$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OO4VBcBke2sNqtk_JKNc_x8asZw.roa File: OO4VBcBke2sNqtk_JKNc_x8asZw.roa (raw, json) Hash identifier: etyZ2wI+TGhXh36e6G60a92BZGiNAVR+4EgK/7KoKlk= Subject key identifier: 38:EE:15:05:C0:64:7B:6B:0D:AA:D9:3F:24:A3:5C:FF:1F:1A:B1:9C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 310E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OO4VBcBke2sNqtk_JKNc_x8asZw.roa Signing time: Mon 26 Aug 2024 05:30:04 +0000 ROA not before: Mon 26 Aug 2024 05:30:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12558 (0x310e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=38EE1505C0647B6B0DAAD93F24A35CFF1F1AB19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:2f:31:f8:b3:15:66:75:ef:07:18:bb:b7: 47:13:82:bd:8d:47:ee:bb:2d:ec:49:81:7c:54:16: 84:a9:9d:2e:70:6f:ce:00:45:8c:f4:01:eb:35:18: f9:b4:a1:61:a3:61:9d:d4:74:39:5f:50:44:8d:7e: db:bc:83:34:88:de:74:8e:be:b1:96:03:a7:91:62: 23:bc:eb:31:35:e1:13:75:9c:dc:dd:b0:c6:e7:e6: a2:39:40:ed:9f:8d:cc:54:1e:4c:9c:09:ae:9c:68: a8:53:d3:8d:12:4a:35:b0:df:96:6e:61:1e:14:d7: fc:b8:c1:be:c5:37:b9:6a:93:b6:84:a3:13:85:8a: 90:e3:19:26:b3:cf:d0:d2:fc:71:91:fe:c1:f7:3b: a1:df:04:35:31:24:29:b0:2a:6c:17:1d:cd:20:75: d2:75:af:70:7b:4e:a7:0f:d4:35:e1:ba:4d:a2:0a: bf:65:09:11:89:bf:17:29:fb:63:23:32:96:77:0a: 87:1f:ad:2c:17:b2:e6:43:ed:5f:b6:6e:0f:72:44: fe:1b:f4:82:1b:5d:7d:d0:1e:81:51:f8:de:eb:1c: 23:a0:77:80:f0:2b:2b:d6:d1:f9:e5:b9:af:1b:89: e9:a5:fa:62:ba:0e:07:49:31:94:83:a5:ac:7c:90: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EE:15:05:C0:64:7B:6B:0D:AA:D9:3F:24:A3:5C:FF:1F:1A:B1:9C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OO4VBcBke2sNqtk_JKNc_x8asZw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.36.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:5c:2e:53:3b:5e:7e:86:d7:1a:d9:e3:dc:2d:7c:cd:70:8d: ba:33:f4:7e:cc:b4:3b:b3:43:a2:6c:48:d3:c7:79:12:56:33: 27:a4:6d:30:f2:45:a5:be:f5:b5:8a:06:9e:f9:64:bc:13:cd: 30:64:fb:44:2c:e6:f4:3f:b1:3d:37:9a:9a:10:af:44:e1:f6: 13:45:d5:8c:cb:8b:06:72:04:c3:85:c7:00:21:55:55:e9:aa: aa:e1:8a:3b:da:6c:b4:df:03:c8:1f:f4:0c:aa:c7:1b:37:be: 53:ca:86:ba:74:e9:bd:3d:18:11:33:82:45:e1:75:d1:fa:f2: f3:2c:79:6e:76:1d:d6:b1:95:8d:79:b7:3f:e5:c3:42:3a:26: 4c:86:b1:ef:d4:b7:c0:a3:27:53:e1:96:48:0e:2c:5f:17:2a: d2:57:e2:fc:86:97:90:ae:99:78:03:93:30:65:2e:97:0d:cc: 3c:5d:66:92:ec:91:fe:f7:4f:50:01:bc:07:99:fe:d3:d5:c3: e4:5e:3b:ea:4c:7c:ea:13:1c:a6:ee:f8:29:e1:aa:fb:81:49: 15:45:cd:28:22:59:d0:83:a8:c7:d0:c0:88:e6:15:fc:b6:f7: 28:de:b7:5c:11:aa:ec:15:66:c3:91:0a:4c:9c:9e:9f:97:1f: 83:99:97:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM4RUUxNTA1QzA2NDdC NkIwREFBRDkzRjI0QTM1Q0ZGMUYxQUIxOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiSC8x+LMVZnXvBxi7t0cTgr2NR+67LexJgXxUFoSpnS5wb84A RYz0Aes1GPm0oWGjYZ3UdDlfUESNftu8gzSI3nSOvrGWA6eRYiO86zE14RN1nNzd sMbn5qI5QO2fjcxUHkycCa6caKhT040SSjWw35ZuYR4U1/y4wb7FN7lqk7aEoxOF ipDjGSazz9DS/HGR/sH3O6HfBDUxJCmwKmwXHc0gddJ1r3B7TqcP1DXhuk2iCr9l CRGJvxcp+2MjMpZ3CocfrSwXsuZD7V+2bg9yRP4b9IIbXX3QHoFR+N7rHCOgd4Dw KyvW0fnlua8bieml+mK6DgdJMZSDpax8kE+XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOO4VBcBke2sNqtk/JKNc/x8asZwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09PNFZCY0JrZTJzTnF0a19K S05jX3g4YXNady5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6CQwDQYJKoZIhvcNAQELBQADggEBAJtcLlM7Xn6G1xrZ49wtfM1wjboz9H7MtDuz Q6JsSNPHeRJWMyekbTDyRaW+9bWKBp75ZLwTzTBk+0Qs5vQ/sT03mpoQr0Th9hNF 1YzLiwZyBMOFxwAhVVXpqqrhijvabLTfA8gf9Ayqxxs3vlPKhrp06b09GBEzgkXh ddH68vMseW52HdaxlY15tz/lw0I6JkyGse/Ut8CjJ1PhlkgOLF8XKtJX4vyGl5Cu mXgDkzBlLpcNzDxdZpLskf73T1ABvAeZ/tPVw+ReO+pMfOoTHKbu+CnhqvuBSRVF zSgiWdCDqMfQwIjmFfy29yjet1wRquwVZsORCkycnp+XH4OZl0k= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org