$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T3vWClOW-taQDYrwIrnHjCIyqqg.roa File: T3vWClOW-taQDYrwIrnHjCIyqqg.roa (raw, json) Hash identifier: +rk4WHQK1z573bz23IxYNpeBQ4IzaT0QOpT/2QC3+NU= Subject key identifier: 4F:7B:D6:0A:53:96:FA:D6:90:0D:8A:F0:22:B9:C7:8C:22:32:AA:A8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31BA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T3vWClOW-taQDYrwIrnHjCIyqqg.roa Signing time: Mon 26 Aug 2024 05:30:53 +0000 ROA not before: Mon 26 Aug 2024 05:30:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12730 (0x31ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4F7BD60A5396FAD6900D8AF022B9C78C2232AAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:5a:93:5b:04:63:cd:bb:9c:b0:6a:a6:f3: 12:c6:c7:69:00:3a:21:c5:cb:cf:88:ab:72:0f:64: 54:47:e7:a2:32:74:17:81:6e:bc:3f:5a:fb:70:b1: 41:8c:df:98:77:ee:12:b8:13:50:ad:8d:c9:0c:95: f4:62:87:d1:60:7b:0c:6f:e2:93:58:bd:51:0f:d3: 5d:49:4d:2e:36:d3:e7:8a:c6:3f:56:a4:6e:da:f6: bc:ee:a9:97:eb:08:d5:c6:cd:9e:7a:2e:89:78:38: 08:59:f2:f9:b8:63:22:11:0b:18:14:f5:22:14:71: f2:4a:ad:1e:11:cb:4a:0a:14:c0:3b:79:e0:a9:33: e8:02:33:20:44:b2:f6:d1:e5:d9:da:63:a2:9d:9d: c6:f4:ab:04:09:7f:b7:04:35:b2:e5:60:ef:82:60: 92:1d:c3:75:00:ad:64:3a:06:b0:99:25:2b:82:a2: 9d:5b:49:8a:c8:ed:f3:19:6f:3f:20:63:f8:03:17: 4e:50:68:44:a9:17:0d:ec:de:01:0b:e4:70:8c:b4: c4:6d:76:bb:0a:95:71:60:cc:c2:b1:24:33:8c:a1: 06:1d:f1:02:25:c4:66:76:c6:d7:1b:c4:72:f2:75: aa:15:2f:77:ee:6f:03:78:20:1a:07:ba:ae:6b:a6: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7B:D6:0A:53:96:FA:D6:90:0D:8A:F0:22:B9:C7:8C:22:32:AA:A8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T3vWClOW-taQDYrwIrnHjCIyqqg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.100.0/22 Signature Algorithm: sha256WithRSAEncryption 66:bb:c3:64:82:54:5c:dd:4e:a7:3d:9b:ea:9c:2c:5c:d1:aa: 42:2b:a6:80:d5:1d:5b:62:12:aa:cf:9a:6c:72:5c:95:9f:1c: 4a:7f:ad:4f:6a:38:b4:91:2d:b5:76:9d:c6:76:1e:b7:ca:6f: 1f:46:62:68:8e:81:21:2d:d3:ce:17:5a:f1:a4:83:be:e7:fa: 6b:3b:2e:19:51:26:25:e6:9c:76:35:3b:a9:52:f2:6c:ab:f5: 09:a3:14:a8:be:fc:09:25:08:f2:2e:8e:da:40:65:71:d4:9b: 85:c3:a3:ec:ab:05:a4:52:bd:fe:4d:9b:c7:c0:c9:00:61:6a: 6e:1e:32:88:46:15:f7:01:a1:6c:6b:5e:08:45:f4:6e:03:db: 47:b5:0b:13:eb:2b:66:e1:10:57:46:7b:e5:2d:4c:0a:ab:a4: 76:25:8a:e5:c4:e0:32:1e:5a:ac:72:2b:14:df:bd:24:c3:9f: 68:5f:d7:41:bb:c2:c1:34:ed:e0:04:b2:4e:38:f3:90:1c:50: 9b:dc:f1:f3:a2:36:93:21:fd:8b:84:4e:45:ae:4f:f1:dc:3d: 51:ac:96:b7:c9:0b:16:1e:d0:07:96:03:49:42:e6:bd:82:aa: d0:1c:34:f0:10:a7:9b:8a:b2:05:82:17:ed:73:89:30:0b:3c: c4:60:e0:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRGN0JENjBBNTM5NkZB RDY5MDBEOEFGMDIyQjlDNzhDMjIzMkFBQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJhlqTWwRjzbucsGqm8xLGx2kAOiHFy8+Iq3IPZFRH56IydBeB brw/WvtwsUGM35h37hK4E1CtjckMlfRih9Fgewxv4pNYvVEP011JTS420+eKxj9W pG7a9rzuqZfrCNXGzZ56Lol4OAhZ8vm4YyIRCxgU9SIUcfJKrR4Ry0oKFMA7eeCp M+gCMyBEsvbR5dnaY6Kdncb0qwQJf7cENbLlYO+CYJIdw3UArWQ6BrCZJSuCop1b SYrI7fMZbz8gY/gDF05QaESpFw3s3gEL5HCMtMRtdrsKlXFgzMKxJDOMoQYd8QIl xGZ2xtcbxHLydaoVL3fubwN4IBoHuq5rpoxLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUT3vWClOW+taQDYrwIrnHjCIyqqgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1QzdldDbE9XLXRhUURZcndJ cm5IakNJeXFxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6GQwDQYJKoZIhvcNAQELBQADggEBAGa7w2SCVFzdTqc9m+qcLFzRqkIrpoDVHVti EqrPmmxyXJWfHEp/rU9qOLSRLbV2ncZ2HrfKbx9GYmiOgSEt084XWvGkg77n+ms7 LhlRJiXmnHY1O6lS8myr9QmjFKi+/AklCPIujtpAZXHUm4XDo+yrBaRSvf5Nm8fA yQBham4eMohGFfcBoWxrXghF9G4D20e1CxPrK2bhEFdGe+UtTAqrpHYliuXE4DIe WqxyKxTfvSTDn2hf10G7wsE07eAEsk4485AcUJvc8fOiNpMh/YuETkWuT/HcPVGs lrfJCxYe0AeWA0lC5r2CqtAcNPAQp5uKsgWCF+1ziTALPMRg4Pg= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org