$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa File: Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa (raw, json) Hash identifier: eq37ruz9Ermg9UkPOsYOcw2WLBHsDxMaDfdmGpiaU7g= Subject key identifier: 4F:3A:1D:E0:2A:F7:B7:53:79:61:9C:2A:9F:69:39:B0:09:95:38:FB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3217 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa Signing time: Mon 26 Aug 2024 05:31:15 +0000 ROA not before: Mon 26 Aug 2024 05:31:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12823 (0x3217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4F3A1DE02AF7B75379619C2A9F6939B0099538FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:06:d4:00:cc:ec:21:f6:3c:06:f5:07:b2: a0:10:5e:af:c1:f3:3a:6d:32:1a:af:74:23:49:33: 70:72:9d:e8:33:b7:7b:0e:6a:f1:91:4d:36:60:f2: de:75:2e:38:f9:ff:c0:d5:65:53:62:de:39:8b:a4: 44:64:5c:e1:4f:28:b0:29:82:99:c8:56:28:75:af: c8:f1:76:8c:c6:ee:f7:64:94:c1:3b:20:f7:4b:bd: 31:95:62:f0:31:56:a0:4d:c7:f2:38:87:7f:a6:02: f0:d0:d7:ed:72:2c:37:a6:a7:2a:f0:68:08:39:28: d8:6a:cb:63:d5:2a:70:a0:bd:34:a7:01:0a:c3:ca: d3:fd:83:69:68:ae:38:c5:64:f6:25:aa:e1:9a:93: 9f:9a:c1:3c:63:67:d4:d5:0c:cc:c5:fb:d9:48:90: 91:f4:1a:d7:81:f6:df:8a:8a:c7:54:a5:47:ab:f9: ee:a1:99:dc:df:b6:05:2c:82:2f:5f:00:bd:d3:75: e8:48:bb:30:67:e7:1c:aa:33:9b:d9:73:72:9c:69: 3c:09:70:a8:fe:66:86:46:ec:8c:15:2c:8d:f7:80: 3f:14:52:4a:e0:6a:65:98:65:15:75:c9:7c:1b:c5: 9c:41:fe:be:d5:ff:61:32:e5:ca:08:cd:7a:78:16: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3A:1D:E0:2A:F7:B7:53:79:61:9C:2A:9F:69:39:B0:09:95:38:FB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tzod4Cr3t1N5YZwqn2k5sAmVOPs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.180.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:8e:1c:64:33:da:cd:66:56:ac:ce:8c:55:70:8f:27:78:f3: 77:8a:41:cd:13:3a:00:a4:79:89:bd:83:be:4c:b7:47:2c:a5: 07:30:62:7b:34:0c:b3:af:6f:ea:94:c4:56:08:34:60:e8:0a: e5:a9:71:07:d9:0e:55:2a:c7:64:e0:60:6f:00:9a:8e:52:52: fb:80:a2:15:2d:0d:df:93:e5:2a:b3:2d:29:de:d3:96:d5:49: 48:9a:bb:f0:16:df:78:52:97:f4:98:c5:4f:f8:c5:25:8e:0b: 65:d7:33:4a:d4:ab:c6:0e:25:33:a9:2f:bb:80:a4:10:66:8e: 70:d1:c3:47:b4:69:00:59:f6:45:69:67:68:f0:09:d0:49:29: 63:c2:89:c0:01:d2:6c:2c:e6:fd:fc:ca:29:79:17:6d:de:44: af:e7:33:f8:33:1f:db:e5:30:81:e0:0e:4f:76:8c:59:ab:4a: 48:e2:01:f6:21:84:37:6b:9d:45:38:51:43:e8:9c:ff:ed:6d: 26:7c:dc:0d:53:97:d8:bc:c7:55:6b:ca:20:87:6b:82:ba:19: c1:17:b6:1b:92:6a:83:9a:37:a3:8a:90:2b:0a:28:7b:1c:d5: 35:6a:e7:58:82:35:d1:8f:20:5e:5c:0b:32:19:9c:1d:9c:98: 85:c1:53:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRGM0ExREUwMkFGN0I3 NTM3OTYxOUMyQTlGNjkzOUIwMDk5NTM4RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfjgbUAMzsIfY8BvUHsqAQXq/B8zptMhqvdCNJM3Bynegzt3sO avGRTTZg8t51Ljj5/8DVZVNi3jmLpERkXOFPKLApgpnIVih1r8jxdozG7vdklME7 IPdLvTGVYvAxVqBNx/I4h3+mAvDQ1+1yLDempyrwaAg5KNhqy2PVKnCgvTSnAQrD ytP9g2lorjjFZPYlquGak5+awTxjZ9TVDMzF+9lIkJH0GteB9t+KisdUpUer+e6h mdzftgUsgi9fAL3TdehIuzBn5xyqM5vZc3KcaTwJcKj+ZoZG7IwVLI33gD8UUkrg amWYZRV1yXwbxZxB/r7V/2Ey5coIzXp4Ft/bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTzod4Cr3t1N5YZwqn2k5sAmVOPswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1R6b2Q0Q3IzdDFONVlad3Fu Mms1c0FtVk9Qcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AbQwDQYJKoZIhvcNAQELBQADggEBAD+OHGQz2s1mVqzOjFVwjyd483eKQc0TOgCk eYm9g75Mt0cspQcwYns0DLOvb+qUxFYINGDoCuWpcQfZDlUqx2TgYG8Amo5SUvuA ohUtDd+T5SqzLSne05bVSUiau/AW33hSl/SYxU/4xSWOC2XXM0rUq8YOJTOpL7uA pBBmjnDRw0e0aQBZ9kVpZ2jwCdBJKWPCicAB0mws5v38yil5F23eRK/nM/gzH9vl MIHgDk92jFmrSkjiAfYhhDdrnUU4UUPonP/tbSZ83A1Tl9i8x1VryiCHa4K6GcEX thuSaoOaN6OKkCsKKHsc1TVq51iCNdGPIF5cCzIZnB2cmIXBU+Q= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:52 2024 by rpki-client on console-fra.rpki-client.org