$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa File: OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa (raw, json) Hash identifier: MBTDFga2oxwksaQ04uA+3GmvkJOzK7cZxPaDrXGrg2I= Subject key identifier: 3B:37:12:FD:29:4A:C7:6E:C9:14:7F:1D:1D:5C:76:2E:7F:D0:68:5D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 324B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa Signing time: Mon 26 Aug 2024 05:31:31 +0000 ROA not before: Mon 26 Aug 2024 05:31:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12875 (0x324b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3B3712FD294AC76EC9147F1D1D5C762E7FD0685D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:38:9a:65:33:a8:ac:3b:36:0a:aa:34:b4: d0:c2:78:8a:e7:44:59:3f:4f:cf:42:32:ee:70:26: 9f:6f:64:ec:70:10:09:d3:12:2c:bb:9c:cd:58:c0: 54:6a:b2:9d:fd:ee:c8:38:46:1e:d3:e6:dd:c8:98: 21:ab:7e:22:aa:53:27:b0:75:b3:eb:ed:f5:83:94: 33:20:9b:c7:ca:a3:d9:ce:96:0f:51:78:8f:e3:6d: 05:7f:e7:64:a6:83:79:5e:ae:88:35:bc:47:d8:ea: f4:55:73:4a:9f:ba:9f:e3:c1:99:a5:28:b1:30:4d: 52:cf:0f:12:2b:85:f0:94:39:d4:04:a0:81:60:19: 4c:bc:dd:92:87:92:39:bb:6b:b8:80:87:f2:9c:94: 0f:cb:e1:1f:b1:51:12:00:c0:b3:f3:3b:fe:98:2e: 8a:83:57:f5:86:c0:e0:28:05:8c:44:9b:1c:4b:94: 66:2e:93:32:56:bf:c6:17:aa:3b:23:8c:50:65:a1: 90:94:2e:37:db:6e:88:4e:8a:fb:63:58:82:bf:61: d0:75:44:31:7d:3f:e3:ad:f3:48:7a:a0:4f:e6:ad: 88:2e:01:ae:32:75:c5:c1:77:aa:2a:85:fe:8a:bf: 96:cd:b8:1c:a8:da:6c:1d:ec:f7:a4:d0:df:82:8a: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:37:12:FD:29:4A:C7:6E:C9:14:7F:1D:1D:5C:76:2E:7F:D0:68:5D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OzcS_SlKx27JFH8dHVx2Ln_QaF0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.80.0/22 Signature Algorithm: sha256WithRSAEncryption 72:82:65:ae:c8:7c:2b:42:97:4a:44:3c:6b:69:c4:d8:be:06: fc:99:66:a3:1d:f3:87:d8:e4:2c:4f:95:3f:9d:9a:5c:b6:a3: 57:b9:80:1d:ec:f9:14:05:02:c9:65:75:21:28:ab:36:e9:6b: 2e:a0:82:27:33:eb:bb:ae:5f:f8:ae:50:f9:81:ef:66:41:fe: f2:64:93:a8:d5:cc:e6:eb:29:6d:b2:c6:ca:9f:42:d4:c8:62: 3b:3b:41:08:7c:42:e6:6d:91:fc:86:66:75:55:b2:2c:91:bf: e0:b0:fb:33:73:ae:3d:01:6f:73:68:60:29:3e:bd:ae:31:c1: 74:29:3c:27:f3:de:2a:f7:3c:25:38:a7:93:d8:bb:4c:7c:0d: 15:e4:83:b0:f8:19:a3:95:08:37:22:4c:f6:31:7e:0e:4d:d9: 9f:0c:b6:02:bb:9b:31:6a:6e:b0:2f:cf:2f:b8:05:6a:1d:08: dc:67:19:c5:b0:5f:66:fd:49:9b:af:9f:22:13:a3:3f:47:71: 07:00:af:91:b6:69:d9:8d:65:d4:a7:75:b8:d5:01:44:3d:86: 8d:8a:b7:76:4b:90:3e:cb:80:95:aa:ee:aa:03:f3:f2:6b:7c: eb:9d:60:8d:fe:e2:5e:74:38:6e:50:24:97:1e:3e:b4:31:f0: 28:22:3f:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCMzcxMkZEMjk0QUM3 NkVDOTE0N0YxRDFENUM3NjJFN0ZEMDY4NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtyTiaZTOorDs2Cqo0tNDCeIrnRFk/T89CMu5wJp9vZOxwEAnT Eiy7nM1YwFRqsp397sg4Rh7T5t3ImCGrfiKqUyewdbPr7fWDlDMgm8fKo9nOlg9R eI/jbQV/52Smg3lerog1vEfY6vRVc0qfup/jwZmlKLEwTVLPDxIrhfCUOdQEoIFg GUy83ZKHkjm7a7iAh/KclA/L4R+xURIAwLPzO/6YLoqDV/WGwOAoBYxEmxxLlGYu kzJWv8YXqjsjjFBloZCULjfbbohOivtjWIK/YdB1RDF9P+Ot80h6oE/mrYguAa4y dcXBd6oqhf6Kv5bNuByo2mwd7Pek0N+CirvvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOzcS/SlKx27JFH8dHVx2Ln/QaF0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL096Y1NfU2xLeDI3SkZIOGRI VngyTG5fUWFGMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AVAwDQYJKoZIhvcNAQELBQADggEBAHKCZa7IfCtCl0pEPGtpxNi+BvyZZqMd84fY 5CxPlT+dmly2o1e5gB3s+RQFAslldSEoqzbpay6ggicz67uuX/iuUPmB72ZB/vJk k6jVzObrKW2yxsqfQtTIYjs7QQh8QuZtkfyGZnVVsiyRv+Cw+zNzrj0Bb3NoYCk+ va4xwXQpPCfz3ir3PCU4p5PYu0x8DRXkg7D4GaOVCDciTPYxfg5N2Z8MtgK7mzFq brAvzy+4BWodCNxnGcWwX2b9SZuvnyIToz9HcQcAr5G2admNZdSndbjVAUQ9ho2K t3ZLkD7LgJWq7qoD8/JrfOudYI3+4l50OG5QJJcePrQx8CgiP2s= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org