$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa File: Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa (raw, json) Hash identifier: XCRLVgPMpBxLQJRdA+v2Uj+fJYySWvn4wcZH2YE49ZY= Subject key identifier: 49:BF:42:C9:51:B6:2C:9C:60:9A:98:DF:2B:D9:B3:58:67:44:1A:09 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3266 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa Signing time: Mon 26 Aug 2024 05:31:37 +0000 ROA not before: Mon 26 Aug 2024 05:31:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12902 (0x3266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=49BF42C951B62C9C609A98DF2BD9B35867441A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:02:e4:60:a1:d8:3d:c2:8a:63:e9:41:75: d9:e7:bd:58:ef:6d:9a:5e:a5:d4:37:8c:86:10:56: bf:e8:5b:45:4e:5b:8c:a9:60:34:ae:8a:7a:0c:03: 96:6f:74:f3:70:5b:bf:58:3d:df:56:07:64:b1:db: d8:88:31:28:4a:24:16:45:f0:53:5a:b3:3e:6e:99: 34:c4:89:d4:42:c1:4f:b0:bd:61:8b:38:64:48:05: 84:bf:6f:a7:15:9e:8b:0a:85:27:79:d3:1b:c6:7f: e8:4c:7b:ec:2f:5d:31:00:4d:31:2e:d0:b4:f5:a3: 7f:a5:d1:0e:bf:ae:60:57:a0:03:de:e6:f8:77:52: cb:d6:23:51:c1:f3:6f:68:a4:93:78:a2:e9:ce:4a: b5:e6:3a:4c:1b:0c:12:95:5b:4e:00:70:f2:41:e8: 6e:c6:9b:eb:56:0f:eb:15:ab:07:3d:7a:c4:92:34: 69:39:e0:ec:b4:62:84:62:0f:8b:57:f3:ea:0a:bc: f5:d8:08:fc:54:63:7a:d7:5b:61:53:ce:68:22:c7: 9a:e4:9b:06:ca:88:17:6b:54:81:23:7e:b4:b1:f4: 17:d5:cb:e3:76:19:05:d6:f2:96:89:5d:63:aa:23: 28:db:1a:82:a8:0d:a5:8a:18:fc:73:44:b6:db:70: 1d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BF:42:C9:51:B6:2C:9C:60:9A:98:DF:2B:D9:B3:58:67:44:1A:09 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sb9CyVG2LJxgmpjfK9mzWGdEGgk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.215.0/24 Signature Algorithm: sha256WithRSAEncryption 32:fa:5a:1c:4f:7a:c5:95:06:78:ad:cd:58:1e:ac:f6:67:00: ff:50:49:a3:56:dd:89:07:7d:57:f3:d3:8a:e4:ca:88:bc:9d: 57:03:47:df:6c:2c:79:84:c7:d6:7a:d0:37:8f:49:21:f3:80: 1f:7a:65:fa:b9:32:16:a5:d3:a0:dd:b3:5f:f7:cc:ba:41:06: 55:0e:80:95:68:49:7c:8c:62:77:10:e7:ff:0b:d1:30:0b:c1: f2:11:1b:24:f2:48:7f:7b:35:5b:1a:d6:17:21:d0:e3:af:f0: 8b:dd:58:80:3f:da:99:00:7f:ed:18:4f:82:d8:cf:00:d0:54: a9:ee:9c:cf:59:32:db:15:96:e1:42:77:f5:05:8f:68:13:01: e6:35:12:ef:89:d0:b9:82:20:c6:b7:b7:3d:a0:fa:4e:9c:2c: d6:08:0e:c4:9f:e6:13:e1:1d:8d:d4:c2:93:df:68:98:45:4f: 03:68:f6:6b:9d:7b:9a:3f:a6:8d:36:e6:45:21:11:b5:33:ed: 1b:da:bc:f3:5f:b7:3e:dd:4c:d1:ef:b4:57:80:b2:91:a6:c9: 0b:a5:ef:16:4d:c5:50:04:5b:ab:e2:11:19:de:23:27:8f:5b: b1:9d:34:a3:d3:4d:92:e3:e6:4c:65:61:72:8d:f6:1c:1a:75: 6c:4d:05:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5QkY0MkM5NTFCNjJD OUM2MDlBOThERjJCRDlCMzU4Njc0NDFBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBngLkYKHYPcKKY+lBddnnvVjvbZpepdQ3jIYQVr/oW0VOW4yp YDSuinoMA5ZvdPNwW79YPd9WB2Sx29iIMShKJBZF8FNasz5umTTEidRCwU+wvWGL OGRIBYS/b6cVnosKhSd50xvGf+hMe+wvXTEATTEu0LT1o3+l0Q6/rmBXoAPe5vh3 UsvWI1HB829opJN4ounOSrXmOkwbDBKVW04AcPJB6G7Gm+tWD+sVqwc9esSSNGk5 4Oy0YoRiD4tX8+oKvPXYCPxUY3rXW2FTzmgix5rkmwbKiBdrVIEjfrSx9BfVy+N2 GQXW8paJXWOqIyjbGoKoDaWKGPxzRLbbcB31AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSb9CyVG2LJxgmpjfK9mzWGdEGgkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NiOUN5VkcyTEp4Z21wamZL OW16V0dkRUdnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AdcwDQYJKoZIhvcNAQELBQADggEBADL6WhxPesWVBnitzVgerPZnAP9QSaNW3YkH fVfz04rkyoi8nVcDR99sLHmEx9Z60DePSSHzgB96Zfq5Mhal06Dds1/3zLpBBlUO gJVoSXyMYncQ5/8L0TALwfIRGyTySH97NVsa1hch0OOv8IvdWIA/2pkAf+0YT4LY zwDQVKnunM9ZMtsVluFCd/UFj2gTAeY1Eu+J0LmCIMa3tz2g+k6cLNYIDsSf5hPh HY3UwpPfaJhFTwNo9mude5o/po025kUhEbUz7RvavPNftz7dTNHvtFeAspGmyQul 7xZNxVAEW6viERneIyePW7GdNKPTTZLj5kxlYXKN9hwadWxNBe8= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org