$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TAjWQV5S-PXTyzMX-PZj0Iv5va8.roa File: TAjWQV5S-PXTyzMX-PZj0Iv5va8.roa (raw, json) Hash identifier: KLaO/rTv1gVow8t7u0AHMyJ6ALDT9M6GKdEF9+4eTI0= Subject key identifier: 4C:08:D6:41:5E:52:F8:F5:D3:CB:33:17:F8:F6:63:D0:8B:F9:BD:AF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3213 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TAjWQV5S-PXTyzMX-PZj0Iv5va8.roa Signing time: Mon 26 Aug 2024 05:31:14 +0000 ROA not before: Mon 26 Aug 2024 05:31:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12819 (0x3213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4C08D6415E52F8F5D3CB3317F8F663D08BF9BDAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:7e:06:dc:d6:d0:18:84:15:dd:9f:7e:7c: ff:ba:ea:f7:18:ef:09:91:1c:f7:c1:72:c5:93:73: 60:d0:5a:1e:04:54:9b:98:43:3a:83:67:0c:d3:2f: 4f:6f:c7:4e:be:4f:bb:3d:b2:bd:3f:fc:e5:1d:fe: ba:30:f1:c1:0c:5c:34:e7:60:90:a3:5c:89:e9:4d: dc:6c:fc:09:28:4a:36:62:d8:d2:3b:7d:8c:56:64: 1a:39:7a:55:cf:64:27:37:2f:e1:75:85:80:9b:13: 2f:cd:1a:e8:21:cf:fa:98:7e:eb:42:84:37:07:62: 37:03:b5:6d:bd:ee:52:c2:dd:c2:5e:44:d8:bb:61: c3:78:68:11:0b:43:b8:00:94:f1:dd:a2:29:90:38: a2:c8:3f:22:b5:0c:54:82:22:76:10:e9:0f:4d:a2: 42:bd:37:01:1d:c3:15:b8:51:a6:15:bb:61:65:c9: 4f:89:d7:7d:57:4e:1c:63:2d:7b:71:58:19:9d:ce: ec:97:d9:65:49:8e:b4:cc:d1:f7:60:15:ae:63:1c: 05:a3:e4:99:84:f5:0e:fd:42:5c:d2:37:61:bc:ba: 7f:73:e3:7a:da:7a:8f:5c:bb:21:d3:c4:eb:81:49: 59:37:65:04:99:1a:65:71:85:cd:4a:87:14:df:da: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:08:D6:41:5E:52:F8:F5:D3:CB:33:17:F8:F6:63:D0:8B:F9:BD:AF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TAjWQV5S-PXTyzMX-PZj0Iv5va8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.236.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:86:4d:29:c3:5a:bf:3c:59:88:30:f2:a7:3d:25:bf:8f:93: b9:25:96:98:d0:56:86:bf:30:0c:d2:34:93:14:79:bd:eb:df: 2c:d7:18:31:ad:71:1c:ea:cd:51:db:6b:46:b0:85:2e:cd:53: a5:ee:3c:f6:7b:bb:5c:d6:44:b4:ac:6d:d2:f0:ff:79:6c:18: d1:3f:12:9d:0e:90:a5:aa:b4:b4:59:b8:cd:b3:69:66:11:82: 7a:ef:aa:b1:be:42:89:54:e5:89:37:d8:6f:73:42:28:23:0f: 1c:82:76:e7:47:de:ae:a2:dc:b8:03:fe:76:5e:04:50:29:33: fd:e0:e5:3b:f5:90:9f:63:4e:5b:0d:77:48:43:36:07:af:06: c6:01:0f:29:a2:3e:e9:33:e5:c7:78:53:54:6a:4b:68:aa:7c: 3b:6a:2f:d9:ee:02:ae:13:9b:06:a1:00:2c:61:51:6c:0f:9a: 26:09:c1:aa:df:52:29:a5:d4:3a:28:a3:fb:50:5a:85:2c:6d: 7b:06:a6:21:5a:29:ff:a4:a8:e9:3c:28:5e:7a:0c:14:1a:89: 94:2c:1d:c0:b6:29:b0:f7:95:6e:12:f1:c9:83:e0:79:90:a8: 6d:ea:08:96:d9:53:13:af:e5:ad:e5:fd:c2:d1:b5:e2:66:c0: ad:38:1d:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDMDhENjQxNUU1MkY4 RjVEM0NCMzMxN0Y4RjY2M0QwOEJGOUJEQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUtH4G3NbQGIQV3Z9+fP+66vcY7wmRHPfBcsWTc2DQWh4EVJuY QzqDZwzTL09vx06+T7s9sr0//OUd/row8cEMXDTnYJCjXInpTdxs/AkoSjZi2NI7 fYxWZBo5elXPZCc3L+F1hYCbEy/NGughz/qYfutChDcHYjcDtW297lLC3cJeRNi7 YcN4aBELQ7gAlPHdoimQOKLIPyK1DFSCInYQ6Q9NokK9NwEdwxW4UaYVu2FlyU+J 131XThxjLXtxWBmdzuyX2WVJjrTM0fdgFa5jHAWj5JmE9Q79QlzSN2G8un9z43ra eo9cuyHTxOuBSVk3ZQSZGmVxhc1KhxTf2gzdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTAjWQV5S+PXTyzMX+PZj0Iv5va8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RBaldRVjVTLVBYVHl6TVgt UFpqMEl2NXZhOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6ewwDQYJKoZIhvcNAQELBQADggEBAD+GTSnDWr88WYgw8qc9Jb+Pk7kllpjQVoa/ MAzSNJMUeb3r3yzXGDGtcRzqzVHba0awhS7NU6XuPPZ7u1zWRLSsbdLw/3lsGNE/ Ep0OkKWqtLRZuM2zaWYRgnrvqrG+QolU5Yk32G9zQigjDxyCdudH3q6i3LgD/nZe BFApM/3g5Tv1kJ9jTlsNd0hDNgevBsYBDymiPukz5cd4U1RqS2iqfDtqL9nuAq4T mwahACxhUWwPmiYJwarfUiml1Dooo/tQWoUsbXsGpiFaKf+kqOk8KF56DBQaiZQs HcC2KbD3lW4S8cmD4HmQqG3qCJbZUxOv5a3l/cLRteJmwK04HWo= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org