$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa File: Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa (raw, json) Hash identifier: 4Z/kv7Kl1+D2bdpD3K4pwLqbEn5ysM257ljwaCeVhyE= Subject key identifier: 4B:2D:4D:2B:A4:6B:12:A7:90:7B:C9:0D:CC:9E:44:7D:3A:84:7A:35 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 308D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa Signing time: Mon 26 Aug 2024 05:29:35 +0000 ROA not before: Mon 26 Aug 2024 05:29:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.205.32/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12429 (0x308d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4B2D4D2BA46B12A7907BC90DCC9E447D3A847A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:ba:f8:3e:7c:29:f9:5d:c0:dd:ab:f1:2c: e2:dc:db:95:da:42:b1:3b:dd:43:be:da:be:da:fe: e3:41:e8:09:4b:1c:12:c7:a4:00:88:c6:e2:0f:69: 8c:ed:16:bc:29:12:76:a4:5b:de:f5:be:1b:5d:40: 3f:6b:1d:cd:07:bb:ae:8e:b1:bd:e9:0a:7f:85:96: dd:b4:46:46:3e:c2:d6:62:38:45:e2:08:14:07:91: 75:26:ac:ac:37:2a:75:1a:29:7c:25:99:ba:46:02: 23:6a:b9:1f:23:d9:4b:02:2a:de:95:56:e4:dd:4c: 54:b7:40:a1:c0:dd:f4:b9:f2:24:cd:3b:d7:cc:1a: 00:35:7b:a4:ca:11:8a:8e:fc:7d:76:94:d5:af:15: df:96:e8:cc:27:cf:96:7b:ea:c8:80:71:b2:19:56: a6:a7:da:d7:90:ca:0d:45:87:a8:99:c8:fd:8d:e8: 22:d2:89:6e:97:a5:89:b3:43:57:43:05:2d:5d:69: 1f:21:97:3e:92:95:69:08:e5:3a:2b:37:6d:0b:db: bb:36:f0:c1:4b:7c:7e:46:91:36:7d:c3:9d:4b:51: d5:00:40:96:79:41:c7:80:57:45:90:06:31:13:f0: 10:2a:14:3a:78:59:16:5a:2d:44:c0:e3:3b:44:df: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:4D:2B:A4:6B:12:A7:90:7B:C9:0D:CC:9E:44:7D:3A:84:7A:35 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.205.32/27 Signature Algorithm: sha256WithRSAEncryption 12:53:d1:22:27:41:a8:0f:37:53:7f:03:ed:53:56:61:ce:87: 0b:f3:8f:8b:ed:e2:3a:ee:96:f9:58:89:d8:0b:72:71:b1:4b: 93:d4:50:a3:f7:0c:a5:5a:a6:3a:ce:21:be:ed:cc:04:b9:d3: dd:a2:5d:e0:38:ab:3d:32:bc:71:03:1b:0a:47:06:46:82:e9: 47:27:9b:3f:bc:23:c1:14:81:a6:8d:99:41:16:52:4b:62:10: df:1a:24:9c:e1:28:a0:c5:23:8b:72:34:b3:7b:b2:ea:36:8d: 19:6c:06:37:05:f0:79:ee:fb:b0:86:6d:fe:82:11:d3:9b:65: 53:22:3a:8f:59:03:10:6d:e5:f1:74:96:78:db:36:aa:9d:4a: 05:b7:f2:24:cb:4a:d0:77:86:b3:a9:42:3a:64:94:31:30:35: 29:6e:ae:48:2f:be:64:3c:a2:df:8d:b1:4c:40:cf:d7:dc:4e: 77:da:80:bd:1f:c3:a8:3d:58:f7:a2:24:4a:c6:e4:15:3a:85: d7:01:b8:c0:09:22:6d:32:1a:e5:56:7e:b3:55:ad:88:5c:c3: 1b:36:0c:4f:9a:df:ba:76:ee:74:5d:38:7b:76:e7:59:09:2b: fc:15:e8:c2:97:ab:f5:f8:13:7b:76:a2:9f:86:18:22:18:c7: 41:d1:32:63 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCMkQ0RDJCQTQ2QjEy QTc5MDdCQzkwRENDOUU0NDdEM0E4NDdBMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1zLr4Pnwp+V3A3avxLOLc25XaQrE73UO+2r7a/uNB6AlLHBLH pACIxuIPaYztFrwpEnakW971vhtdQD9rHc0Hu66Osb3pCn+Flt20RkY+wtZiOEXi CBQHkXUmrKw3KnUaKXwlmbpGAiNquR8j2UsCKt6VVuTdTFS3QKHA3fS58iTNO9fM GgA1e6TKEYqO/H12lNWvFd+W6Mwnz5Z76siAcbIZVqan2teQyg1Fh6iZyP2N6CLS iW6XpYmzQ1dDBS1daR8hlz6SlWkI5TorN20L27s28MFLfH5GkTZ9w51LUdUAQJZ5 QceAV0WQBjET8BAqFDp4WRZaLUTA4ztE3/rfAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUSy1NK6RrEqeQe8kNzJ5EfTqEejUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1N5MU5LNlJyRXFlUWU4a056 SjVFZlRxRWVqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7 ws0gMA0GCSqGSIb3DQEBCwUAA4IBAQASU9EiJ0GoDzdTfwPtU1ZhzocL84+L7eI6 7pb5WInYC3JxsUuT1FCj9wylWqY6ziG+7cwEudPdol3gOKs9MrxxAxsKRwZGgulH J5s/vCPBFIGmjZlBFlJLYhDfGiSc4SigxSOLcjSze7LqNo0ZbAY3BfB57vuwhm3+ ghHTm2VTIjqPWQMQbeXxdJZ42zaqnUoFt/Iky0rQd4azqUI6ZJQxMDUpbq5IL75k PKLfjbFMQM/X3E532oC9H8OoPVj3oiRKxuQVOoXXAbjACSJtMhrlVn6zVa2IXMMb NgxPmt+6du50XTh7dudZCSv8FejCl6v1+BN7dqKfhhgiGMdB0TJj -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org