$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/REfaTy0o2mh42KsDrIun-1EcJ2U.roa File: REfaTy0o2mh42KsDrIun-1EcJ2U.roa (raw, json) Hash identifier: 7ZZC70vvtbYSk6ElZpcnMh7IHWPyiY9xRCqoNtRQ+4E= Subject key identifier: 44:47:DA:4F:2D:28:DA:68:78:D8:AB:03:AC:8B:A7:FB:51:1C:27:65 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3216 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/REfaTy0o2mh42KsDrIun-1EcJ2U.roa Signing time: Mon 26 Aug 2024 05:31:15 +0000 ROA not before: Mon 26 Aug 2024 05:31:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12822 (0x3216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4447DA4F2D28DA6878D8AB03AC8BA7FB511C2765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:80:91:4d:3d:23:44:95:33:c7:cb:77:c8: b2:1a:0e:b3:f8:f8:cc:75:25:58:bc:9c:40:5c:5d: d2:7d:9f:f3:75:c8:05:c8:73:06:d8:86:d2:0d:d2: e0:38:36:06:f9:52:3e:42:7b:78:87:40:64:3c:26: b3:65:c1:2c:10:fb:f9:7e:28:d7:61:29:70:5d:61: 05:e0:fd:d0:a9:38:4a:0c:ec:2b:05:eb:5a:d5:ce: 98:4b:83:8c:29:3b:ba:b3:01:43:02:68:7b:76:ff: a5:20:e6:ba:1a:b4:32:9b:64:8d:e2:c4:32:6f:f0: b4:e1:fa:ed:e2:bf:53:24:f9:88:4f:d4:fd:c2:48: 9b:50:a6:59:e8:42:87:bf:a3:39:76:35:57:0f:d9: 43:e5:28:ae:34:28:d8:9d:db:d0:41:66:d3:5f:1e: 80:c8:f6:95:64:c2:f2:3a:8d:95:59:a4:94:ec:e8: 78:e6:85:f1:97:79:a2:48:a9:77:77:88:90:3b:91: f4:8f:3a:85:a1:2e:bd:73:b5:88:b6:72:dd:ff:28: aa:8f:81:dc:ab:3f:c8:a7:15:6a:29:93:8e:92:ca: b9:87:8f:02:c1:c3:ff:c0:9b:29:8c:3e:b8:f4:54: 56:7d:e2:a5:a7:a3:a3:81:7d:3b:8f:e6:fa:aa:a0: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:DA:4F:2D:28:DA:68:78:D8:AB:03:AC:8B:A7:FB:51:1C:27:65 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/REfaTy0o2mh42KsDrIun-1EcJ2U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0a:95:5b:91:c9:10:85:3d:68:81:81:fe:11:14:c2:28:d5:38: 12:c3:f6:c5:4a:bd:f7:6f:27:c2:c6:1b:3f:85:dd:f5:f7:46: 8f:5c:96:46:36:32:37:ed:6d:15:fd:27:d8:dc:56:80:37:f4: 52:2e:db:60:62:8e:83:55:df:cb:4d:3a:ad:61:4f:ef:ad:7b: 65:e3:e4:12:bb:81:41:a4:3d:8e:0d:a9:6a:a0:ac:94:23:25: 4b:a2:49:d5:00:2e:06:45:40:8d:91:f0:ad:67:1e:b8:c0:52: 5a:0e:18:90:fc:98:aa:b8:c9:87:1e:93:5b:db:e6:7e:78:4a: 4a:32:db:49:5f:25:49:cf:b6:48:de:1b:4f:8b:3a:cf:2e:31: 82:54:38:72:f2:3b:16:9d:38:0d:67:df:67:86:10:3c:64:39: f4:a7:5e:96:7b:bd:7a:4f:59:83:bd:ad:75:bd:53:58:bc:08: e2:34:d1:1c:c8:80:04:2b:60:4d:15:af:99:c4:41:5f:b4:2d: 20:b3:56:23:a0:95:39:68:58:4c:75:11:d0:8b:0b:54:24:a3: 53:68:00:bc:ff:20:59:e7:02:c5:41:ea:31:9d:c2:3e:77:28: 23:89:87:5f:05:7c:e6:fc:06:a2:c1:4a:f6:30:3a:d9:27:94: 1f:87:1c:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ0NDdEQTRGMkQyOERB Njg3OEQ4QUIwM0FDOEJBN0ZCNTExQzI3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1aoCRTT0jRJUzx8t3yLIaDrP4+Mx1JVi8nEBcXdJ9n/N1yAXI cwbYhtIN0uA4Ngb5Uj5Ce3iHQGQ8JrNlwSwQ+/l+KNdhKXBdYQXg/dCpOEoM7CsF 61rVzphLg4wpO7qzAUMCaHt2/6Ug5roatDKbZI3ixDJv8LTh+u3iv1Mk+YhP1P3C SJtQplnoQoe/ozl2NVcP2UPlKK40KNid29BBZtNfHoDI9pVkwvI6jZVZpJTs6Hjm hfGXeaJIqXd3iJA7kfSPOoWhLr1ztYi2ct3/KKqPgdyrP8inFWopk46SyrmHjwLB w//AmymMPrj0VFZ94qWno6OBfTuP5vqqoL1RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUREfaTy0o2mh42KsDrIun+1EcJ2UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JFZmFUeTBvMm1oNDJLc0Ry SXVuLTFFY0oyVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2 6EAwDQYJKoZIhvcNAQELBQADggEBAAqVW5HJEIU9aIGB/hEUwijVOBLD9sVKvfdv J8LGGz+F3fX3Ro9clkY2MjftbRX9J9jcVoA39FIu22BijoNV38tNOq1hT++te2Xj 5BK7gUGkPY4NqWqgrJQjJUuiSdUALgZFQI2R8K1nHrjAUloOGJD8mKq4yYcek1vb 5n54Skoy20lfJUnPtkjeG0+LOs8uMYJUOHLyOxadOA1n32eGEDxkOfSnXpZ7vXpP WYO9rXW9U1i8COI00RzIgAQrYE0Vr5nEQV+0LSCzViOglTloWEx1EdCLC1Qko1No ALz/IFnnAsVB6jGdwj53KCOJh18FfOb8BqLBSvYwOtknlB+HHDQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:37 2024 by rpki-client on console-ams.rpki-client.org