$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V0vJpOL7x2BFHH4_0sdM-DNEtKE.roa File: V0vJpOL7x2BFHH4_0sdM-DNEtKE.roa (raw, json) Hash identifier: fIkNZ/f2J2qqVZS5DGuoXM/yK+6h81Dhqq3yLzRxHZg= Subject key identifier: 57:4B:C9:A4:E2:FB:C7:60:45:1C:7E:3F:D2:C7:4C:F8:33:44:B4:A1 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32F4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V0vJpOL7x2BFHH4_0sdM-DNEtKE.roa Signing time: Mon 26 Aug 2024 05:32:10 +0000 ROA not before: Mon 26 Aug 2024 05:32:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13044 (0x32f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=574BC9A4E2FBC760451C7E3FD2C74CF83344B4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:ed:d9:c6:07:65:15:91:12:87:13:32:ce: 92:15:da:42:20:f9:59:0f:d5:49:64:4d:52:9f:4c: 44:c6:68:9b:ee:64:d6:cb:53:82:f1:14:aa:bb:b6: 86:07:6a:5e:8d:11:bd:cf:11:ac:31:51:bb:2d:a9: f4:32:8e:ca:cc:9c:83:4b:b0:83:60:74:06:ac:6e: 54:e0:49:eb:64:60:e5:d1:a4:ed:c9:78:3d:10:ac: 3e:af:71:2e:26:71:39:b6:1d:bb:5c:5d:7d:d3:c8: ed:81:f5:c1:f7:c6:00:54:c9:61:05:61:b2:ae:05: 28:d7:0a:cc:a7:39:59:41:41:09:a4:4c:d9:b0:e2: 22:72:cb:d5:87:95:c4:ac:d1:ea:0a:ce:d1:44:56: 1c:a4:7a:54:bb:72:cc:ce:0c:c1:6c:75:36:e6:9d: db:1e:4c:d8:f5:9c:f3:99:80:a5:b7:ff:9a:d0:76: 0c:3d:13:6b:d4:ba:88:9a:19:0a:11:23:eb:d2:8a: 67:b2:9b:87:55:53:e9:e5:5d:1a:00:ea:11:da:96: 0c:7d:58:35:97:31:90:dd:cd:d0:5e:39:af:ec:dd: 17:eb:3d:fc:36:23:ce:73:27:73:af:a6:e3:f7:9e: 8e:02:83:b1:5a:23:fa:df:04:23:87:ee:7f:42:83: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4B:C9:A4:E2:FB:C7:60:45:1C:7E:3F:D2:C7:4C:F8:33:44:B4:A1 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V0vJpOL7x2BFHH4_0sdM-DNEtKE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.76.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:6c:03:cc:6f:57:f1:76:1c:e9:c5:64:9c:60:23:e8:a4:db: 89:fd:27:c2:e1:75:ed:df:9a:0a:c8:7c:d5:42:37:26:32:67: be:96:62:a8:09:6d:f5:cb:10:94:fb:3c:41:7a:a0:bc:0a:2a: 1e:bf:a0:6f:b3:ba:67:f8:49:6b:c8:35:59:62:82:fc:75:df: 65:1a:b4:b5:cf:c8:58:9c:f9:40:2d:d6:fc:98:bb:1d:1d:3a: fe:ca:9d:17:45:39:1a:f0:e2:36:60:ce:4f:85:4b:c9:72:b5: 19:2c:c5:61:a1:31:d5:69:ba:b5:d3:b3:e4:7c:42:d8:d8:fa: ea:d7:d4:ef:f3:19:55:a5:31:9b:76:81:c9:86:a7:71:1f:17: 8a:2d:ba:3d:88:88:b8:a6:9b:af:dd:b1:8c:0d:d5:f4:f5:78: ea:b7:6d:a4:39:5e:dc:fd:a2:2b:be:2e:a3:0a:b0:d0:fe:65: 31:8e:7b:cd:fe:71:68:60:04:d1:69:b8:20:40:4c:b4:2b:33: 8f:21:8e:f5:cc:a5:6f:6b:b9:98:c9:57:f1:25:2a:49:25:58: 90:d9:ff:35:94:56:aa:15:d0:ae:20:c6:44:f1:ea:b0:97:e9: db:d3:d1:3a:ae:7d:0f:aa:6b:a9:ab:4a:53:35:72:9d:9c:0b: 8e:e4:37:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU3NEJDOUE0RTJGQkM3 NjA0NTFDN0UzRkQyQzc0Q0Y4MzM0NEI0QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFvu3ZxgdlFZEShxMyzpIV2kIg+VkP1UlkTVKfTETGaJvuZNbL U4LxFKq7toYHal6NEb3PEawxUbstqfQyjsrMnINLsINgdAasblTgSetkYOXRpO3J eD0QrD6vcS4mcTm2HbtcXX3TyO2B9cH3xgBUyWEFYbKuBSjXCsynOVlBQQmkTNmw 4iJyy9WHlcSs0eoKztFEVhykelS7cszODMFsdTbmndseTNj1nPOZgKW3/5rQdgw9 E2vUuoiaGQoRI+vSimeym4dVU+nlXRoA6hHalgx9WDWXMZDdzdBeOa/s3RfrPfw2 I85zJ3OvpuP3no4Cg7FaI/rfBCOH7n9Cg46VAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUV0vJpOL7x2BFHH4/0sdM+DNEtKEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1YwdkpwT0w3eDJCRkhINF8w c2RNLURORXRLRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkwwDQYJKoZIhvcNAQELBQADggEBAJpsA8xvV/F2HOnFZJxgI+ik24n9J8Lhde3f mgrIfNVCNyYyZ76WYqgJbfXLEJT7PEF6oLwKKh6/oG+zumf4SWvINVligvx132Ua tLXPyFic+UAt1vyYux0dOv7KnRdFORrw4jZgzk+FS8lytRksxWGhMdVpurXTs+R8 QtjY+urX1O/zGVWlMZt2gcmGp3EfF4otuj2IiLimm6/dsYwN1fT1eOq3baQ5Xtz9 oiu+LqMKsND+ZTGOe83+cWhgBNFpuCBATLQrM48hjvXMpW9ruZjJV/ElKkklWJDZ /zWUVqoV0K4gxkTx6rCX6dvT0TqufQ+qa6mrSlM1cp2cC47kN2k= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org