$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QrZtTFfoOEwtIXyCiFevflooKLM.roa File: QrZtTFfoOEwtIXyCiFevflooKLM.roa (raw, json) Hash identifier: LDBCxUadrE/jV35BdSNamQr0NANeM6qyWnpdRBl98VE= Subject key identifier: 42:B6:6D:4C:57:E8:38:4C:2D:21:7C:82:88:57:AF:7E:5A:28:28:B3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3043 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QrZtTFfoOEwtIXyCiFevflooKLM.roa Signing time: Mon 26 Aug 2024 05:29:17 +0000 ROA not before: Mon 26 Aug 2024 05:29:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12355 (0x3043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=42B66D4C57E8384C2D217C828857AF7E5A2828B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:96:5d:b6:1b:db:ff:f1:82:63:14:54:5a: df:2c:fe:1c:cb:d7:99:dd:d5:c1:cc:90:ad:b0:23: 1a:c7:d9:15:2c:79:0a:1b:b4:12:4b:bb:35:c1:b2: 2e:9c:d2:cb:72:67:d9:74:74:0a:bc:b6:d9:90:ea: b9:c6:a7:86:c8:18:cb:7f:73:67:30:c9:98:4d:50: d7:d7:44:b7:21:34:2d:a1:4d:27:f0:eb:1b:2c:91: 09:dc:da:40:c9:24:63:61:d7:06:7f:b4:27:8d:ca: e5:e7:80:53:24:f4:be:04:f0:5a:a8:86:58:95:ad: ab:bd:52:31:90:01:bd:02:79:63:37:9c:6a:33:5c: 97:ce:a5:62:6e:d4:b5:ed:c3:37:14:60:c6:a3:1b: 0b:09:f4:71:5c:e8:30:e9:b5:3b:8f:91:15:08:19: fa:2b:7e:6e:8a:38:1d:75:e6:db:29:7f:c7:70:72: 2a:33:10:eb:ef:3d:00:f4:a1:b9:f8:80:a0:ee:e9: 7e:96:91:3a:fa:63:31:d4:93:c2:ac:6e:3e:22:cf: 5c:cb:33:0e:ba:47:fb:27:31:92:79:88:57:c7:e4: 2d:02:18:00:39:57:dd:95:a6:70:81:9b:10:24:f7: 27:a3:73:62:b1:e6:1b:c9:47:7c:6a:01:fd:3f:03: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:6D:4C:57:E8:38:4C:2D:21:7C:82:88:57:AF:7E:5A:28:28:B3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QrZtTFfoOEwtIXyCiFevflooKLM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.206.0/23 Signature Algorithm: sha256WithRSAEncryption 30:98:af:61:00:24:60:4c:92:74:a5:00:60:3e:1b:5a:c4:c8: 37:ac:57:4e:c6:53:63:8b:fd:66:54:62:03:a9:83:82:6b:cb: b3:1e:27:23:78:55:c2:07:99:33:f4:d2:ad:d4:b5:f6:3f:d0: 8b:c6:2f:fd:be:ee:a4:20:16:8e:42:30:5f:ed:0b:2b:de:b0: 22:5b:bd:63:f0:e4:1f:9f:09:ac:dd:e4:76:3b:e8:fb:bc:5b: 6d:1f:67:e8:c8:93:e8:ef:2e:b9:70:47:b1:82:67:27:7a:45: db:e4:78:ef:7d:55:19:0b:25:62:9d:33:b5:58:8b:c5:84:06: 1e:2f:04:15:8f:f7:f4:57:07:08:07:52:7d:19:c8:85:36:a3: 74:12:4d:98:30:dc:a6:4e:42:b6:fc:f9:05:47:1f:92:ce:87: 93:ed:20:c4:d9:34:62:1f:9d:e8:35:22:33:72:94:b3:51:2f: 5f:77:97:22:0e:c3:c6:3e:62:03:8f:d1:9d:04:b4:55:4f:75: 1f:09:7c:a0:b4:f9:fc:dd:5d:cd:79:4a:cf:48:22:f1:1c:f9: 35:91:c8:f7:f4:1c:da:b4:11:3f:08:53:15:43:fd:02:7f:7a: 81:f5:0d:e5:c0:14:22:c3:c8:6f:5c:64:7f:3c:b3:d7:85:af: 1d:b4:d4:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyQjY2RDRDNTdFODM4 NEMyRDIxN0M4Mjg4NTdBRjdFNUEyODI4QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa75Zdthvb//GCYxRUWt8s/hzL15nd1cHMkK2wIxrH2RUseQob tBJLuzXBsi6c0styZ9l0dAq8ttmQ6rnGp4bIGMt/c2cwyZhNUNfXRLchNC2hTSfw 6xsskQnc2kDJJGNh1wZ/tCeNyuXngFMk9L4E8FqohliVrau9UjGQAb0CeWM3nGoz XJfOpWJu1LXtwzcUYMajGwsJ9HFc6DDptTuPkRUIGforfm6KOB115tspf8dwcioz EOvvPQD0obn4gKDu6X6WkTr6YzHUk8Ksbj4iz1zLMw66R/snMZJ5iFfH5C0CGAA5 V92VpnCBmxAk9yejc2Kx5hvJR3xqAf0/A+hDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQrZtTFfoOEwtIXyCiFevflooKLMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FyWnRURmZvT0V3dElYeUNp RmV2Zmxvb0tMTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq Ac4wDQYJKoZIhvcNAQELBQADggEBADCYr2EAJGBMknSlAGA+G1rEyDesV07GU2OL /WZUYgOpg4Jry7MeJyN4VcIHmTP00q3UtfY/0IvGL/2+7qQgFo5CMF/tCyvesCJb vWPw5B+fCazd5HY76Pu8W20fZ+jIk+jvLrlwR7GCZyd6RdvkeO99VRkLJWKdM7VY i8WEBh4vBBWP9/RXBwgHUn0ZyIU2o3QSTZgw3KZOQrb8+QVHH5LOh5PtIMTZNGIf neg1IjNylLNRL193lyIOw8Y+YgOP0Z0EtFVPdR8JfKC0+fzdXc15Ss9IIvEc+TWR yPf0HNq0ET8IUxVD/QJ/eoH1DeXAFCLDyG9cZH88s9eFrx201B8= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org