$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O_Ji8szd0z6mNqBqOPU4qKYTxfs.roa File: O_Ji8szd0z6mNqBqOPU4qKYTxfs.roa (raw, json) Hash identifier: klZwPgYfBZzuy5tcsdmQot1jcXuiMhhnCA4SKZy7HM0= Subject key identifier: 3B:F2:62:F2:CC:DD:D3:3E:A6:36:A0:6A:38:F5:38:A8:A6:13:C5:FB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 305C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O_Ji8szd0z6mNqBqOPU4qKYTxfs.roa Signing time: Mon 26 Aug 2024 05:29:23 +0000 ROA not before: Mon 26 Aug 2024 05:29:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12380 (0x305c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3BF262F2CCDDD33EA636A06A38F538A8A613C5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:58:e4:11:dc:19:ff:fb:d4:4b:b0:59:da: fa:d2:22:ba:19:e1:52:fd:1f:81:9c:d3:81:be:2b: c9:40:63:c8:e2:8c:b6:8c:8b:8b:99:41:12:c8:34: 7d:05:93:ff:0a:ca:28:30:e2:ee:96:09:d8:67:5e: b7:27:76:64:0f:21:67:8e:0a:bb:f7:70:e1:98:3c: 10:10:35:36:e1:9b:b3:f5:e7:f1:7b:bd:ec:ad:5b: ea:a3:a0:a6:a2:fc:cf:35:12:78:cd:6f:8d:cf:4b: 38:07:e3:c3:21:17:b7:50:37:5a:ed:9a:24:40:6a: 7f:1a:9c:ce:0a:a3:d9:13:41:63:5e:64:09:5e:b4: e8:ab:61:23:c5:ec:b2:9b:88:d2:39:cd:ef:03:e3: 3e:0a:65:6f:44:2b:81:e6:9c:08:ee:ac:e0:fb:ce: 79:7e:b5:16:63:92:55:7c:0a:a4:f7:8f:4c:c5:61: 95:16:fd:4e:43:63:4e:f0:bf:4a:4b:53:58:b3:cc: 35:d2:58:1e:fb:f4:7f:cb:55:6f:69:12:20:86:d5: a9:13:69:8f:4f:4a:bb:00:6d:af:f8:2f:38:18:11: 47:e8:ef:50:c9:64:84:ac:8d:22:b2:bc:78:5d:e3: af:5c:ae:74:21:bc:5a:30:68:0b:ef:6d:59:6a:7d: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F2:62:F2:CC:DD:D3:3E:A6:36:A0:6A:38:F5:38:A8:A6:13:C5:FB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O_Ji8szd0z6mNqBqOPU4qKYTxfs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.9.0/24 Signature Algorithm: sha256WithRSAEncryption 28:f8:1e:75:b4:2e:3f:36:f0:05:5b:dc:d4:49:e7:2f:d9:af: ae:b1:ff:b7:a5:30:bb:12:d2:db:8b:25:b6:4e:6b:e1:64:53: c4:6d:d9:37:20:49:40:1a:c0:cb:05:bd:64:9a:83:93:c9:9c: 54:b2:1c:9f:d8:10:80:d9:30:30:67:25:01:84:ef:3f:09:a7: b8:dd:9f:ef:dc:53:0e:93:6b:23:83:44:f1:98:69:e6:6b:9a: 3c:a0:67:1e:97:b2:8b:55:00:4d:95:84:b7:33:86:d2:44:0f: f9:67:07:6b:6f:f9:c7:b0:47:16:80:eb:8c:b5:c8:fe:f9:b6: ae:68:51:e0:fc:23:47:9d:57:6f:ff:05:d8:b3:c2:fd:c0:22: d3:dc:08:04:9b:33:35:1b:db:48:4d:b3:cd:c7:54:58:75:b2: 10:74:1d:ae:15:30:47:44:81:41:4d:44:33:cd:64:ba:c5:a4: 31:4f:53:18:46:dd:5b:c2:05:f7:6b:e4:01:73:ec:79:55:db: 68:db:60:09:29:42:65:d4:96:4e:23:1e:23:a1:2a:7b:eb:96: 1c:e3:fe:5c:bb:8b:db:d8:a1:e3:33:08:1c:94:61:db:d5:e2: 3b:0c:0b:89:ca:61:de:ac:ec:4b:9d:31:21:6a:4d:83:da:c7: fa:9c:26:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCRjI2MkYyQ0NEREQz M0VBNjM2QTA2QTM4RjUzOEE4QTYxM0M1RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUh1jkEdwZ//vUS7BZ2vrSIroZ4VL9H4Gc04G+K8lAY8jijLaM i4uZQRLINH0Fk/8Kyigw4u6WCdhnXrcndmQPIWeOCrv3cOGYPBAQNTbhm7P15/F7 veytW+qjoKai/M81EnjNb43PSzgH48MhF7dQN1rtmiRAan8anM4Ko9kTQWNeZAle tOirYSPF7LKbiNI5ze8D4z4KZW9EK4HmnAjurOD7znl+tRZjklV8CqT3j0zFYZUW /U5DY07wv0pLU1izzDXSWB779H/LVW9pEiCG1akTaY9PSrsAba/4LzgYEUfo71DJ ZISsjSKyvHhd469crnQhvFowaAvvbVlqfRIhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUO/Ji8szd0z6mNqBqOPU4qKYTxfswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09fSmk4c3pkMHo2bU5xQnFP UFU0cUtZVHhmcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wQkwDQYJKoZIhvcNAQELBQADggEBACj4HnW0Lj828AVb3NRJ5y/Zr66x/7elMLsS 0tuLJbZOa+FkU8Rt2TcgSUAawMsFvWSag5PJnFSyHJ/YEIDZMDBnJQGE7z8Jp7jd n+/cUw6TayODRPGYaeZrmjygZx6XsotVAE2VhLczhtJED/lnB2tv+cewRxaA64y1 yP75tq5oUeD8I0edV2//Bdizwv3AItPcCASbMzUb20hNs83HVFh1shB0Ha4VMEdE gUFNRDPNZLrFpDFPUxhG3VvCBfdr5AFz7HlV22jbYAkpQmXUlk4jHiOhKnvrlhzj /ly7i9vYoeMzCByUYdvV4jsMC4nKYd6s7EudMSFqTYPax/qcJok= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org