$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMSe8gg_-tKZVkrBSpIC6kFNr78.roa File: VMSe8gg_-tKZVkrBSpIC6kFNr78.roa (raw, json) Hash identifier: WWwPzQy6UgYBGpO9PaENNXj+B+sPh6kp5R0HcvYfOWg= Subject key identifier: 54:C4:9E:F2:08:3F:FA:D2:99:56:4A:C1:4A:92:02:EA:41:4D:AF:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 323F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMSe8gg_-tKZVkrBSpIC6kFNr78.roa Signing time: Mon 26 Aug 2024 05:31:27 +0000 ROA not before: Mon 26 Aug 2024 05:31:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12863 (0x323f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=54C49EF2083FFAD299564AC14A9202EA414DAFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4c:5b:22:48:1f:0f:bb:80:4d:74:a7:65:14: d5:c5:1f:cf:c9:f6:78:1b:e5:b3:f3:c4:49:4b:23: 07:4c:da:62:6f:12:f2:e0:e3:51:d4:31:c1:26:ac: 38:72:5c:33:87:7d:8a:2e:03:17:d2:13:d6:72:19: 9a:4a:54:98:c6:72:a1:39:63:f3:84:9f:cd:c2:12: 71:ed:c4:d2:29:0c:62:a4:6e:c8:80:78:4a:a1:fd: 02:75:44:47:83:40:5c:a4:25:ca:ce:82:c5:29:1c: a4:3d:2e:f9:6a:e2:44:2a:75:72:8c:cb:10:6d:68: 9a:e7:a4:3f:cb:99:c0:4c:2b:bd:b3:9e:84:82:1c: 0b:79:37:64:19:fa:5d:75:3c:e0:ce:cf:55:b0:4e: 9d:69:ce:0e:da:09:42:ce:0f:3e:3a:53:9d:8e:fb: 55:4c:41:8d:1e:e5:d2:76:47:6c:4a:60:de:2a:20: 0f:26:25:ba:d3:f4:31:11:68:ee:b4:7e:0f:bd:37: 99:0c:06:3a:62:e5:ae:14:41:bb:61:5a:bb:9d:99: 2e:e4:9d:4c:ba:06:db:41:87:06:34:c7:d5:ba:d5: d1:8f:bc:c1:47:7b:34:9f:8b:b6:61:46:c5:60:f0: 4b:df:d9:3d:f8:b1:53:d1:6c:c4:ca:6d:ee:3b:d7: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C4:9E:F2:08:3F:FA:D2:99:56:4A:C1:4A:92:02:EA:41:4D:AF:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMSe8gg_-tKZVkrBSpIC6kFNr78.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.176.0/20 Signature Algorithm: sha256WithRSAEncryption 67:f2:56:99:5a:bb:2c:9d:ef:93:18:9d:6a:6c:88:0a:88:a9: 42:5b:39:22:93:a4:60:64:00:bc:db:98:a8:d1:5c:4f:db:09: 41:cf:9b:46:b8:ae:e2:9b:96:b2:2f:fe:d5:2f:c9:d2:39:f9: 42:0b:7f:77:63:6d:fb:ba:95:50:5c:8f:88:68:81:17:cf:d3: 04:5a:5b:89:f9:45:ef:0a:43:a3:a5:dd:62:43:89:9d:7a:9c: 99:c8:a4:02:b4:21:90:81:e2:dc:f8:cd:cd:a5:2c:81:d5:9b: 4d:99:31:16:36:08:f0:42:3b:76:2f:0c:48:77:af:55:83:8c: 5d:7c:b9:84:fe:67:b3:94:c9:5e:e0:b6:3e:63:d0:8e:2d:e7: fd:81:6a:e1:42:3f:90:e2:a5:4c:8a:b4:90:e5:c5:a7:38:bc: 97:7e:88:10:63:49:69:93:0a:85:4d:2f:80:46:ed:a7:06:f5: 02:b1:f9:77:4f:95:97:bd:7a:e5:86:92:44:35:7b:bb:3b:29: c8:7c:fe:37:80:15:30:3f:97:b8:83:99:ce:d0:bc:f4:67:8d: 89:19:eb:3f:27:31:8f:a9:e5:32:d2:f5:22:22:45:39:ee:c5: f5:d2:46:46:90:58:8b:16:2e:7e:7a:71:ba:52:b2:5e:91:9d: 0d:fc:fd:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0QzQ5RUYyMDgzRkZB RDI5OTU2NEFDMTRBOTIwMkVBNDE0REFGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuTFsiSB8Pu4BNdKdlFNXFH8/J9ngb5bPzxElLIwdM2mJvEvLg 41HUMcEmrDhyXDOHfYouAxfSE9ZyGZpKVJjGcqE5Y/OEn83CEnHtxNIpDGKkbsiA eEqh/QJ1REeDQFykJcrOgsUpHKQ9Lvlq4kQqdXKMyxBtaJrnpD/LmcBMK72znoSC HAt5N2QZ+l11PODOz1WwTp1pzg7aCULODz46U52O+1VMQY0e5dJ2R2xKYN4qIA8m JbrT9DERaO60fg+9N5kMBjpi5a4UQbthWrudmS7knUy6BttBhwY0x9W61dGPvMFH ezSfi7ZhRsVg8Evf2T34sVPRbMTKbe4717eBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUVMSe8gg/+tKZVkrBSpIC6kFNr78wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZNU2U4Z2dfLXRLWlZrckJT cElDNmtGTnI3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wrAwDQYJKoZIhvcNAQELBQADggEBAGfyVplauyyd75MYnWpsiAqIqUJbOSKTpGBk ALzbmKjRXE/bCUHPm0a4ruKblrIv/tUvydI5+UILf3djbfu6lVBcj4hogRfP0wRa W4n5Re8KQ6Ol3WJDiZ16nJnIpAK0IZCB4tz4zc2lLIHVm02ZMRY2CPBCO3YvDEh3 r1WDjF18uYT+Z7OUyV7gtj5j0I4t5/2BauFCP5DipUyKtJDlxac4vJd+iBBjSWmT CoVNL4BG7acG9QKx+XdPlZe9euWGkkQ1e7s7Kch8/jeAFTA/l7iDmc7QvPRnjYkZ 6z8nMY+p5TLS9SIiRTnuxfXSRkaQWIsWLn56cbpSsl6RnQ38/UI= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org