$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qz-pF4qJ0weYU9Rj1HO5BD3SR60.roa File: Qz-pF4qJ0weYU9Rj1HO5BD3SR60.roa (raw, json) Hash identifier: nw5II+KqZPz8ylYQqSk0Jrcm2YoZjvXVfAB0KNqnRUU= Subject key identifier: 43:3F:A9:17:8A:89:D3:07:98:53:D4:63:D4:73:B9:04:3D:D2:47:AD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3022 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qz-pF4qJ0weYU9Rj1HO5BD3SR60.roa Signing time: Mon 26 Aug 2024 05:29:10 +0000 ROA not before: Mon 26 Aug 2024 05:29:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12322 (0x3022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=433FA9178A89D3079853D463D473B9043DD247AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:27:fd:6a:61:22:6b:ce:c9:d9:b9:08:a7: 37:3a:e2:2f:16:2e:82:86:7f:c1:37:0f:f9:e7:3f: de:db:48:59:5e:57:70:a6:42:c3:a4:59:c1:f0:1d: 35:62:f0:24:bd:11:17:50:90:02:a4:ab:37:7c:15: f8:f2:b5:56:71:e2:b1:7b:39:c0:26:53:c8:f4:4b: 30:74:a4:f2:f6:00:a7:21:de:7a:25:16:ca:9e:7b: e6:cc:1b:0e:7b:61:1b:4e:48:5a:36:59:e2:2b:3e: 2a:07:64:95:24:cb:ee:01:a5:3e:f3:ca:ff:4d:c6: 70:cc:4c:fe:ec:a1:36:6b:77:fa:77:b7:0f:f6:63: ef:9e:7e:6d:2e:3e:6b:32:d9:4b:5a:f7:29:3b:5e: 3c:1f:2a:76:ed:2c:49:e6:46:b6:61:18:6f:77:8f: e8:dd:14:c3:df:08:98:73:1f:4f:f2:5b:46:a8:e3: 54:13:9f:a6:cb:91:c3:e9:a7:fc:6a:22:aa:c6:61: e2:09:04:37:5f:d4:9b:67:59:2a:38:3d:e9:d9:4c: 46:69:38:20:4e:4f:c0:86:69:3b:1a:65:72:df:e1: 1c:f3:17:98:1a:77:7e:2e:e1:da:4f:78:ce:df:7b: f3:4e:dd:69:f1:cb:1a:7b:3c:a9:2d:64:63:ed:66: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3F:A9:17:8A:89:D3:07:98:53:D4:63:D4:73:B9:04:3D:D2:47:AD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qz-pF4qJ0weYU9Rj1HO5BD3SR60.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.80.0/21 Signature Algorithm: sha256WithRSAEncryption 20:43:5c:f4:7f:23:80:4c:01:5d:7b:c0:49:2e:6e:16:01:e8: bd:34:eb:be:46:25:c5:d3:4c:a0:e5:7c:fa:22:3e:70:7e:40: 98:3f:62:80:cf:00:ed:2d:f1:63:b3:88:90:07:8d:d7:05:37: 5b:3c:ac:45:0e:aa:f0:c3:0c:2a:f4:2a:89:17:29:75:36:1f: 39:90:d0:6b:6c:84:9b:0b:29:4b:8d:e1:b3:61:4e:97:3e:fe: ee:74:d3:5a:41:01:1c:cb:06:70:56:56:00:82:3c:ca:34:fa: 88:34:2c:01:ed:b6:13:67:7e:36:79:2a:53:ab:1e:b9:3c:fa: b0:9b:1f:d4:5d:57:b3:88:97:95:ed:12:45:df:7f:a2:3b:4f: dd:b8:6f:bd:76:52:67:74:a1:78:fe:43:93:ea:19:36:25:7e: 54:56:4c:0d:30:e9:8f:cd:80:f5:e4:c6:23:7d:09:63:22:64: 2e:c2:a0:a5:78:90:37:7a:2c:4b:dc:a0:33:e1:1d:66:f1:ed: 79:4d:f4:43:94:02:04:28:58:42:6e:49:a4:ae:83:3c:93:4e: 5a:c8:8b:53:76:32:89:95:4e:b2:62:5f:83:aa:6a:ac:7b:8b: 69:17:31:29:20:26:13:8c:9b:80:ca:58:4e:9a:32:56:55:6f: 0c:fb:29:47 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzM0ZBOTE3OEE4OUQz MDc5ODUzRDQ2M0Q0NzNCOTA0M0REMjQ3QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDckif9amEia87J2bkIpzc64i8WLoKGf8E3D/nnP97bSFleV3Cm QsOkWcHwHTVi8CS9ERdQkAKkqzd8FfjytVZx4rF7OcAmU8j0SzB0pPL2AKch3nol Fsqee+bMGw57YRtOSFo2WeIrPioHZJUky+4BpT7zyv9NxnDMTP7soTZrd/p3tw/2 Y++efm0uPmsy2Uta9yk7XjwfKnbtLEnmRrZhGG93j+jdFMPfCJhzH0/yW0ao41QT n6bLkcPpp/xqIqrGYeIJBDdf1JtnWSo4PenZTEZpOCBOT8CGaTsaZXLf4RzzF5ga d34u4dpPeM7fe/NO3Wnxyxp7PKktZGPtZlTnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQz+pF4qJ0weYU9Rj1HO5BD3SR60wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1F6LXBGNHFKMHdlWVU5Umox SE81QkQzU1I2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AVAwDQYJKoZIhvcNAQELBQADggEBACBDXPR/I4BMAV17wEkubhYB6L00675GJcXT TKDlfPoiPnB+QJg/YoDPAO0t8WOziJAHjdcFN1s8rEUOqvDDDCr0KokXKXU2HzmQ 0GtshJsLKUuN4bNhTpc+/u5001pBARzLBnBWVgCCPMo0+og0LAHtthNnfjZ5KlOr Hrk8+rCbH9RdV7OIl5XtEkXff6I7T924b712Umd0oXj+Q5PqGTYlflRWTA0w6Y/N gPXkxiN9CWMiZC7CoKV4kDd6LEvcoDPhHWbx7XlN9EOUAgQoWEJuSaSugzyTTlrI i1N2MomVTrJiX4Oqaqx7i2kXMSkgJhOMm4DKWE6aMlZVbwz7KUc= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org