$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PCQcPim442Rf6QiqSv3wnp2wnrQ.roa File: PCQcPim442Rf6QiqSv3wnp2wnrQ.roa (raw, json) Hash identifier: 5hOyjbLws8Vh36iMwdd0ao9k01cfh0FWIQ3Lzp50dGE= Subject key identifier: 3C:24:1C:3E:29:B8:E3:64:5F:E9:08:AA:4A:FD:F0:9E:9D:B0:9E:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 317B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PCQcPim442Rf6QiqSv3wnp2wnrQ.roa Signing time: Mon 26 Aug 2024 05:30:30 +0000 ROA not before: Mon 26 Aug 2024 05:30:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12667 (0x317b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3C241C3E29B8E3645FE908AA4AFDF09E9DB09EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:30:5b:99:0f:23:12:d3:5b:6c:83:49:79: 26:35:03:a7:de:da:09:4c:af:d1:6d:46:79:1f:f1: 78:f9:87:e1:12:8c:61:72:a3:22:6e:27:89:e1:10: 32:17:ee:a8:fa:27:9d:87:e2:4e:93:e0:cf:37:ab: 90:be:bb:3f:51:6f:ee:9e:0b:93:3c:2a:72:9a:84: 8b:4e:b2:98:3f:8e:ed:42:a6:4d:a8:ce:0a:f6:2b: 54:ae:af:95:d3:7a:b5:05:c9:73:a3:e1:fe:86:d5: 44:bf:c7:28:c3:a3:d9:2b:8c:42:e0:99:20:03:ff: e0:f9:9a:37:6b:09:20:33:50:f2:c8:67:c3:92:f2: 51:54:14:e2:c7:c2:87:06:12:0a:d1:be:6f:62:bd: a9:a0:32:97:5a:e3:be:d2:1b:6b:2a:56:2d:90:b0: 42:66:9f:59:f2:82:ee:dd:3c:85:2a:59:45:e0:3a: 67:2e:d5:75:7a:f9:94:d6:79:6f:4a:de:25:1d:b9: 52:d0:68:45:41:29:0b:2d:2a:7d:36:65:3b:29:78: 26:9e:97:ce:9f:d7:37:9d:80:3a:b3:58:5b:b4:53: cd:9d:27:90:e2:cc:f1:de:3a:0f:8a:b5:0b:77:d1: 03:78:f0:38:01:24:3e:a9:bb:ca:9d:bf:1d:a5:4c: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:24:1C:3E:29:B8:E3:64:5F:E9:08:AA:4A:FD:F0:9E:9D:B0:9E:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PCQcPim442Rf6QiqSv3wnp2wnrQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.228.0/22 Signature Algorithm: sha256WithRSAEncryption 29:1c:53:4c:30:97:50:1c:2a:3f:1c:13:88:3e:96:15:ba:27: 9c:9b:d9:4a:93:4c:38:9c:ae:a7:b8:a2:98:34:33:1d:5b:35: 25:8c:bd:95:f5:b6:24:85:cb:fb:c9:79:12:43:bc:d5:9a:ae: 29:03:0e:43:00:c2:19:fa:ba:06:62:d1:ea:23:85:04:0a:7f: 8b:b7:37:bd:87:71:0e:a3:f8:f2:cb:28:35:cb:8b:1e:c8:08: 91:e1:69:41:0d:01:d0:95:2e:8b:0b:d1:f7:0f:d0:3f:89:8f: 65:13:ff:40:c6:be:ab:65:27:1e:ac:4f:83:2f:ae:80:95:c2: 41:a1:80:cd:18:1a:df:a4:d1:7a:a1:9f:50:56:5b:fd:85:4b: a0:d6:21:3b:c0:58:d5:f1:02:08:ad:77:d0:a6:01:14:2a:b6: ad:3a:6d:34:a4:51:81:c7:3f:7f:76:08:97:17:b2:eb:b7:31: eb:03:48:1b:38:9f:4d:1c:e2:f0:54:eb:6e:77:4f:18:b6:7b: 47:92:d5:4b:aa:9f:9d:df:41:bc:69:a2:79:de:25:ea:0c:b2: 4e:76:db:16:58:78:c9:35:a5:13:06:32:f7:0e:5f:33:d0:0c: 27:46:58:48:b5:9d:5b:51:e7:00:fc:f4:a4:32:4e:35:26:ec: 88:40:04:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDMjQxQzNFMjlCOEUz NjQ1RkU5MDhBQTRBRkRGMDlFOURCMDlFQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRFzBbmQ8jEtNbbINJeSY1A6fe2glMr9FtRnkf8Xj5h+ESjGFy oyJuJ4nhEDIX7qj6J52H4k6T4M83q5C+uz9Rb+6eC5M8KnKahItOspg/ju1Cpk2o zgr2K1Sur5XTerUFyXOj4f6G1US/xyjDo9krjELgmSAD/+D5mjdrCSAzUPLIZ8OS 8lFUFOLHwocGEgrRvm9ivamgMpda477SG2sqVi2QsEJmn1nygu7dPIUqWUXgOmcu 1XV6+ZTWeW9K3iUduVLQaEVBKQstKn02ZTspeCael86f1zedgDqzWFu0U82dJ5Di zPHeOg+KtQt30QN48DgBJD6pu8qdvx2lTP9FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPCQcPim442Rf6QiqSv3wnp2wnrQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BDUWNQaW00NDJSZjZRaXFT djN3bnAyd25yUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w+QwDQYJKoZIhvcNAQELBQADggEBACkcU0wwl1AcKj8cE4g+lhW6J5yb2UqTTDic rqe4opg0Mx1bNSWMvZX1tiSFy/vJeRJDvNWarikDDkMAwhn6ugZi0eojhQQKf4u3 N72HcQ6j+PLLKDXLix7ICJHhaUENAdCVLosL0fcP0D+Jj2UT/0DGvqtlJx6sT4Mv roCVwkGhgM0YGt+k0Xqhn1BWW/2FS6DWITvAWNXxAgitd9CmARQqtq06bTSkUYHH P392CJcXsuu3MesDSBs4n00c4vBU6253Txi2e0eS1Uuqn53fQbxponneJeoMsk52 2xZYeMk1pRMGMvcOXzPQDCdGWEi1nVtR5wD89KQyTjUm7IhABJE= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org