$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UjASBNIz0r4MZRBSx5L-hgvQydw.roa File: UjASBNIz0r4MZRBSx5L-hgvQydw.roa (raw, json) Hash identifier: vVMm9jE0UKDM6uQQRZis7SCzLNm5Z+mMmeHIJIRQ+jM= Subject key identifier: 52:30:12:04:D2:33:D2:BE:0C:65:10:52:C7:92:FE:86:0B:D0:C9:DC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 322F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UjASBNIz0r4MZRBSx5L-hgvQydw.roa Signing time: Mon 26 Aug 2024 05:31:23 +0000 ROA not before: Mon 26 Aug 2024 05:31:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12847 (0x322f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=52301204D233D2BE0C651052C792FE860BD0C9DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:c5:f2:18:f9:59:59:78:df:18:ca:d9:58: 6d:39:c9:0a:75:73:e3:1b:a6:62:64:d8:37:b9:da: 2a:76:24:f7:82:20:f1:5b:ab:2b:e1:78:bd:7e:74: 55:09:fb:30:04:af:d8:03:6f:a2:23:0a:72:e0:db: 63:db:14:1f:b5:e4:ac:ea:45:90:3b:e4:12:35:e7: 76:5a:01:88:0a:53:14:fe:e7:2c:72:1e:fd:04:78: de:6a:c4:e1:c6:6a:6b:0e:52:55:c3:17:17:da:b3: 0e:6c:bb:4a:93:5a:d5:a1:bb:1d:d0:40:84:cd:1a: bd:fe:cc:b2:17:69:28:8d:9d:80:ec:ce:97:79:9b: 88:f6:51:39:d5:30:ca:ef:30:eb:72:4c:b1:2a:45: 97:e2:64:7a:72:cd:dd:4f:6e:de:12:aa:b5:5e:ab: f3:f4:71:f7:bd:c2:fc:3f:46:ee:b8:fa:1c:e8:da: 9a:45:97:a6:b5:c3:6a:86:9d:fd:7b:29:6a:ff:33: ce:33:d2:52:16:da:9c:4d:c5:d3:31:f7:c1:5b:db: 76:d0:31:5d:9e:b0:41:93:c0:a4:6b:52:22:86:26: 85:12:72:89:f9:03:05:39:ac:b4:a1:19:89:c7:7b: 10:e5:9c:09:9d:bc:40:65:3c:d0:73:23:58:a7:1b: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:30:12:04:D2:33:D2:BE:0C:65:10:52:C7:92:FE:86:0B:D0:C9:DC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UjASBNIz0r4MZRBSx5L-hgvQydw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.128.0/22 Signature Algorithm: sha256WithRSAEncryption 63:c1:ba:54:f7:17:6b:08:d6:20:57:83:24:38:77:4a:7d:5c: d4:4e:4c:4c:c0:c7:be:5f:03:05:eb:ba:18:d6:b9:fc:f1:8c: 9a:69:27:8e:67:86:c5:e8:9b:12:d8:88:50:c0:ba:a4:4a:ee: ac:7c:27:4f:d8:df:8a:ca:53:f2:fc:4e:68:99:ea:2a:58:6c: 7f:14:4a:61:1f:73:91:23:c4:fd:1d:cf:d8:37:17:9c:7f:ec: ee:78:e3:2d:c4:04:1e:24:04:7e:08:56:b1:23:a4:ba:20:c3: eb:e1:b9:dd:9a:4c:cb:27:48:28:ed:29:c2:b2:ce:6b:5d:c0: 42:11:49:a1:08:cc:a4:f7:82:2f:74:05:27:d5:4d:8b:4f:e0: 27:ad:dc:f0:b3:f4:1d:ca:00:59:93:d8:d0:f2:27:9d:3f:f5: 70:e0:ea:41:8e:22:b7:93:64:2e:16:0c:cc:fe:4e:1f:6b:21: ae:8f:ca:cd:ee:0d:0f:ec:33:00:31:ab:4f:64:e6:02:02:68: 35:c5:24:3f:49:7c:4b:e2:d4:c5:0a:e9:f2:6a:71:31:d5:b3: ad:c3:ec:af:83:06:7b:8a:84:39:66:90:dc:79:4d:b5:88:95: 6d:bc:e4:5c:ba:40:ad:37:43:b5:1d:a2:42:71:89:ac:97:f1: 60:49:88:86 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUyMzAxMjA0RDIzM0Qy QkUwQzY1MTA1MkM3OTJGRTg2MEJEMEM5REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXZ8XyGPlZWXjfGMrZWG05yQp1c+MbpmJk2De52ip2JPeCIPFb qyvheL1+dFUJ+zAEr9gDb6IjCnLg22PbFB+15KzqRZA75BI153ZaAYgKUxT+5yxy Hv0EeN5qxOHGamsOUlXDFxfasw5su0qTWtWhux3QQITNGr3+zLIXaSiNnYDszpd5 m4j2UTnVMMrvMOtyTLEqRZfiZHpyzd1Pbt4SqrVeq/P0cfe9wvw/Ru64+hzo2ppF l6a1w2qGnf17KWr/M84z0lIW2pxNxdMx98Fb23bQMV2esEGTwKRrUiKGJoUScon5 AwU5rLShGYnHexDlnAmdvEBlPNBzI1inG2mHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUjASBNIz0r4MZRBSx5L+hgvQydwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VqQVNCTkl6MHI0TVpSQlN4 NUwtaGd2UXlkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AYAwDQYJKoZIhvcNAQELBQADggEBAGPBulT3F2sI1iBXgyQ4d0p9XNROTEzAx75f AwXruhjWufzxjJppJ45nhsXomxLYiFDAuqRK7qx8J0/Y34rKU/L8TmiZ6ipYbH8U SmEfc5EjxP0dz9g3F5x/7O544y3EBB4kBH4IVrEjpLogw+vhud2aTMsnSCjtKcKy zmtdwEIRSaEIzKT3gi90BSfVTYtP4Cet3PCz9B3KAFmT2NDyJ50/9XDg6kGOIreT ZC4WDMz+Th9rIa6Pys3uDQ/sMwAxq09k5gICaDXFJD9JfEvi1MUK6fJqcTHVs63D 7K+DBnuKhDlmkNx5TbWIlW285Fy6QK03Q7UdokJxiayX8WBJiIY= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org