$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NfxwYsgjkgkVjpgfL70lEtHRw3Q.roa File: NfxwYsgjkgkVjpgfL70lEtHRw3Q.roa (raw, json) Hash identifier: qq6q/S2E/lEExtIT449BeGPk2SCBP6YKF6/E+qtnaMc= Subject key identifier: 35:FC:70:62:C8:23:92:09:15:8E:98:1F:2F:BD:25:12:D1:D1:C3:74 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3047 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NfxwYsgjkgkVjpgfL70lEtHRw3Q.roa Signing time: Mon 26 Aug 2024 05:29:19 +0000 ROA not before: Mon 26 Aug 2024 05:29:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12359 (0x3047) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=35FC7062C8239209158E981F2FBD2512D1D1C374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:69:24:81:7b:9f:fb:4a:22:67:a2:0a:68: 0d:eb:31:01:b7:24:ff:26:12:0a:19:0a:e8:07:a2: 9d:9b:74:90:36:20:03:f2:9d:a4:e8:94:25:20:87: 0e:7c:5b:ee:08:4e:4e:5c:14:ba:56:4c:97:28:34: 54:b7:c0:63:80:48:a2:5a:17:e8:c9:98:6c:e4:95: 88:00:da:1a:d6:ca:17:11:0b:1f:cd:a0:24:76:fd: f2:e9:b1:9f:dd:4d:9d:23:60:aa:6b:de:2f:97:ac: 08:b7:41:ed:6c:71:d0:f6:5c:60:8f:ef:1d:bd:53: 49:75:e3:6a:bb:d5:e8:54:dd:1b:93:ff:ec:1f:9b: c7:b1:0d:61:74:8e:30:fd:f3:f0:ad:0a:93:30:6c: 6c:eb:bd:5c:88:e8:52:4f:de:63:a5:e1:6e:0b:99: 4b:b7:55:00:0e:8e:ba:f1:f9:49:b6:87:63:d3:86: b6:3b:64:48:45:1e:ab:a4:6e:53:68:44:94:17:3b: 25:4e:52:f9:56:73:30:99:e5:9d:d3:93:7a:05:00: 19:d8:aa:53:c1:63:73:0e:21:94:6e:1b:6d:bd:ad: 91:11:64:18:dd:1f:ce:b7:59:e8:cf:ff:12:a2:61: 71:bc:0a:85:f5:14:44:d9:95:28:29:2d:8d:c7:a5: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FC:70:62:C8:23:92:09:15:8E:98:1F:2F:BD:25:12:D1:D1:C3:74 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NfxwYsgjkgkVjpgfL70lEtHRw3Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.188.0/22 Signature Algorithm: sha256WithRSAEncryption a7:da:d2:06:54:7b:bb:1e:ce:a0:36:c2:b2:2f:0d:61:35:91: 4f:6f:b7:1d:b7:38:51:36:2e:a5:48:42:56:36:da:ad:7b:3c: 6b:31:f2:91:60:92:41:4a:28:de:37:87:54:f3:55:9b:04:8e: 7d:45:5f:9c:2b:ee:f8:aa:d3:fa:24:40:7a:16:f9:1d:6b:fb: 68:0c:3d:16:9d:9e:9c:ee:dc:f2:66:a2:2f:1a:5a:87:f9:0a: 7d:29:88:02:cd:08:c2:6a:0a:40:78:83:f5:6a:e2:eb:8e:16: 9e:01:6e:5a:6f:19:4b:c5:d8:4b:fd:b5:fd:e0:c1:97:d6:e4: cd:41:8e:44:ac:d0:55:2d:2b:d4:72:cc:8a:ed:ee:97:ef:06: 6a:b3:91:db:ff:da:8b:a1:e0:f3:80:fa:c8:1e:0a:bb:c7:3f: 56:48:59:a0:20:26:3e:26:18:74:4c:08:c1:dd:c5:f3:f5:b2: 60:a3:6a:ab:7c:82:01:01:6c:d9:03:6c:f3:13:d5:9a:23:c3: 47:85:78:85:f5:74:2b:35:bb:0a:ff:16:5a:a6:cd:03:ae:70: 03:1f:c9:16:56:3f:19:b5:35:72:34:04:ac:82:5b:72:99:69: 33:1c:5b:a8:62:da:6c:f9:00:56:f3:c6:5e:f1:14:34:48:c7: d2:3b:0c:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1RkM3MDYyQzgyMzky MDkxNThFOTgxRjJGQkQyNTEyRDFEMUMzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9yGkkgXuf+0oiZ6IKaA3rMQG3JP8mEgoZCugHop2bdJA2IAPy naTolCUghw58W+4ITk5cFLpWTJcoNFS3wGOASKJaF+jJmGzklYgA2hrWyhcRCx/N oCR2/fLpsZ/dTZ0jYKpr3i+XrAi3Qe1scdD2XGCP7x29U0l142q71ehU3RuT/+wf m8exDWF0jjD98/CtCpMwbGzrvVyI6FJP3mOl4W4LmUu3VQAOjrrx+Um2h2PThrY7 ZEhFHqukblNoRJQXOyVOUvlWczCZ5Z3Tk3oFABnYqlPBY3MOIZRuG229rZERZBjd H863WejP/xKiYXG8CoX1FETZlSgpLY3HpZYfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNfxwYsgjkgkVjpgfL70lEtHRw3QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05meHdZc2dqa2drVmpwZ2ZM NzBsRXRIUnczUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wLwwDQYJKoZIhvcNAQELBQADggEBAKfa0gZUe7sezqA2wrIvDWE1kU9vtx23OFE2 LqVIQlY22q17PGsx8pFgkkFKKN43h1TzVZsEjn1FX5wr7viq0/okQHoW+R1r+2gM PRadnpzu3PJmoi8aWof5Cn0piALNCMJqCkB4g/Vq4uuOFp4BblpvGUvF2Ev9tf3g wZfW5M1BjkSs0FUtK9RyzIrt7pfvBmqzkdv/2ouh4POA+sgeCrvHP1ZIWaAgJj4m GHRMCMHdxfP1smCjaqt8ggEBbNkDbPMT1Zojw0eFeIX1dCs1uwr/FlqmzQOucAMf yRZWPxm1NXI0BKyCW3KZaTMcW6hi2mz5AFbzxl7xFDRIx9I7DAA= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org