$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UvPCkpl-egfLc-gNnK4OVqP37E8.roa File: UvPCkpl-egfLc-gNnK4OVqP37E8.roa (raw, json) Hash identifier: O2eeGuaRb2ePCWyVGGeRblQfVM4KlpgsN3w0LYthTvU= Subject key identifier: 52:F3:C2:92:99:7E:7A:07:CB:73:E8:0D:9C:AE:0E:56:A3:F7:EC:4F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3242 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UvPCkpl-egfLc-gNnK4OVqP37E8.roa Signing time: Mon 26 Aug 2024 05:31:28 +0000 ROA not before: Mon 26 Aug 2024 05:31:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12866 (0x3242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=52F3C292997E7A07CB73E80D9CAE0E56A3F7EC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:7f:9b:53:5b:fb:28:b5:c2:8d:59:54:a5: c6:10:87:ec:2b:ed:92:b1:38:7a:cb:4d:78:b8:d3: 08:9d:2d:07:d8:27:48:fb:84:d5:5a:c9:16:89:57: 4a:d0:8a:fd:99:43:8d:b5:6a:47:b9:2d:9e:64:0b: b0:45:9d:b2:b4:7d:1d:db:00:73:ab:e0:a7:dd:50: fa:92:b9:27:af:1f:ba:13:de:97:ed:ae:34:c9:9e: 4e:f3:f7:3e:00:28:01:1a:e8:18:aa:ad:9d:64:21: 04:2c:4d:25:54:6d:bb:f5:df:98:2e:d6:a4:69:8d: 90:3c:14:30:49:9b:64:a7:94:fe:87:53:2e:89:62: b4:1f:6d:2d:b3:a7:dd:ad:e9:65:04:b5:c7:f9:6b: bd:47:4f:55:1d:d4:bc:5e:fe:7d:d0:c6:0d:8c:8c: 88:ad:b6:7a:4e:79:4c:db:b5:d5:b6:02:1c:38:02: 89:35:2d:0b:5e:52:83:aa:6b:11:41:ae:9c:34:3e: 14:00:e0:e9:57:f6:76:da:bc:85:05:97:c9:b9:f0: da:f2:af:eb:df:0e:52:d6:0f:68:fd:cc:ad:aa:07: a7:75:16:69:cd:5d:01:3e:65:6a:9b:94:82:8d:2c: d2:ef:20:9a:95:be:ce:5e:d5:82:60:30:98:f9:55: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F3:C2:92:99:7E:7A:07:CB:73:E8:0D:9C:AE:0E:56:A3:F7:EC:4F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UvPCkpl-egfLc-gNnK4OVqP37E8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.80.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:6a:45:6b:27:af:d2:d9:6d:52:1b:b8:6e:55:b0:db:02:fe: 2b:05:d9:2c:1f:bc:8e:8c:6f:8e:62:2a:ef:cc:ef:b2:dd:5c: 63:f9:7f:09:66:19:10:de:03:14:58:41:79:e2:08:c2:c8:fd: 50:f2:04:9d:e8:17:18:e1:d9:31:68:2d:5e:56:96:8c:87:ee: bc:63:45:a6:05:4e:8e:57:ec:5e:64:26:5c:47:e9:04:85:25: f0:e1:31:0a:a1:5f:53:6b:be:ba:d5:3d:d2:a1:8a:f1:93:bc: bd:27:48:62:04:92:9d:d8:f9:8d:54:0b:20:de:de:78:00:9e: c3:c6:a6:f9:c9:f4:59:3f:e2:2a:5a:59:6f:d7:67:9d:e7:ea: f3:d9:34:74:4d:cb:34:ab:19:b5:e0:9c:67:88:07:7e:f8:58: 54:b5:18:be:2b:d7:0a:f8:f6:d2:a2:0f:b8:03:f1:4c:cb:01: d1:37:98:e9:3e:f6:60:d4:8a:01:67:8c:93:99:3f:3a:7f:64: 69:26:ed:11:f5:1e:ab:28:50:03:ee:4a:fb:63:c3:06:2b:67: a2:60:0d:8e:4d:cc:ce:86:23:4d:31:02:7e:46:c2:95:1c:5f: d1:c6:4b:36:6a:8f:86:e9:9b:45:73:38:2d:28:70:03:a3:d1: 00:b5:54:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUyRjNDMjkyOTk3RTdB MDdDQjczRTgwRDlDQUUwRTU2QTNGN0VDNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUAn+bU1v7KLXCjVlUpcYQh+wr7ZKxOHrLTXi40widLQfYJ0j7 hNVayRaJV0rQiv2ZQ421ake5LZ5kC7BFnbK0fR3bAHOr4KfdUPqSuSevH7oT3pft rjTJnk7z9z4AKAEa6BiqrZ1kIQQsTSVUbbv135gu1qRpjZA8FDBJm2SnlP6HUy6J YrQfbS2zp92t6WUEtcf5a71HT1Ud1Lxe/n3Qxg2MjIittnpOeUzbtdW2Ahw4Aok1 LQteUoOqaxFBrpw0PhQA4OlX9nbavIUFl8m58Nryr+vfDlLWD2j9zK2qB6d1FmnN XQE+ZWqblIKNLNLvIJqVvs5e1YJgMJj5Vb7xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUvPCkpl+egfLc+gNnK4OVqP37E8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1V2UENrcGwtZWdmTGMtZ05u SzRPVnFQMzdFOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w1AwDQYJKoZIhvcNAQELBQADggEBAGtqRWsnr9LZbVIbuG5VsNsC/isF2SwfvI6M b45iKu/M77LdXGP5fwlmGRDeAxRYQXniCMLI/VDyBJ3oFxjh2TFoLV5WloyH7rxj RaYFTo5X7F5kJlxH6QSFJfDhMQqhX1NrvrrVPdKhivGTvL0nSGIEkp3Y+Y1UCyDe 3ngAnsPGpvnJ9Fk/4ipaWW/XZ53n6vPZNHRNyzSrGbXgnGeIB374WFS1GL4r1wr4 9tKiD7gD8UzLAdE3mOk+9mDUigFnjJOZPzp/ZGkm7RH1HqsoUAPuSvtjwwYrZ6Jg DY5NzM6GI00xAn5GwpUcX9HGSzZqj4bpm0VzOC0ocAOj0QC1VFg= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org