$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WLfda2Y4OfupKD5RIaXqptbQvh8.roa File: WLfda2Y4OfupKD5RIaXqptbQvh8.roa (raw, json) Hash identifier: u0j9g1l60FYSomEiCifZvmmPaHEEE+27tMzxjdSVUtc= Subject key identifier: 58:B7:DD:6B:66:38:39:FB:A9:28:3E:51:21:A5:EA:A6:D6:D0:BE:1F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 329F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WLfda2Y4OfupKD5RIaXqptbQvh8.roa Signing time: Mon 26 Aug 2024 05:31:50 +0000 ROA not before: Mon 26 Aug 2024 05:31:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12959 (0x329f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=58B7DD6B663839FBA9283E5121A5EAA6D6D0BE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:b9:dc:ce:98:a9:89:d7:ba:a2:99:5d:3c: ba:c5:6d:e7:e6:2a:cb:40:ae:05:30:ef:76:b2:f2: 6d:a0:92:40:48:0f:a9:ad:ea:38:fa:f5:fb:31:20: bd:4b:4d:b1:72:4a:c5:c5:29:ce:67:d9:8b:50:6c: cf:f3:d0:cb:ea:d1:f6:c4:2f:20:52:fd:10:b9:54: ca:48:a5:74:ea:21:3a:fb:af:0a:7d:c1:fd:9d:19: b6:aa:9e:ea:b3:0d:03:5d:7d:bd:d9:04:9f:88:68: 8b:93:f8:df:a7:63:97:f9:09:2d:08:fc:8b:a0:48: d5:36:b4:45:0c:77:ac:b0:c6:9e:c8:46:c4:7b:7e: 22:1d:af:35:db:9c:06:02:4e:e7:c9:04:a1:5c:de: 28:08:ea:a0:eb:f2:36:61:ef:a5:10:ee:73:c3:95: 12:a7:7a:a8:8e:38:ac:b9:57:45:06:47:6d:b4:60: 41:3d:f4:fa:e1:3b:29:c2:2a:49:46:b5:79:1c:9b: c1:be:c4:99:58:d8:33:21:8e:de:90:9c:75:2a:08: a2:16:0a:cf:8b:f3:05:28:48:8d:a3:2e:01:b6:02: 99:c3:8b:c0:d9:eb:19:fa:e8:c8:57:f5:03:ee:4b: 2b:fd:d4:d6:14:1e:ce:03:ac:50:90:b5:a2:7e:37: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B7:DD:6B:66:38:39:FB:A9:28:3E:51:21:A5:EA:A6:D6:D0:BE:1F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WLfda2Y4OfupKD5RIaXqptbQvh8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.204.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:21:95:a9:c3:c6:e0:6e:e5:3f:bf:53:69:32:82:f5:b4:bb: 71:18:8e:2f:bf:65:2b:b3:fc:d4:12:72:c8:6e:7a:d6:d0:ef: ef:df:a0:1c:2a:92:92:8f:22:3b:a6:1c:c3:bf:ca:1b:18:86: 7d:d3:ee:97:55:06:d3:fe:57:1b:76:98:11:bf:ba:f3:e9:0a: 38:b1:a5:2f:4b:af:9b:b0:8f:fc:a0:75:99:d4:69:48:56:7d: 00:e4:a8:79:7e:01:73:4d:e0:7e:d1:cd:c6:e9:41:b9:c4:28: 34:4c:e2:e4:82:13:7b:87:35:7e:62:51:10:88:bf:ec:0f:0d: fd:6d:dc:cb:67:68:44:58:d0:7c:0f:13:e0:5e:54:87:c3:08: 28:7c:b1:49:59:2b:49:20:9f:12:a8:58:05:b3:8a:2c:1a:43: bc:17:4c:a2:e9:61:42:ab:a3:df:d3:24:64:cd:33:62:df:18: b6:16:67:a4:77:0a:bb:82:cb:6e:de:40:4f:2c:12:d6:46:36: 0e:85:62:51:86:c4:0e:22:4f:27:97:b6:d7:b9:fc:2f:bd:28: 17:b6:c4:59:ca:c2:41:0a:62:a4:c4:32:48:ab:64:a8:0d:71: bc:8f:03:05:59:bf:aa:b5:32:24:a1:42:20:53:34:32:76:5a: 34:a2:58:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU4QjdERDZCNjYzODM5 RkJBOTI4M0U1MTIxQTVFQUE2RDZEMEJFMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC41bnczpipide6opldPLrFbefmKstArgUw73ay8m2gkkBID6mt 6jj69fsxIL1LTbFySsXFKc5n2YtQbM/z0Mvq0fbELyBS/RC5VMpIpXTqITr7rwp9 wf2dGbaqnuqzDQNdfb3ZBJ+IaIuT+N+nY5f5CS0I/IugSNU2tEUMd6ywxp7IRsR7 fiIdrzXbnAYCTufJBKFc3igI6qDr8jZh76UQ7nPDlRKneqiOOKy5V0UGR220YEE9 9PrhOynCKklGtXkcm8G+xJlY2DMhjt6QnHUqCKIWCs+L8wUoSI2jLgG2ApnDi8DZ 6xn66MhX9QPuSyv91NYUHs4DrFCQtaJ+N0yhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWLfda2Y4OfupKD5RIaXqptbQvh8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dMZmRhMlk0T2Z1cEtENVJJ YVhxcHRiUXZoOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wswwDQYJKoZIhvcNAQELBQADggEBAGohlanDxuBu5T+/U2kygvW0u3EYji+/ZSuz /NQScshuetbQ7+/foBwqkpKPIjumHMO/yhsYhn3T7pdVBtP+Vxt2mBG/uvPpCjix pS9Lr5uwj/ygdZnUaUhWfQDkqHl+AXNN4H7RzcbpQbnEKDRM4uSCE3uHNX5iURCI v+wPDf1t3MtnaERY0HwPE+BeVIfDCCh8sUlZK0kgnxKoWAWziiwaQ7wXTKLpYUKr o9/TJGTNM2LfGLYWZ6R3CruCy27eQE8sEtZGNg6FYlGGxA4iTyeXtte5/C+9KBe2 xFnKwkEKYqTEMkirZKgNcbyPAwVZv6q1MiShQiBTNDJ2WjSiWPk= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org