$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O-YUk6B2ycO-sPjUPbbQZxax5bE.roa File: O-YUk6B2ycO-sPjUPbbQZxax5bE.roa (raw, json) Hash identifier: k9FTE5raHkdwD1IDn3qdjYysLvbatXunp0ZnaZyh5Mg= Subject key identifier: 3B:E6:14:93:A0:76:C9:C3:BE:B0:F8:D4:3D:B6:D0:67:16:B1:E5:B1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30B2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O-YUk6B2ycO-sPjUPbbQZxax5bE.roa Signing time: Mon 26 Aug 2024 05:29:44 +0000 ROA not before: Mon 26 Aug 2024 05:29:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12466 (0x30b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3BE61493A076C9C3BEB0F8D43DB6D06716B1E5B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:a9:d5:c3:59:6c:ff:88:44:00:dd:1d:59: aa:57:3a:d7:fd:c1:8f:1a:70:06:42:9e:bd:c3:86: f4:6d:88:16:6c:a1:89:61:3c:4e:6b:3b:1d:bc:e0: e4:60:e8:a0:07:9b:c1:c9:4e:fd:3f:7e:d6:eb:ee: 6b:e4:e6:db:dc:51:da:cd:39:d1:d6:aa:83:a7:13: e5:d0:29:77:57:5d:7a:62:c3:82:a4:84:54:77:00: a2:e5:cb:3c:7b:d5:bd:2e:98:b1:20:47:36:33:2e: ea:0f:59:56:34:45:b9:d6:39:5d:03:ca:dc:01:04: 63:df:d5:e5:e2:96:17:ff:8c:4c:31:e1:3f:62:5e: c0:7d:fa:ec:c4:5c:ca:15:98:9f:59:4d:e8:f9:73: 7a:4d:ed:76:d6:05:ff:35:32:8d:6d:07:92:fd:5a: bb:c0:67:64:4d:fc:fc:45:da:88:66:d2:63:89:53: 97:66:32:af:37:b8:b5:c8:51:87:0a:1a:af:7c:d7: 72:bc:1b:c5:9d:44:f8:74:a4:50:b9:1e:e9:d9:d0: 03:6b:9b:c8:6a:c7:d2:35:a5:6f:57:37:ed:d9:96: 91:3e:36:75:c3:e3:bd:02:fb:67:3b:41:99:c8:89: 05:c9:19:a6:33:1e:a9:ff:74:5f:de:be:41:30:5e: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E6:14:93:A0:76:C9:C3:BE:B0:F8:D4:3D:B6:D0:67:16:B1:E5:B1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O-YUk6B2ycO-sPjUPbbQZxax5bE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.56.0/21 Signature Algorithm: sha256WithRSAEncryption 98:fa:d9:4b:64:27:6c:3c:cc:03:75:60:63:dd:4f:a0:06:dd: 87:0d:8d:fb:96:31:40:01:32:51:8c:00:e3:76:59:f4:25:ec: bd:fa:67:53:bc:f6:1a:bb:fe:24:ee:69:c4:cb:de:ab:bc:10: e7:93:e7:25:3f:12:1f:91:87:4c:de:2d:36:72:49:85:34:99: a2:8b:68:62:58:d2:61:23:fb:fa:d5:11:5e:44:6e:ef:cd:41: 8a:82:dc:c2:52:cc:a7:32:76:d9:55:e0:d1:47:b0:15:cb:30: f7:36:8a:c4:8c:41:e0:00:46:1a:56:75:93:64:75:de:85:e7: 93:39:a8:d7:b7:71:c0:f0:3b:e5:11:b1:08:cb:20:f8:11:d0: e4:ff:aa:db:94:70:bf:d2:61:24:01:c0:73:a7:24:53:86:8a: 8c:8f:40:69:0a:e7:02:3a:66:83:e2:50:15:39:d2:85:8c:b9: 2c:91:6b:13:f8:39:04:69:c2:c7:84:12:36:30:d9:c0:b2:fe: 46:2a:d2:37:80:06:04:f1:b4:0c:92:d7:51:0c:d0:9d:c9:6e: 55:cd:f7:07:c0:e7:93:2b:73:83:1b:8e:09:bf:76:c2:85:4e: 8a:20:bd:f3:9c:23:2d:cc:4c:1d:d6:65:8f:be:89:2d:70:d2: c0:ca:ce:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCRTYxNDkzQTA3NkM5 QzNCRUIwRjhENDNEQjZEMDY3MTZCMUU1QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5wanVw1ls/4hEAN0dWapXOtf9wY8acAZCnr3DhvRtiBZsoYlh PE5rOx284ORg6KAHm8HJTv0/ftbr7mvk5tvcUdrNOdHWqoOnE+XQKXdXXXpiw4Kk hFR3AKLlyzx71b0umLEgRzYzLuoPWVY0RbnWOV0DytwBBGPf1eXilhf/jEwx4T9i XsB9+uzEXMoVmJ9ZTej5c3pN7XbWBf81Mo1tB5L9WrvAZ2RN/PxF2ohm0mOJU5dm Mq83uLXIUYcKGq9813K8G8WdRPh0pFC5HunZ0ANrm8hqx9I1pW9XN+3ZlpE+NnXD 470C+2c7QZnIiQXJGaYzHqn/dF/evkEwXvS7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUO+YUk6B2ycO+sPjUPbbQZxax5bEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL08tWVVrNkIyeWNPLXNQalVQ YmJRWnhheDViRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wjgwDQYJKoZIhvcNAQELBQADggEBAJj62UtkJ2w8zAN1YGPdT6AG3YcNjfuWMUAB MlGMAON2WfQl7L36Z1O89hq7/iTuacTL3qu8EOeT5yU/Eh+Rh0zeLTZySYU0maKL aGJY0mEj+/rVEV5Ebu/NQYqC3MJSzKcydtlV4NFHsBXLMPc2isSMQeAARhpWdZNk dd6F55M5qNe3ccDwO+URsQjLIPgR0OT/qtuUcL/SYSQBwHOnJFOGioyPQGkK5wI6 ZoPiUBU50oWMuSyRaxP4OQRpwseEEjYw2cCy/kYq0jeABgTxtAyS11EM0J3JblXN 9wfA55Mrc4Mbjgm/dsKFToogvfOcIy3MTB3WZY++iS1w0sDKzrg= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org