$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SUo7WYT0Rov7aqIH1LETgOFdSFs.roa File: SUo7WYT0Rov7aqIH1LETgOFdSFs.roa (raw, json) Hash identifier: GcW/CQGl9+QZUv4vSAMTcGh4hw+AtSDRaZJLMqjNBLY= Subject key identifier: 49:4A:3B:59:84:F4:46:8B:FB:6A:A2:07:D4:B1:13:80:E1:5D:48:5B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3107 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SUo7WYT0Rov7aqIH1LETgOFdSFs.roa Signing time: Mon 26 Aug 2024 05:30:02 +0000 ROA not before: Mon 26 Aug 2024 05:30:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.128.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12551 (0x3107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=494A3B5984F4468BFB6AA207D4B11380E15D485B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:6d:28:c2:47:77:61:e2:2a:f0:60:a9:1f: 44:e3:02:ec:50:d8:de:69:ed:ae:a1:f7:15:d3:f6: 13:bf:66:c4:1b:92:2c:88:21:0f:fb:b7:13:be:18: a2:a6:da:5a:1c:ca:93:7b:09:71:7a:25:31:88:48: f9:ac:f0:4f:f2:35:3e:f0:e4:42:0f:99:1d:d2:8d: fc:75:39:28:f8:25:40:41:29:c0:2b:62:07:4a:a8: e0:08:cf:16:ec:12:01:48:18:6a:30:07:2f:f2:8a: e1:e0:62:6d:a3:5c:db:4d:e2:2b:68:70:7f:04:81: bc:97:4f:16:33:e3:e2:02:00:47:c5:28:40:78:af: 8f:4c:88:3d:4e:51:66:b2:5b:1f:81:60:9b:03:cd: 44:ec:74:6e:91:86:05:3a:d4:dd:fb:74:cd:60:a3: e2:cc:36:3e:3e:bf:38:c0:69:65:79:b9:78:3f:f0: a1:10:76:55:ad:2a:ec:22:b7:8e:0a:74:6c:c3:89: fc:6f:bc:88:0e:18:fa:24:c0:be:0c:22:d2:c2:03: 6b:68:6e:08:d7:1d:3d:0a:6f:b9:60:82:ea:2c:04: a7:63:9e:3d:a7:b9:37:f1:63:00:58:21:10:c5:dc: 50:2c:2a:3f:07:c3:e5:25:f9:43:75:05:7d:85:99: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4A:3B:59:84:F4:46:8B:FB:6A:A2:07:D4:B1:13:80:E1:5D:48:5B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SUo7WYT0Rov7aqIH1LETgOFdSFs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.128.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:1e:84:82:84:7c:4b:f9:f7:4f:63:04:1f:c0:08:23:a8:cf: 2f:60:36:71:58:45:63:70:c5:a0:14:ab:cb:0a:55:0c:7e:86: d8:26:40:6b:1c:06:a5:62:c1:d4:77:69:be:c2:80:8b:11:ea: 44:7d:4d:b8:c4:66:eb:98:72:87:c5:9f:ee:24:bc:c8:56:50: fd:a7:36:a3:df:c1:16:a3:4c:be:ba:e8:21:37:4c:b8:53:4d: 56:19:65:a3:84:c3:ed:14:c6:11:db:01:b8:f9:ae:63:64:18: 3c:f4:9b:a1:ed:9e:51:86:35:16:3c:2b:80:b3:d9:74:89:c6: 19:8e:0a:83:99:8f:75:e5:86:be:a3:3a:2b:7f:a6:28:ad:0f: a9:9c:88:e8:6e:c6:2f:af:a0:91:29:35:97:bc:64:87:17:46: e9:eb:3a:f9:ac:a0:e4:ed:42:fd:a7:25:da:5f:04:89:ca:8e: 95:34:7b:5b:f9:69:c6:da:7f:95:34:03:8d:73:de:04:59:15: b6:61:6f:6d:03:73:d1:e5:51:e9:fc:1d:53:0e:ad:89:85:5d: 35:80:35:90:06:19:d2:dc:2c:b3:65:41:0c:ba:ce:b0:ca:50: 46:a0:1a:9c:71:64:86:af:64:3e:54:26:34:cb:11:00:e3:63: 23:93:9b:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5NEEzQjU5ODRGNDQ2 OEJGQjZBQTIwN0Q0QjExMzgwRTE1RDQ4NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMzG0owkd3YeIq8GCpH0TjAuxQ2N5p7a6h9xXT9hO/ZsQbkiyI IQ/7txO+GKKm2locypN7CXF6JTGISPms8E/yNT7w5EIPmR3Sjfx1OSj4JUBBKcAr YgdKqOAIzxbsEgFIGGowBy/yiuHgYm2jXNtN4itocH8EgbyXTxYz4+ICAEfFKEB4 r49MiD1OUWayWx+BYJsDzUTsdG6RhgU61N37dM1go+LMNj4+vzjAaWV5uXg/8KEQ dlWtKuwit44KdGzDifxvvIgOGPokwL4MItLCA2tobgjXHT0Kb7lgguosBKdjnj2n uTfxYwBYIRDF3FAsKj8Hw+Ul+UN1BX2Fmdj7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSUo7WYT0Rov7aqIH1LETgOFdSFswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NVbzdXWVQwUm92N2FxSUgx TEVUZ09GZFNGcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wIAwDQYJKoZIhvcNAQELBQADggEBACsehIKEfEv5909jBB/ACCOozy9gNnFYRWNw xaAUq8sKVQx+htgmQGscBqViwdR3ab7CgIsR6kR9TbjEZuuYcofFn+4kvMhWUP2n NqPfwRajTL666CE3TLhTTVYZZaOEw+0UxhHbAbj5rmNkGDz0m6HtnlGGNRY8K4Cz 2XSJxhmOCoOZj3Xlhr6jOit/piitD6mciOhuxi+voJEpNZe8ZIcXRunrOvmsoOTt Qv2nJdpfBInKjpU0e1v5acbaf5U0A41z3gRZFbZhb20Dc9HlUen8HVMOrYmFXTWA NZAGGdLcLLNlQQy6zrDKUEagGpxxZIavZD5UJjTLEQDjYyOTm38= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org