$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sh9NmO_SF1JVzGXVzwcYryBlCcQ.roa File: Sh9NmO_SF1JVzGXVzwcYryBlCcQ.roa (raw, json) Hash identifier: dBAInVq8eQdrc7wWF+YlL/o1d38rM5LRAjouWrZO49w= Subject key identifier: 4A:1F:4D:98:EF:D2:17:52:55:CC:65:D5:CF:07:18:AF:20:65:09:C4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 318C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sh9NmO_SF1JVzGXVzwcYryBlCcQ.roa Signing time: Mon 26 Aug 2024 05:30:34 +0000 ROA not before: Mon 26 Aug 2024 05:30:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12684 (0x318c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4A1F4D98EFD2175255CC65D5CF0718AF206509C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:fb:e4:29:25:87:da:62:76:65:72:bd:e1: a8:89:b5:ce:15:dc:84:8f:d9:e7:3a:60:9b:68:92: 07:ce:b8:f9:4a:fc:61:e3:3e:dd:bf:d8:76:bc:68: 6a:a3:42:53:74:3b:6a:18:0d:8a:e8:65:48:80:2a: df:c6:f1:7c:73:66:25:94:0b:3c:dd:9f:74:39:ae: 34:04:d3:5e:00:fb:56:04:f9:44:9b:a5:f6:9d:3b: f6:19:30:cb:8c:f5:6d:01:59:21:63:91:cc:70:a0: 5d:f3:70:6c:78:f3:da:a5:71:9e:7f:b6:e9:73:e3: 49:3f:df:ee:20:97:a6:cb:c0:c6:fe:15:38:0a:bb: b9:d3:c5:d3:7b:46:11:35:2a:b5:54:1a:5d:9f:aa: 07:32:99:c9:75:b5:2f:7c:88:38:c5:8d:ac:01:d5: 1d:ec:08:8f:17:6b:87:78:bd:d6:ea:8b:29:ba:f5: 52:1a:d5:c1:9c:25:0a:70:2f:45:2c:25:69:24:8b: 45:b8:cd:25:2d:53:b7:5b:b6:51:91:3a:5d:b7:03: 0e:ab:64:2c:d8:d1:5b:2b:1e:ce:37:df:57:e2:e9: 43:31:2e:e5:d9:4b:c2:ec:0f:52:b6:ec:7f:ff:d3: 57:1f:4f:64:c4:72:dc:67:2a:a3:76:97:92:1e:05: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1F:4D:98:EF:D2:17:52:55:CC:65:D5:CF:07:18:AF:20:65:09:C4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sh9NmO_SF1JVzGXVzwcYryBlCcQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.80.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:bc:b6:0b:aa:bf:4e:cc:71:79:63:5a:37:98:a3:1e:1f:46: 7d:a2:61:6c:2b:7a:0e:af:81:5a:46:94:4b:98:cb:84:3e:8d: 41:3f:f5:98:36:c5:f1:92:98:ec:ce:1f:63:82:9f:c9:d6:64: 07:72:1f:95:63:03:4b:9d:f0:f7:68:af:af:46:d4:77:63:67: 81:dd:9f:e0:45:f0:7e:4e:77:ac:ea:c9:8e:bf:92:27:78:c0: 1f:96:b6:c1:96:f2:c8:da:d2:69:0c:ee:3b:5c:0f:aa:61:22: 80:9a:ce:9c:56:a1:3e:a0:9a:b3:31:7e:3c:37:83:0d:49:a2: b4:0e:22:49:5d:3b:9e:24:30:fd:36:af:93:76:28:58:d9:b7: 7b:a6:d5:41:b5:c7:09:56:13:bc:ed:b5:27:29:96:27:fd:20: 52:be:7a:4d:17:7a:a2:5c:70:03:51:11:c8:0b:c0:b4:03:c7: 7b:db:ec:f6:68:ba:f7:c8:6a:8a:55:9c:c8:59:1b:eb:41:51: 03:d6:4d:8e:c8:b9:af:48:67:5a:78:ab:97:b0:ef:a8:98:a8: 42:3f:49:3e:9b:3d:d3:ac:b2:2c:86:5d:53:75:b2:21:c4:49: cc:79:d9:86:cd:38:6f:c1:c2:4d:5f:1b:22:c4:a1:43:a5:a3: 03:02:e9:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBMUY0RDk4RUZEMjE3 NTI1NUNDNjVENUNGMDcxOEFGMjA2NTA5QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuEvvkKSWH2mJ2ZXK94aiJtc4V3ISP2ec6YJtokgfOuPlK/GHj Pt2/2Ha8aGqjQlN0O2oYDYroZUiAKt/G8XxzZiWUCzzdn3Q5rjQE014A+1YE+USb pfadO/YZMMuM9W0BWSFjkcxwoF3zcGx489qlcZ5/tulz40k/3+4gl6bLwMb+FTgK u7nTxdN7RhE1KrVUGl2fqgcymcl1tS98iDjFjawB1R3sCI8Xa4d4vdbqiym69VIa 1cGcJQpwL0UsJWkki0W4zSUtU7dbtlGROl23Aw6rZCzY0VsrHs4331fi6UMxLuXZ S8LsD1K27H//01cfT2TEctxnKqN2l5IeBb7rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSh9NmO/SF1JVzGXVzwcYryBlCcQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NoOU5tT19TRjFKVnpHWFZ6 d2NZcnlCbENjUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6FAwDQYJKoZIhvcNAQELBQADggEBAEy8tguqv07McXljWjeYox4fRn2iYWwreg6v gVpGlEuYy4Q+jUE/9Zg2xfGSmOzOH2OCn8nWZAdyH5VjA0ud8Pdor69G1HdjZ4Hd n+BF8H5Od6zqyY6/kid4wB+WtsGW8sja0mkM7jtcD6phIoCazpxWoT6gmrMxfjw3 gw1JorQOIkldO54kMP02r5N2KFjZt3um1UG1xwlWE7zttScplif9IFK+ek0XeqJc cANREcgLwLQDx3vb7PZouvfIaopVnMhZG+tBUQPWTY7Iua9IZ1p4q5ew76iYqEI/ ST6bPdOssiyGXVN1siHEScx52YbNOG/Bwk1fGyLEoUOlowMC6W8= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org