subject key identifier: 35:E6:7B:7B:14:15:B0:6D:E2:77:99:DF:75:2D:16:C1:66:DF:11:C8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FD8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NeZ7exQVsG3id5nfdS0WwWbfEcg.roa Signing time: Mon 26 Aug 2024 05:28:54 +0000 ROA not before: Mon 26 Aug 2024 05:28:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.195.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12248 (0x2fd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=35E67B7B1415B06DE27799DF752D16C166DF11C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:ca:54:06:93:3d:d6:fa:d6:0d:76:0b:f3: b0:9e:ee:a5:2a:9a:9d:d2:74:54:69:29:44:7b:03: 13:87:8a:58:fa:20:26:91:e4:23:7e:aa:fa:66:41: 1a:d1:23:dd:9d:8e:9e:c5:8c:83:55:1a:d8:11:22: fc:5f:e4:71:ae:39:13:48:5c:77:b4:90:96:4c:c9: a3:36:21:9d:43:0d:d2:94:25:f7:e9:85:49:64:3b: 94:43:3d:18:4f:d4:da:aa:11:e6:1a:23:af:d8:65: b9:42:8f:66:19:e7:95:84:0e:d7:63:cd:c6:a1:36: 87:59:73:13:ff:5f:9b:e2:80:28:70:a0:97:75:87: 53:d9:00:8f:fd:25:1a:37:51:78:11:b9:a5:fa:f9: c1:0f:99:ef:96:ce:92:24:30:90:fd:fe:b8:8b:98: 47:29:e1:81:66:25:fe:7e:54:47:d7:fb:65:8b:02: 70:df:62:6e:a0:a5:60:53:69:d7:0f:b2:5b:ab:4d: 9c:d6:f2:79:e7:c4:c1:d9:18:b6:7b:08:25:00:4c: 69:54:c7:47:31:8e:c4:37:45:5e:5c:3c:76:14:16: 44:b1:ea:26:49:61:b8:25:e4:1b:ab:6d:93:77:ca: 47:c2:0d:1d:b7:fd:37:12:fe:3e:61:ae:a3:e7:b3: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E6:7B:7B:14:15:B0:6D:E2:77:99:DF:75:2D:16:C1:66:DF:11:C8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NeZ7exQVsG3id5nfdS0WwWbfEcg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.244.0/24 Signature Algorithm: sha256WithRSAEncryption 55:04:33:11:35:be:57:6d:ed:3c:bb:b7:5b:79:60:73:99:97: c7:55:e9:ef:07:18:3f:f3:05:5b:e4:2d:05:3d:2e:0e:75:bd: 98:e0:cf:e8:bf:56:39:74:81:31:aa:36:4f:98:ff:9a:50:55: b9:40:02:a4:85:f5:ef:24:f7:ee:a2:50:31:d0:48:61:d8:60: cb:10:00:c0:94:53:cd:05:0a:c0:21:47:e1:4d:c7:40:35:cc: ef:38:7f:07:7f:f3:d1:0c:09:90:87:a9:99:f6:44:b7:ac:95: cd:98:13:1e:4e:44:c6:47:1e:28:65:37:41:76:16:e7:e6:36: 45:4c:63:b7:b2:90:fc:a8:be:c5:f0:b3:0d:2b:2a:27:9f:a8: d2:45:e6:1b:40:f7:9b:54:33:11:a2:57:c8:ce:38:cd:56:0d: 3a:c3:57:7c:36:86:1d:fb:7f:38:52:ab:05:b7:61:7f:2c:50: c1:96:db:d3:39:5b:87:b3:4c:ff:e6:47:9b:c5:d7:68:32:3a: b4:da:19:c6:12:a2:f5:2b:68:39:a0:a2:24:c1:bf:3f:07:fe: 08:a5:05:0a:c3:0d:25:a0:de:a6:a2:be:a6:19:1a:a7:43:50: 31:9c:6b:af:4c:6b:be:5f:c8:00:44:b6:47:40:eb:80:5d:ad: 21:99:e4:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1RTY3QjdCMTQxNUIw NkRFMjc3OTlERjc1MkQxNkMxNjZERjExQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI+8pUBpM91vrWDXYL87Ce7qUqmp3SdFRpKUR7AxOHilj6ICaR 5CN+qvpmQRrRI92djp7FjINVGtgRIvxf5HGuORNIXHe0kJZMyaM2IZ1DDdKUJffp hUlkO5RDPRhP1NqqEeYaI6/YZblCj2YZ55WEDtdjzcahNodZcxP/X5vigChwoJd1 h1PZAI/9JRo3UXgRuaX6+cEPme+WzpIkMJD9/riLmEcp4YFmJf5+VEfX+2WLAnDf Ym6gpWBTadcPslurTZzW8nnnxMHZGLZ7CCUATGlUx0cxjsQ3RV5cPHYUFkSx6iZJ Ybgl5BurbZN3ykfCDR23/TcS/j5hrqPns7i7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNeZ7exQVsG3id5nfdS0WwWbfEcgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05lWjdleFFWc0czaWQ1bmZk UzBXd1diZkVjZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w/QwDQYJKoZIhvcNAQELBQADggEBAFUEMxE1vldt7Ty7t1t5YHOZl8dV6e8HGD/z BVvkLQU9Lg51vZjgz+i/Vjl0gTGqNk+Y/5pQVblAAqSF9e8k9+6iUDHQSGHYYMsQ AMCUU80FCsAhR+FNx0A1zO84fwd/89EMCZCHqZn2RLeslc2YEx5ORMZHHihlN0F2 FufmNkVMY7eykPyovsXwsw0rKiefqNJF5htA95tUMxGiV8jOOM1WDTrDV3w2hh37 fzhSqwW3YX8sUMGW29M5W4ezTP/mR5vF12gyOrTaGcYSovUraDmgoiTBvz8H/gil BQrDDSWg3qaivqYZGqdDUDGca69Ma75fyABEtkdA64BdrSGZ5Gc= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:19 2024 by rpki-client on console-ams.rpki-client.org