$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TW2ezmytLYYE7vLmitGofV7a6OU.roa File: TW2ezmytLYYE7vLmitGofV7a6OU.roa (raw, json) Hash identifier: cCXx8DKLNbmDnWC4ioMCOwXKFSpGiaGZOKzYczmovu4= Subject key identifier: 4D:6D:9E:CE:6C:AD:2D:86:04:EE:F2:E6:8A:D1:A8:7D:5E:DA:E8:E5 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31DF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TW2ezmytLYYE7vLmitGofV7a6OU.roa Signing time: Mon 26 Aug 2024 05:31:02 +0000 ROA not before: Mon 26 Aug 2024 05:31:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12767 (0x31df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4D6D9ECE6CAD2D8604EEF2E68AD1A87D5EDAE8E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cf:04:a2:64:5a:1c:4e:aa:a3:af:e1:b5:70: 21:b9:2a:a7:61:85:8f:96:50:a5:bd:58:aa:4a:e2: 5e:4d:cb:72:3d:42:d6:a5:9a:5e:d8:fe:0f:3c:00: 18:04:54:1a:4b:3c:0b:ea:0c:97:8c:20:58:ff:a7: 90:4b:34:54:67:84:17:b3:d5:29:a8:d4:d8:3b:cb: 7c:31:0b:c7:dd:1a:2c:0e:40:e5:7d:60:0f:8c:c7: bc:ac:3c:e9:8b:09:d8:94:68:65:7b:cc:1d:16:19: e2:96:83:b0:88:57:0d:3a:2d:ca:c4:54:28:b2:98: dc:0b:0e:4d:8f:15:c6:e7:ab:d1:00:44:31:e2:c7: 6e:71:58:02:1e:08:03:bc:f2:be:52:4e:de:08:17: 3a:7b:41:78:79:42:07:e8:4e:20:0f:80:d3:d3:76: 05:c6:b4:c7:f6:6b:a8:4e:9d:eb:75:6c:ad:19:29: 86:96:47:66:47:f1:b9:fa:88:cc:5e:96:2c:49:b2: 9c:91:e8:b1:93:80:d7:31:12:9b:a0:c8:b2:6f:26: 97:58:1d:da:0e:dc:00:60:b4:74:ab:98:ed:15:61: 58:95:46:32:63:02:28:c5:bc:d8:2d:7d:b6:a5:44: 46:2d:68:72:62:97:dd:96:81:42:63:0d:7f:6c:c8: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6D:9E:CE:6C:AD:2D:86:04:EE:F2:E6:8A:D1:A8:7D:5E:DA:E8:E5 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TW2ezmytLYYE7vLmitGofV7a6OU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f0:73:be:ac:96:dd:19:83:f6:4b:6c:eb:77:c9:34:7d:d1: b3:90:ec:af:d0:67:72:70:dd:b9:6d:f8:8c:e9:78:f6:ff:5a: 88:d5:8a:fb:63:49:aa:eb:57:f6:eb:9e:7c:4b:b5:0e:36:a1: d0:59:60:c4:c9:60:ac:33:30:e1:73:64:b6:5c:82:2b:82:38: 73:2f:56:44:21:94:27:f1:27:4a:70:1e:d7:eb:b9:be:a1:1e: d7:e3:45:53:7e:0d:fb:32:8c:12:5a:a6:8a:92:2c:5d:2c:2e: de:c2:e5:c9:32:dd:ff:12:40:27:09:ab:0d:7b:a5:d3:01:23: b8:a5:e3:a3:ad:b0:f8:5c:c0:51:46:a1:7f:a0:a6:0c:f7:30: c8:17:18:fd:34:6a:37:70:4c:19:a9:93:17:80:ba:4a:6c:bf: 8e:5c:08:56:54:06:95:36:aa:94:5c:87:6a:16:8d:32:a4:38: f1:49:d5:fe:8e:3d:bd:f3:7f:49:ee:6d:fd:92:bf:a8:66:5d: 9a:ac:b9:ee:c4:47:b1:36:3c:ed:ec:9e:c0:44:de:df:b3:24: 5d:a5:11:d3:15:16:48:4a:fa:1b:eb:bb:80:4e:3c:52:9e:31: 5c:f3:87:48:0c:7f:49:ca:3f:f4:29:2a:b1:b9:28:b7:d5:30: 33:03:47:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRENkQ5RUNFNkNBRDJE ODYwNEVFRjJFNjhBRDFBODdENUVEQUU4RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhzwSiZFocTqqjr+G1cCG5KqdhhY+WUKW9WKpK4l5Ny3I9Qtal ml7Y/g88ABgEVBpLPAvqDJeMIFj/p5BLNFRnhBez1Smo1Ng7y3wxC8fdGiwOQOV9 YA+Mx7ysPOmLCdiUaGV7zB0WGeKWg7CIVw06LcrEVCiymNwLDk2PFcbnq9EARDHi x25xWAIeCAO88r5STt4IFzp7QXh5QgfoTiAPgNPTdgXGtMf2a6hOnet1bK0ZKYaW R2ZH8bn6iMxelixJspyR6LGTgNcxEpugyLJvJpdYHdoO3ABgtHSrmO0VYViVRjJj AijFvNgtfbalREYtaHJil92WgUJjDX9syArfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTW2ezmytLYYE7vLmitGofV7a6OUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RXMmV6bXl0TFlZRTd2TG1p dEdvZlY3YTZPVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+0wDQYJKoZIhvcNAQELBQADggEBAHXwc76slt0Zg/ZLbOt3yTR90bOQ7K/QZ3Jw 3blt+IzpePb/WojVivtjSarrV/brnnxLtQ42odBZYMTJYKwzMOFzZLZcgiuCOHMv VkQhlCfxJ0pwHtfrub6hHtfjRVN+DfsyjBJapoqSLF0sLt7C5cky3f8SQCcJqw17 pdMBI7il46OtsPhcwFFGoX+gpgz3MMgXGP00ajdwTBmpkxeAukpsv45cCFZUBpU2 qpRch2oWjTKkOPFJ1f6OPb3zf0nubf2Sv6hmXZqsue7ER7E2PO3snsBE3t+zJF2l EdMVFkhK+hvru4BOPFKeMVzzh0gMf0nKP/QpKrG5KLfVMDMDR7A= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org