$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RZb3156KrqcKGNjR81kCNblBffM.roa File: RZb3156KrqcKGNjR81kCNblBffM.roa (raw, json) Hash identifier: Fvegp2xSrm39kCc+BZtH9qQ8IqZq1J7Y4tiBVkL0Hbk= Subject key identifier: 45:96:F7:D7:9E:8A:AE:A7:0A:18:D8:D1:F3:59:02:35:B9:41:7D:F3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3272 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RZb3156KrqcKGNjR81kCNblBffM.roa Signing time: Mon 26 Aug 2024 05:31:40 +0000 ROA not before: Mon 26 Aug 2024 05:31:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12914 (0x3272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4596F7D79E8AAEA70A18D8D1F3590235B9417DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:ed:87:49:ac:bd:4d:32:9c:ff:97:df:8f: 75:a3:69:e7:a9:bb:ba:f9:d8:c7:ff:4f:96:ac:fe: 73:cb:24:52:b8:36:7e:35:25:cc:0f:ce:42:95:26: e0:e0:1b:c7:b9:9f:b9:33:a9:71:7e:cc:8d:db:41: 5d:10:00:8e:60:62:75:79:6e:ad:f2:21:0d:2a:50: 70:8f:eb:4c:f6:4e:56:e9:34:46:0e:c4:68:33:c7: 88:72:bc:44:9c:54:69:9a:fc:c0:c6:7a:08:fa:7e: 80:b2:ec:fe:19:c6:e7:e8:cf:91:87:31:f5:ce:a2: 58:b7:db:cb:dd:65:33:76:97:7e:fc:00:90:b3:37: 39:69:6b:c3:d5:a0:58:b1:57:91:f9:c1:1d:b2:dc: 05:66:34:8b:c7:53:be:b6:70:61:7c:2e:85:f6:fd: a1:9d:41:ac:c5:2f:1e:b6:9f:54:50:ed:ea:b5:9c: c9:31:fa:40:12:55:ad:21:01:c5:24:f8:11:c6:1d: e0:45:b0:54:c8:3f:ef:b8:82:d6:ef:b4:9c:03:a8: 9e:b7:71:b9:29:61:e4:dc:0c:6a:80:ce:35:d6:d0: 61:53:b9:0e:0a:7b:7b:60:2d:69:a3:40:0b:44:c9: 25:67:73:fe:e4:8a:f1:9b:de:78:4d:62:35:26:0d: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:96:F7:D7:9E:8A:AE:A7:0A:18:D8:D1:F3:59:02:35:B9:41:7D:F3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RZb3156KrqcKGNjR81kCNblBffM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.96.0/21 Signature Algorithm: sha256WithRSAEncryption 38:47:1c:5c:a3:a9:26:f8:c8:50:17:76:20:04:07:c3:5e:36: 1a:d1:00:c5:03:ae:64:ee:35:2d:1c:ce:7f:ad:e3:5f:57:f4: f3:6a:57:c4:dd:a3:0c:79:cb:a7:58:f9:63:d8:23:52:c4:a1: 95:87:72:11:0d:d4:df:40:02:c0:55:ab:dc:22:e5:69:dc:7d: 88:b2:9c:af:bc:91:fc:b9:d7:a7:d1:79:93:c4:db:e9:cf:79: de:26:12:2e:d8:32:53:c7:06:63:3c:8a:5c:a4:7e:77:be:f6: 87:09:01:28:df:90:15:ea:29:4e:3f:41:8f:ad:f7:18:d4:f9: 9e:17:bc:7b:3c:b8:bc:f3:49:cb:2f:73:bf:a7:7b:5b:29:de: 1a:96:63:95:99:74:35:a0:49:91:d5:99:09:7b:df:45:4e:da: e9:7c:63:54:a0:97:56:e5:f8:55:5e:f6:51:92:49:72:f3:6d: f0:ee:c4:67:a7:f3:2a:08:59:4b:80:51:33:9b:67:b0:29:d6: 9b:c4:f5:90:5e:56:c4:64:07:d5:48:5e:ef:85:d9:be:1c:29: d0:3e:1f:1b:13:99:7f:d0:9d:33:fd:ca:54:4e:a7:87:2a:7c: 41:82:11:53:e3:1f:71:56:7c:47:e8:c6:f5:08:7e:0a:d9:4c: 75:59:04:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMnIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1OTZGN0Q3OUU4QUFF QTcwQTE4RDhEMUYzNTkwMjM1Qjk0MTdERjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8le2HSay9TTKc/5ffj3Wjaeepu7r52Mf/T5as/nPLJFK4Nn41 JcwPzkKVJuDgG8e5n7kzqXF+zI3bQV0QAI5gYnV5bq3yIQ0qUHCP60z2TlbpNEYO xGgzx4hyvEScVGma/MDGegj6foCy7P4Zxufoz5GHMfXOoli328vdZTN2l378AJCz Nzlpa8PVoFixV5H5wR2y3AVmNIvHU762cGF8LoX2/aGdQazFLx62n1RQ7eq1nMkx +kASVa0hAcUk+BHGHeBFsFTIP++4gtbvtJwDqJ63cbkpYeTcDGqAzjXW0GFTuQ4K e3tgLWmjQAtEySVnc/7kivGb3nhNYjUmDYnxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQURZb3156KrqcKGNjR81kCNblBffMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JaYjMxNTZLcnFjS0dOalI4 MWtDTmJsQmZmTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wWAwDQYJKoZIhvcNAQELBQADggEBADhHHFyjqSb4yFAXdiAEB8NeNhrRAMUDrmTu NS0czn+t419X9PNqV8Tdowx5y6dY+WPYI1LEoZWHchEN1N9AAsBVq9wi5WncfYiy nK+8kfy516fReZPE2+nPed4mEi7YMlPHBmM8ilykfne+9ocJASjfkBXqKU4/QY+t 9xjU+Z4XvHs8uLzzScsvc7+ne1sp3hqWY5WZdDWgSZHVmQl730VO2ul8Y1Sgl1bl +FVe9lGSSXLzbfDuxGen8yoIWUuAUTObZ7Ap1pvE9ZBeVsRkB9VIXu+F2b4cKdA+ HxsTmX/QnTP9ylROp4cqfEGCEVPjH3FWfEfoxvUIfgrZTHVZBPw= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:38 2024 by rpki-client on console-fra.rpki-client.org