$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TcOTlwRRCJxQsBTRYphebUFfFqY.roa File: TcOTlwRRCJxQsBTRYphebUFfFqY.roa (raw, json) Hash identifier: 07NYGt1Peq7niO6fMrciiP4Od5NLYHrZwMpRi7rOyks= Subject key identifier: 4D:C3:93:97:04:51:08:9C:50:B0:14:D1:62:98:5E:6D:41:5F:16:A6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3145 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TcOTlwRRCJxQsBTRYphebUFfFqY.roa Signing time: Mon 26 Aug 2024 05:30:17 +0000 ROA not before: Mon 26 Aug 2024 05:30:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12613 (0x3145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4DC393970451089C50B014D162985E6D415F16A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f6:e4:7c:2b:da:8e:2d:37:fb:1d:36:c4:0c: 78:a7:8c:bc:de:b2:8d:ce:5c:45:42:eb:3d:65:98: 2f:34:5f:4f:b8:7a:4b:e9:93:af:79:1b:8e:51:2c: 5e:a3:60:32:d3:b0:91:9a:40:95:ea:4b:be:f2:66: bc:9d:b1:cf:f6:1c:a6:24:fe:3d:ca:72:ea:cf:bf: 66:7a:3b:56:28:12:b3:a1:02:04:a4:d0:5f:8a:c3: 66:92:34:20:44:d1:df:04:95:08:17:f2:c9:fd:e1: 00:d5:c9:d9:78:16:10:7a:fc:88:d9:e1:8c:d2:ee: 2c:98:78:68:32:dd:9a:46:21:ef:2d:55:26:55:84: 44:08:29:b9:1d:df:db:57:56:b5:6b:2d:1e:23:1e: d8:09:81:ba:f3:a3:a1:c8:40:68:dd:db:c6:17:78: 81:73:15:dc:64:0e:e6:2b:17:0b:e7:73:6a:b9:46: ee:5f:9c:98:47:01:22:85:e6:e0:88:a3:02:d8:7f: e7:9e:28:a5:7a:06:64:10:e1:1f:ba:1b:62:05:65: 25:18:b8:99:3b:46:bb:47:02:97:b3:dd:e4:1e:d7: 97:8c:a5:d7:8a:b5:ee:fb:b1:96:f9:b3:8e:d2:82: d8:29:12:d2:ff:a8:da:d4:d7:62:e8:f5:ba:38:d4: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C3:93:97:04:51:08:9C:50:B0:14:D1:62:98:5E:6D:41:5F:16:A6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TcOTlwRRCJxQsBTRYphebUFfFqY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.128.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:55:27:a5:f5:0d:b1:55:b8:3c:38:eb:9b:36:2e:8b:aa:05: 29:e5:78:80:e6:22:b9:d6:fb:55:c0:42:c3:05:72:bb:29:3c: 28:c7:17:f0:16:0b:13:28:a8:26:73:a4:3b:fa:6a:8c:25:91: f9:12:c6:b6:ec:81:38:80:d9:9d:f7:9a:1d:74:98:ad:54:61: c5:04:19:bd:02:40:88:f4:e6:1c:76:f9:3a:c8:bb:3c:25:7f: f7:8d:6c:87:c0:83:93:a4:36:5b:b5:63:83:62:04:05:19:da: e5:8c:e1:a1:14:8b:2d:a4:26:c0:b4:be:d3:56:ae:44:42:60: 47:11:30:22:b1:c4:6d:09:02:61:6e:2a:39:75:3c:4c:9d:75: 75:37:64:7b:86:2e:7b:36:aa:92:c9:78:b9:de:56:eb:30:fa: 78:7f:58:57:9d:a6:3f:27:40:0c:fd:d3:5c:5d:72:f2:f0:66: 78:06:26:ea:ed:6d:e5:95:35:1a:dd:0e:a1:7d:ff:1a:ab:aa: 34:aa:c9:df:18:b3:52:f2:f8:1a:10:3c:07:f7:66:12:8a:5c: fa:93:b7:92:91:4a:99:3b:63:c1:06:cb:7c:3b:ad:29:6f:22: 9a:0c:cc:a7:bd:35:b1:09:5a:d4:5f:af:06:f0:97:84:ef:e9: 48:2e:b5:e5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDREQzM5Mzk3MDQ1MTA4 OUM1MEIwMTREMTYyOTg1RTZENDE1RjE2QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh9uR8K9qOLTf7HTbEDHinjLzeso3OXEVC6z1lmC80X0+4ekvp k695G45RLF6jYDLTsJGaQJXqS77yZrydsc/2HKYk/j3KcurPv2Z6O1YoErOhAgSk 0F+Kw2aSNCBE0d8ElQgX8sn94QDVydl4FhB6/IjZ4YzS7iyYeGgy3ZpGIe8tVSZV hEQIKbkd39tXVrVrLR4jHtgJgbrzo6HIQGjd28YXeIFzFdxkDuYrFwvnc2q5Ru5f nJhHASKF5uCIowLYf+eeKKV6BmQQ4R+6G2IFZSUYuJk7RrtHApez3eQe15eMpdeK te77sZb5s47SgtgpEtL/qNrU12Lo9bo41Lf9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTcOTlwRRCJxQsBTRYphebUFfFqYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RjT1Rsd1JSQ0p4UXNCVFJZ cGhlYlVGZkZxWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6YAwDQYJKoZIhvcNAQELBQADggEBAJtVJ6X1DbFVuDw465s2LouqBSnleIDmIrnW +1XAQsMFcrspPCjHF/AWCxMoqCZzpDv6aowlkfkSxrbsgTiA2Z33mh10mK1UYcUE Gb0CQIj05hx2+TrIuzwlf/eNbIfAg5OkNlu1Y4NiBAUZ2uWM4aEUiy2kJsC0vtNW rkRCYEcRMCKxxG0JAmFuKjl1PEyddXU3ZHuGLns2qpLJeLneVusw+nh/WFedpj8n QAz901xdcvLwZngGJurtbeWVNRrdDqF9/xqrqjSqyd8Ys1Ly+BoQPAf3ZhKKXPqT t5KRSpk7Y8EGy3w7rSlvIpoMzKe9NbEJWtRfrwbwl4Tv6UguteU= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org