$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PzjW5hShJRKwMHIbKJqYAYUz8rg.roa File: PzjW5hShJRKwMHIbKJqYAYUz8rg.roa (raw, json) Hash identifier: ZiX+0yItdbjU6I/Isi5WL5xbA4I00a8i0L9xOGUAAPY= Subject key identifier: 3F:38:D6:E6:14:A1:25:12:B0:30:72:1B:28:9A:98:01:85:33:F2:B8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3235 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PzjW5hShJRKwMHIbKJqYAYUz8rg.roa Signing time: Mon 26 Aug 2024 05:31:25 +0000 ROA not before: Mon 26 Aug 2024 05:31:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12853 (0x3235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3F38D6E614A12512B030721B289A98018533F2B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:c3:45:f1:1b:35:cb:8c:0d:fc:db:7a:2b: ef:e7:73:4e:c0:07:a2:5d:8a:e1:60:2e:0e:65:93: b1:75:8c:a4:3a:21:04:71:af:a0:3d:03:a0:b8:df: ad:30:93:a2:c7:4b:62:a2:a5:e1:29:37:2c:0a:45: 3e:38:f0:9a:26:f4:9a:36:be:00:ee:ba:0a:d3:5e: d0:1d:88:e9:3a:06:c3:1a:65:dd:4c:3e:02:83:fb: 5d:9f:4a:89:7b:eb:f5:b5:5f:a5:e2:39:3a:31:c8: 5c:cb:f7:8a:df:4c:b7:6c:b1:0a:66:2e:0b:e8:51: 76:81:24:85:47:f4:e9:05:09:2c:50:a3:29:dd:44: 50:7e:d2:15:63:5b:c7:63:21:55:91:24:69:5c:63: cb:f5:b0:0e:6c:4c:1d:05:0f:19:85:38:24:11:e1: d0:13:18:e3:07:eb:78:ca:ec:be:7b:22:52:79:d0: fd:42:41:2d:5f:93:18:ba:e8:73:37:51:d9:53:0b: 27:6a:03:fa:54:95:29:8c:62:67:a8:00:a8:76:0c: 4b:f4:2a:50:1d:79:44:1f:ff:92:be:c2:e3:65:dc: d3:62:7c:35:eb:80:89:1e:77:2c:39:39:30:cd:cc: 0c:35:7e:b0:72:ab:8d:fe:37:e0:77:78:6e:92:ea: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:38:D6:E6:14:A1:25:12:B0:30:72:1B:28:9A:98:01:85:33:F2:B8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PzjW5hShJRKwMHIbKJqYAYUz8rg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.160.0/21 Signature Algorithm: sha256WithRSAEncryption 70:ec:97:37:c4:47:62:01:87:9d:c5:54:0d:2c:7e:89:17:b0: 8d:a0:cc:15:c5:cf:f8:41:95:bb:68:2c:8c:1a:4c:fd:bd:0a: 88:c2:60:94:6b:b9:b6:df:eb:0c:ce:eb:25:db:88:23:09:d4: 64:81:5b:13:0e:a6:eb:ff:3d:98:6c:47:2c:ea:31:7f:67:36: 9e:92:0e:de:58:f1:fa:4b:3b:84:f9:4a:ff:59:9d:49:59:f1: 0c:dc:1b:bb:e1:24:2c:88:b3:8c:5d:e5:2e:1c:80:fc:6a:77: d8:55:bf:ef:33:3c:69:6a:93:83:ed:fd:e1:68:be:98:a0:d4: 3b:07:5f:5d:a9:06:c8:3c:f3:12:21:f0:38:89:98:12:d9:67: 08:66:97:27:da:81:5c:79:e5:d2:25:4c:03:ca:b9:e5:df:e7: 5b:2d:00:4e:78:32:ba:dc:45:dc:1f:be:e3:8f:e3:ff:87:fd: 37:7c:8e:d5:7c:d3:48:a6:c4:cc:5b:2c:76:4d:b8:dc:4f:a3: 46:4a:d9:3f:2a:c2:82:eb:93:ad:fe:ad:e9:69:7c:db:6b:71: ae:3b:49:43:01:6e:44:c1:2a:bb:bb:47:b0:4b:29:03:2b:13: 05:a1:fa:5d:c1:06:c4:6b:ec:70:07:81:26:2c:4f:8f:14:f8: 40:0b:54:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNGMzhENkU2MTRBMTI1 MTJCMDMwNzIxQjI4OUE5ODAxODUzM0YyQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAhsNF8Rs1y4wN/Nt6K+/nc07AB6JdiuFgLg5lk7F1jKQ6IQRx r6A9A6C4360wk6LHS2KipeEpNywKRT448Jom9Jo2vgDuugrTXtAdiOk6BsMaZd1M PgKD+12fSol76/W1X6XiOToxyFzL94rfTLdssQpmLgvoUXaBJIVH9OkFCSxQoynd RFB+0hVjW8djIVWRJGlcY8v1sA5sTB0FDxmFOCQR4dATGOMH63jK7L57IlJ50P1C QS1fkxi66HM3UdlTCydqA/pUlSmMYmeoAKh2DEv0KlAdeUQf/5K+wuNl3NNifDXr gIkedyw5OTDNzAw1frByq43+N+B3eG6S6q25AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPzjW5hShJRKwMHIbKJqYAYUz8rgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1B6alc1aFNoSlJLd01ISWJL SnFZQVlVejhyZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6aAwDQYJKoZIhvcNAQELBQADggEBAHDslzfER2IBh53FVA0sfokXsI2gzBXFz/hB lbtoLIwaTP29CojCYJRrubbf6wzO6yXbiCMJ1GSBWxMOpuv/PZhsRyzqMX9nNp6S Dt5Y8fpLO4T5Sv9ZnUlZ8QzcG7vhJCyIs4xd5S4cgPxqd9hVv+8zPGlqk4Pt/eFo vpig1DsHX12pBsg88xIh8DiJmBLZZwhmlyfagVx55dIlTAPKueXf51stAE54Mrrc RdwfvuOP4/+H/Td8jtV800imxMxbLHZNuNxPo0ZK2T8qwoLrk63+relpfNtrca47 SUMBbkTBKru7R7BLKQMrEwWh+l3BBsRr7HAHgSYsT48U+EALVFo= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:38 2024 by rpki-client on console-fra.rpki-client.org