$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUUcyTKaQUh_8yPH_BXgyzzjo2c.roa File: UUUcyTKaQUh_8yPH_BXgyzzjo2c.roa (raw, json) Hash identifier: dNUY/VvuQ52yJPa7aCu1+TNeIK1JYc5pUoCrFL/SkcA= Subject key identifier: 51:45:1C:C9:32:9A:41:48:7F:F3:23:C7:FC:15:E0:CB:3C:E3:A3:67 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3124 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUUcyTKaQUh_8yPH_BXgyzzjo2c.roa Signing time: Mon 26 Aug 2024 05:30:08 +0000 ROA not before: Mon 26 Aug 2024 05:30:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 45.64.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12580 (0x3124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=51451CC9329A41487FF323C7FC15E0CB3CE3A367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:00:bb:8b:2a:fe:0a:22:77:26:cf:4e:17: a5:4c:5f:67:1b:c2:2f:44:b2:06:27:e6:c3:b8:f8: 21:29:ce:0a:d1:bd:3b:de:e5:66:ea:c7:c0:b6:f1: 86:0a:03:af:01:ef:00:b2:5b:e4:c2:39:13:40:e0: a6:14:6c:40:61:95:ef:94:61:80:f6:b2:87:36:bd: 3d:47:6d:0b:56:4a:fd:c1:dd:e9:14:fa:07:60:5f: cc:23:a5:71:8e:7b:89:7c:25:be:3e:37:d5:09:04: d7:e8:47:0c:67:05:3e:df:ae:c2:37:b4:57:1b:df: 1d:b4:07:d9:43:6f:02:fd:a5:e0:03:de:ae:ce:e7: dd:e6:5f:26:b7:29:88:9d:b7:95:47:31:e4:00:0c: 01:42:c4:0b:2a:0b:b6:19:d5:35:15:a8:ed:e5:ad: 8c:97:2b:51:d2:7b:2a:24:00:2b:e1:0d:e4:1c:7a: 69:ad:bb:88:04:4e:7b:c7:c3:c8:16:e9:89:20:dd: 4d:3e:e3:23:16:c9:b2:e7:fc:45:cc:c5:e3:00:f5: 5f:a7:15:50:23:00:7d:89:c1:99:2d:ed:eb:9f:b6: 46:47:e9:1a:69:66:1a:8a:aa:a6:6d:cf:a6:71:bf: a4:3e:e0:e2:e6:82:12:d7:18:6f:3c:28:21:45:fd: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:45:1C:C9:32:9A:41:48:7F:F3:23:C7:FC:15:E0:CB:3C:E3:A3:67 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUUcyTKaQUh_8yPH_BXgyzzjo2c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.28.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:7e:68:b2:17:98:96:81:a0:b6:cb:28:b4:1c:da:f4:f5:b9: f8:63:30:3a:36:00:44:20:5e:9f:a3:7c:59:b1:22:02:39:ef: e3:f4:94:71:2f:68:4c:6f:dc:9d:58:bc:03:53:29:44:0e:dc: 72:f9:39:c3:96:5c:5c:69:e6:62:a5:7c:7f:05:60:7a:65:ad: 03:ab:b3:29:80:bb:70:e3:11:e4:08:a4:e4:c0:c2:23:5d:92: a5:b5:c9:95:c8:74:03:d9:08:14:76:4c:aa:50:04:ab:6d:20: 7a:52:eb:d6:2e:5e:f4:83:68:ed:65:1f:d2:1f:89:e3:b6:9e: 5e:5d:7a:d3:36:ed:d2:ce:93:b6:3a:1b:70:e6:f0:7f:80:57: ec:e9:cf:87:b7:06:8d:1b:17:ce:9d:f3:25:d2:73:25:88:cc: 2f:d1:3d:97:08:46:32:34:57:9d:40:38:4b:fe:36:b4:74:5f: 9b:1a:1e:45:61:43:6b:73:4e:ac:e4:ec:9b:34:72:fb:60:c1: 3f:7c:e7:46:a0:16:a0:01:ba:e3:53:80:ba:14:cc:9e:d5:1f: 18:c3:1b:58:bc:60:ab:49:4b:1e:95:aa:69:8b:47:89:d4:72: 81:76:81:e8:6e:e9:e5:32:2b:2d:dc:52:f1:32:4a:3d:82:6b: f4:65:19:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxNDUxQ0M5MzI5QTQx NDg3RkYzMjNDN0ZDMTVFMENCM0NFM0EzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG/AC7iyr+CiJ3Js9OF6VMX2cbwi9EsgYn5sO4+CEpzgrRvTve 5Wbqx8C28YYKA68B7wCyW+TCORNA4KYUbEBhle+UYYD2soc2vT1HbQtWSv3B3ekU +gdgX8wjpXGOe4l8Jb4+N9UJBNfoRwxnBT7frsI3tFcb3x20B9lDbwL9peAD3q7O 593mXya3KYidt5VHMeQADAFCxAsqC7YZ1TUVqO3lrYyXK1HSeyokACvhDeQcemmt u4gETnvHw8gW6Ykg3U0+4yMWybLn/EXMxeMA9V+nFVAjAH2JwZkt7euftkZH6Rpp ZhqKqqZtz6Zxv6Q+4OLmghLXGG88KCFF/RH7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUUUcyTKaQUh/8yPH/BXgyzzjo2cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VVVWN5VEthUVVoXzh5UEhf QlhneXp6am8yYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt QBwwDQYJKoZIhvcNAQELBQADggEBAGp+aLIXmJaBoLbLKLQc2vT1ufhjMDo2AEQg Xp+jfFmxIgI57+P0lHEvaExv3J1YvANTKUQO3HL5OcOWXFxp5mKlfH8FYHplrQOr symAu3DjEeQIpOTAwiNdkqW1yZXIdAPZCBR2TKpQBKttIHpS69YuXvSDaO1lH9If ieO2nl5detM27dLOk7Y6G3Dm8H+AV+zpz4e3Bo0bF86d8yXScyWIzC/RPZcIRjI0 V51AOEv+NrR0X5saHkVhQ2tzTqzk7Js0cvtgwT9850agFqABuuNTgLoUzJ7VHxjD G1i8YKtJSx6VqmmLR4nUcoF2gehu6eUyKy3cUvEySj2Ca/RlGdM= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org