$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QD1RzEZyXH7J00ErVDGVWEx8Lkg.roa File: QD1RzEZyXH7J00ErVDGVWEx8Lkg.roa (raw, json) Hash identifier: ex3lWbKc9HTTlVLMT+0ex+U6IE4/nVROzwJFvi46TDc= Subject key identifier: 40:3D:51:CC:46:72:5C:7E:C9:D3:41:2B:54:31:95:58:4C:7C:2E:48 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 326B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QD1RzEZyXH7J00ErVDGVWEx8Lkg.roa Signing time: Mon 26 Aug 2024 05:31:38 +0000 ROA not before: Mon 26 Aug 2024 05:31:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.195.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12907 (0x326b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=403D51CC46725C7EC9D3412B543195584C7C2E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:21:bd:57:5d:9b:8a:ef:13:3f:ed:3b:07: 84:ee:d8:95:3e:7e:19:db:93:93:96:05:37:f8:5d: 53:cc:c5:5d:d8:1c:8c:8a:b4:6d:f4:da:c3:44:d3: 97:20:44:20:60:f6:f9:8d:66:63:fc:47:7b:2d:0e: b7:21:95:99:23:df:48:9a:f9:4e:26:02:75:8a:f0: 6c:1c:2c:59:69:ea:3c:9f:b3:30:16:61:cf:a5:8b: b7:13:73:bb:bc:66:3f:08:b2:a8:01:70:32:11:d3: b7:26:fb:57:df:c6:58:2a:7c:c4:20:53:cd:2a:8b: 0c:14:cf:ef:c1:e9:3b:73:c9:da:e3:79:2d:88:10: fb:c3:bb:f2:90:56:b5:02:a3:5e:bf:61:7b:68:94: 0b:86:ba:3e:28:b4:63:54:76:92:d8:47:d0:60:91: 9b:13:6c:42:c2:88:8b:93:f9:d9:a7:71:a1:09:83: e3:d5:48:d3:49:14:0b:fb:e6:e9:56:83:bf:04:e6: 7d:29:17:fb:fd:2a:6e:f6:a6:d3:1b:a6:f3:c5:29: 7c:4b:9c:6a:c8:0f:f0:c5:03:e6:bd:76:e1:01:29: f9:f6:47:f8:07:41:19:b9:99:d3:6c:df:38:31:63: 1c:1c:c6:a4:ee:be:6d:44:9a:fb:3c:4b:78:5f:5e: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3D:51:CC:46:72:5C:7E:C9:D3:41:2B:54:31:95:58:4C:7C:2E:48 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QD1RzEZyXH7J00ErVDGVWEx8Lkg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/20 Signature Algorithm: sha256WithRSAEncryption ba:c2:85:84:c9:0c:dc:b4:82:a5:fb:0c:4c:88:8f:f6:07:16: 05:01:18:a7:dd:f7:4d:df:75:da:39:f5:28:c1:fa:c4:a6:b2: ed:65:9c:81:ea:de:69:07:73:dd:77:80:a8:d3:1e:c1:a5:74: 19:b8:ba:92:88:38:23:c9:d8:37:34:d2:31:2d:39:20:5a:fc: 69:4c:22:8b:f2:81:4f:64:75:8c:8e:37:e7:ae:02:de:59:39: 86:6d:b8:64:ad:07:6e:fc:6a:6f:49:27:c8:8e:80:cb:4a:b6: 30:39:a0:82:cb:0e:dd:db:bf:4c:26:cf:3a:90:02:77:ef:66: 04:04:c8:0b:96:b0:38:e5:84:f3:1b:65:18:76:b3:c0:63:be: 53:33:c6:28:d7:fa:a3:ea:4c:47:53:94:85:25:a1:3f:c6:38: 4b:ad:8a:bd:45:a7:4c:36:d7:8e:89:0c:4a:50:cd:48:46:e9: e5:56:7a:74:7d:71:5a:14:a6:ee:7f:1e:a2:6f:49:f7:46:0b: e9:93:81:f8:45:9d:ee:0d:e1:aa:e7:9a:21:b3:b4:68:ed:e5: 70:a7:25:18:f4:1e:73:51:c4:d6:90:d1:09:d6:a7:27:dd:d2: 1f:ea:04:c1:b7:f1:0b:8e:ce:45:6c:55:ae:97:cd:a2:48:dc: 07:9f:c8:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwM0Q1MUNDNDY3MjVD N0VDOUQzNDEyQjU0MzE5NTU4NEM3QzJFNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjtCG9V12biu8TP+07B4Tu2JU+fhnbk5OWBTf4XVPMxV3YHIyK tG302sNE05cgRCBg9vmNZmP8R3stDrchlZkj30ia+U4mAnWK8GwcLFlp6jyfszAW Yc+li7cTc7u8Zj8IsqgBcDIR07cm+1ffxlgqfMQgU80qiwwUz+/B6TtzydrjeS2I EPvDu/KQVrUCo16/YXtolAuGuj4otGNUdpLYR9BgkZsTbELCiIuT+dmncaEJg+PV SNNJFAv75ulWg78E5n0pF/v9Km72ptMbpvPFKXxLnGrID/DFA+a9duEBKfn2R/gH QRm5mdNs3zgxYxwcxqTuvm1Emvs8S3hfXkRFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQD1RzEZyXH7J00ErVDGVWEx8LkgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FEMVJ6RVp5WEg3SjAwRXJW REdWV0V4OExrZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 w+AwDQYJKoZIhvcNAQELBQADggEBALrChYTJDNy0gqX7DEyIj/YHFgUBGKfd903f ddo59SjB+sSmsu1lnIHq3mkHc913gKjTHsGldBm4upKIOCPJ2Dc00jEtOSBa/GlM IovygU9kdYyON+euAt5ZOYZtuGStB278am9JJ8iOgMtKtjA5oILLDt3bv0wmzzqQ AnfvZgQEyAuWsDjlhPMbZRh2s8BjvlMzxijX+qPqTEdTlIUloT/GOEutir1Fp0w2 146JDEpQzUhG6eVWenR9cVoUpu5/HqJvSfdGC+mTgfhFne4N4arnmiGztGjt5XCn JRj0HnNRxNaQ0QnWpyfd0h/qBMG38QuOzkVsVa6XzaJI3AefyCU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:37 2024 by rpki-client on console-ams.rpki-client.org