$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa File: TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa (raw, json) Hash identifier: eGrc+PNmTF3H8ZenWtepnur/4DFTbANHKFjQh76g1KM= Subject key identifier: 4D:BC:E4:8C:7E:4E:11:FB:15:5D:9D:D6:6E:65:20:69:B7:8A:F2:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30CE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa Signing time: Mon 26 Aug 2024 05:29:50 +0000 ROA not before: Mon 26 Aug 2024 05:29:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.192.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12494 (0x30ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4DBCE48C7E4E11FB155D9DD66E652069B78AF279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:b6:b6:2d:6e:dd:1d:f3:84:27:43:ed:f6: fe:72:6c:3d:ef:8c:d7:f0:94:a0:ba:84:fc:a2:9c: 56:83:7d:5c:fc:f8:ba:60:43:72:41:f0:0f:2a:61: a9:5f:8b:9c:af:28:19:02:83:b6:e0:6c:5f:f3:8f: 69:0f:65:36:00:2e:41:73:98:77:67:4a:a7:47:01: 86:0a:d9:53:99:1c:27:fa:06:ba:3d:15:25:2a:2c: 95:4b:41:8d:3f:85:30:24:a8:56:be:95:d9:6e:30: 41:6f:f1:24:af:71:44:e4:90:c9:5d:c8:b1:2b:bf: cc:25:af:08:9f:82:75:6d:ac:7c:20:bc:db:30:d9: 8f:d2:8e:d7:3d:e6:2c:36:1c:dd:93:3d:c2:d5:27: 2f:70:50:8f:4c:b1:5b:eb:67:14:39:fa:ee:9e:d4: e7:9c:17:11:3c:01:aa:d2:42:a2:dd:ef:4a:3a:b9: cc:3c:25:04:df:14:be:fc:f2:97:3c:ec:98:28:cf: 2e:41:6f:9c:6a:fe:ed:0b:b1:30:04:4e:1e:ac:a6: a6:c2:93:15:a3:4a:60:0a:5b:fe:3c:17:3b:ee:cd: 92:ce:92:00:c0:10:18:31:46:6e:89:cb:3e:bd:80: 99:ba:f2:18:9a:4f:68:e3:3d:0f:f6:5f:0f:26:ad: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BC:E4:8C:7E:4E:11:FB:15:5D:9D:D6:6E:65:20:69:B7:8A:F2:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:bd:16:67:43:f3:db:d2:31:09:f0:28:34:30:8f:15:28:3d: 74:b0:7d:eb:0a:15:fc:5b:a8:67:72:b3:6e:8f:11:09:a1:ec: f0:f5:29:4a:65:6b:b9:41:ed:d1:dd:1b:a8:70:bf:4e:6b:d8: 37:f8:73:93:01:3b:4e:1b:43:9c:b0:5d:2b:60:b4:3e:53:4c: b2:90:f6:79:ec:d8:e7:9e:c0:04:2f:fb:49:ee:a3:ff:a0:69: b5:98:95:ab:fd:77:c8:01:40:67:ac:60:ee:c1:9a:63:ec:9e: 5c:4b:c1:ac:08:b1:6e:19:42:be:52:a0:14:23:2f:f5:69:a0: 19:b4:07:f7:80:4f:61:f5:e9:d1:47:30:90:24:96:16:c1:53: a2:c5:4e:22:e8:23:03:3b:f3:04:7b:04:36:ca:48:42:4b:7d: 5e:e0:e9:0c:46:fa:ca:10:00:5f:3e:c9:22:4e:6f:e1:4a:62: ba:bb:0b:c4:0b:80:71:47:c7:71:b0:5f:a1:7c:f8:ad:a3:9f: b6:25:52:b4:72:80:76:71:74:ce:5b:b7:2e:a4:85:93:0a:1f: 7d:71:c2:0d:77:76:30:39:b1:e2:11:d2:19:ed:db:05:01:a8: 77:93:4d:5d:d4:49:9d:90:95:03:5c:32:12:11:b0:df:44:8b: 59:8d:c0:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDREQkNFNDhDN0U0RTEx RkIxNTVEOURENjZFNjUyMDY5Qjc4QUYyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQyra2LW7dHfOEJ0Pt9v5ybD3vjNfwlKC6hPyinFaDfVz8+Lpg Q3JB8A8qYalfi5yvKBkCg7bgbF/zj2kPZTYALkFzmHdnSqdHAYYK2VOZHCf6Bro9 FSUqLJVLQY0/hTAkqFa+ldluMEFv8SSvcUTkkMldyLErv8wlrwifgnVtrHwgvNsw 2Y/Sjtc95iw2HN2TPcLVJy9wUI9MsVvrZxQ5+u6e1OecFxE8AarSQqLd70o6ucw8 JQTfFL788pc87Jgozy5Bb5xq/u0LsTAETh6spqbCkxWjSmAKW/48FzvuzZLOkgDA EBgxRm6Jyz69gJm68hiaT2jjPQ/2Xw8mrSjtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTbzkjH5OEfsVXZ3WbmUgabeK8nkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RiemtqSDVPRWZzVlhaM1di bVVnYWJlSzhuay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wJAwDQYJKoZIhvcNAQELBQADggEBAD+9FmdD89vSMQnwKDQwjxUoPXSwfesKFfxb qGdys26PEQmh7PD1KUpla7lB7dHdG6hwv05r2Df4c5MBO04bQ5ywXStgtD5TTLKQ 9nns2OeewAQv+0nuo/+gabWYlav9d8gBQGesYO7BmmPsnlxLwawIsW4ZQr5SoBQj L/VpoBm0B/eAT2H16dFHMJAklhbBU6LFTiLoIwM78wR7BDbKSEJLfV7g6QxG+soQ AF8+ySJOb+FKYrq7C8QLgHFHx3GwX6F8+K2jn7YlUrRygHZxdM5bty6khZMKH31x wg13djA5seIR0hnt2wUBqHeTTV3USZ2QlQNcMhIRsN9Ei1mNwFA= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:20 2024 by rpki-client on console-ams.rpki-client.org