$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PnHFqysIYnAwQy78qBU_Ba0nkQ4.roa File: PnHFqysIYnAwQy78qBU_Ba0nkQ4.roa (raw, json) Hash identifier: ZzSC0jmOTRyUYN40jfHxyChESYmdkmgNswtvTvEY194= Subject key identifier: 3E:71:C5:AB:2B:08:62:70:30:43:2E:FC:A8:15:3F:05:AD:27:91:0E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31D3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PnHFqysIYnAwQy78qBU_Ba0nkQ4.roa Signing time: Mon 26 Aug 2024 05:30:59 +0000 ROA not before: Mon 26 Aug 2024 05:30:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12755 (0x31d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3E71C5AB2B08627030432EFCA8153F05AD27910E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:9d:f2:14:62:99:16:4d:fb:b2:53:eb:5c: 25:19:9c:23:cc:7a:c9:33:59:20:16:f9:2a:c5:08: f1:f8:3d:f8:11:66:c6:f0:cb:b3:47:71:f4:2a:d3: a1:73:a2:66:eb:33:df:e5:2a:7b:9f:d5:bc:4b:ca: 42:b1:18:46:f4:53:b1:f3:38:1c:cb:f5:20:97:b7: 96:af:78:44:66:d1:e9:45:7a:79:1b:e4:fc:e5:dd: 3e:73:0b:66:e9:9c:39:dc:5e:45:86:10:c3:21:c8: ef:40:91:53:e4:af:fe:09:4e:4b:08:88:26:a7:16: 75:8e:26:8a:7a:f1:55:5b:d0:12:b6:d4:e1:43:6e: cd:ee:10:68:7e:05:ef:52:cf:be:76:7c:40:3d:cb: af:36:0c:82:c0:47:5f:56:14:07:27:1e:83:78:01: 4e:95:80:55:ea:ad:6b:44:87:65:f7:9f:2d:f2:84: f7:4f:07:e3:23:28:1f:63:62:1f:dd:29:56:3e:e5: 2d:9f:6a:f2:ae:80:da:9a:3f:19:75:e3:fd:c9:93: da:09:17:09:9e:71:cb:60:3d:52:50:08:8b:ef:26: bc:0c:aa:8f:d0:2c:c1:b3:0c:4a:cd:8c:ce:ce:11: b7:a1:b3:78:4a:80:51:ca:05:ba:db:69:64:94:70: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:71:C5:AB:2B:08:62:70:30:43:2E:FC:A8:15:3F:05:AD:27:91:0E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PnHFqysIYnAwQy78qBU_Ba0nkQ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.216.0/22 Signature Algorithm: sha256WithRSAEncryption 57:5c:97:0f:ee:a1:ed:63:52:d3:43:b8:88:a3:b8:22:69:70: 63:f9:26:7f:75:90:c0:07:87:28:ce:98:7c:40:b2:dc:56:d7: bd:01:16:e0:ba:2a:dc:48:30:d0:3f:f9:34:c5:01:c5:1b:f0: bf:fc:5b:39:18:38:8e:1e:d7:89:a1:f3:67:b6:86:17:2e:bb: 48:c5:8f:8d:61:aa:42:93:96:34:a3:b4:27:bd:1f:c5:ac:ce: 28:2c:9b:9a:f2:87:2a:31:47:0b:86:02:dd:f6:1d:d6:9d:d4: b5:28:75:88:f6:7b:45:ec:7a:49:c6:8a:91:09:53:c5:5d:3c: 10:eb:87:a7:83:4f:f8:35:eb:c9:78:32:6a:e0:b8:65:db:6c: 8e:32:1f:19:fe:3b:c7:99:d5:4f:64:d4:20:5f:19:d0:5b:b9: dc:13:5d:33:51:b3:0a:b7:75:7b:b4:8d:2f:2a:a9:e0:8c:09: 43:ee:22:fa:9f:15:9c:aa:9b:d3:bc:5f:4a:97:cf:5f:8c:56: 36:47:ca:78:48:c1:75:5a:c5:f8:d1:e3:f9:a8:c3:0a:d4:dc: d6:22:ea:55:b6:e0:0a:f2:40:ef:1b:bc:15:35:aa:80:21:52: 6a:fa:6f:56:71:4f:e0:51:db:0d:99:fc:0f:09:48:f5:0f:c3: 4f:9f:b2:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFNzFDNUFCMkIwODYy NzAzMDQzMkVGQ0E4MTUzRjA1QUQyNzkxMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLSJ3yFGKZFk37slPrXCUZnCPMeskzWSAW+SrFCPH4PfgRZsbw y7NHcfQq06FzombrM9/lKnuf1bxLykKxGEb0U7HzOBzL9SCXt5aveERm0elFenkb 5Pzl3T5zC2bpnDncXkWGEMMhyO9AkVPkr/4JTksIiCanFnWOJop68VVb0BK21OFD bs3uEGh+Be9Sz752fEA9y682DILAR19WFAcnHoN4AU6VgFXqrWtEh2X3ny3yhPdP B+MjKB9jYh/dKVY+5S2favKugNqaPxl14/3Jk9oJFwmecctgPVJQCIvvJrwMqo/Q LMGzDErNjM7OEbehs3hKgFHKBbrbaWSUcD79AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPnHFqysIYnAwQy78qBU/Ba0nkQ4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BuSEZxeXNJWW5Bd1F5Nzhx QlVfQmEwbmtRNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6NgwDQYJKoZIhvcNAQELBQADggEBAFdclw/uoe1jUtNDuIijuCJpcGP5Jn91kMAH hyjOmHxAstxW170BFuC6KtxIMNA/+TTFAcUb8L/8WzkYOI4e14mh82e2hhcuu0jF j41hqkKTljSjtCe9H8Wszigsm5ryhyoxRwuGAt32Hdad1LUodYj2e0XseknGipEJ U8VdPBDrh6eDT/g168l4MmrguGXbbI4yHxn+O8eZ1U9k1CBfGdBbudwTXTNRswq3 dXu0jS8qqeCMCUPuIvqfFZyqm9O8X0qXz1+MVjZHynhIwXVaxfjR4/mowwrU3NYi 6lW24AryQO8bvBU1qoAhUmr6b1ZxT+BR2w2Z/A8JSPUPw0+fsqA= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org