$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X84vePmOdetbFEQl6D2FViNSn0s.roa File: X84vePmOdetbFEQl6D2FViNSn0s.roa (raw, json) Hash identifier: 9K1FDCxjzfZOV+ZqQZYmhkLOKgQq1MahT01kzPJ/3Fk= Subject key identifier: 5F:CE:2F:78:F9:8E:75:EB:5B:14:44:25:E8:3D:85:56:23:52:9F:4B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30A4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X84vePmOdetbFEQl6D2FViNSn0s.roa Signing time: Mon 26 Aug 2024 05:29:40 +0000 ROA not before: Mon 26 Aug 2024 05:29:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12452 (0x30a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5FCE2F78F98E75EB5B144425E83D855623529F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:3c:bd:d4:24:d3:56:11:bc:4f:ee:3d:06: 82:e0:08:4b:94:99:bf:03:f7:ba:7f:cf:31:b7:e5: 8b:99:61:c3:cb:1b:90:06:c3:77:2b:1f:ce:b4:7a: 69:74:f3:28:31:3d:9c:bf:c7:d7:bf:b0:15:90:ea: 0d:4c:0d:ec:12:d7:32:27:c6:bb:c9:44:9f:20:19: 95:d4:ce:cf:fe:2f:c2:a6:2e:61:07:b1:94:76:e3: 82:9d:03:df:ab:b7:53:b9:0e:6f:99:43:79:0c:4d: ba:0b:77:ac:9c:d5:f4:7a:aa:75:41:99:f5:87:3e: cb:08:a4:fc:74:e2:40:e1:a3:a6:32:05:fd:e5:d4: 56:70:62:90:20:75:66:be:88:e1:fb:5b:38:4c:d2: 90:62:01:f9:99:b6:c3:eb:fc:e2:67:e8:20:d3:8a: 0d:2a:21:91:96:4d:f5:32:8d:ac:cb:35:79:55:51: a2:21:db:11:84:16:99:e6:1d:fd:81:22:42:5e:f2: 0b:e2:5e:a0:4c:eb:2d:67:18:74:e4:c6:aa:1d:6a: 8d:06:bf:a7:09:95:f9:8d:29:5b:f1:85:a1:0b:f8: 8f:40:65:6e:85:0f:71:2e:cc:34:58:44:03:a6:ed: 78:90:c7:19:57:6b:ed:dd:3a:96:5e:2a:b4:93:44: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CE:2F:78:F9:8E:75:EB:5B:14:44:25:E8:3D:85:56:23:52:9F:4B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X84vePmOdetbFEQl6D2FViNSn0s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.160.0/22 Signature Algorithm: sha256WithRSAEncryption 51:39:fc:97:12:7c:3e:a3:c3:8b:61:dd:6f:1f:0a:4a:af:5c: 42:86:e9:7b:a2:cf:8b:75:5e:1a:a5:e9:2c:c6:bf:f6:cc:1a: e5:b5:42:ac:19:2c:c2:cf:92:49:33:97:fd:21:31:59:f3:b7: e0:90:01:1b:c7:55:d4:5d:74:44:dc:69:a2:e1:20:e5:0f:b1: df:31:bd:c3:81:41:d7:91:8e:bf:d4:c2:23:b3:68:9c:93:52: 7e:7c:e4:e0:46:05:b3:2a:46:4b:06:0f:fa:52:03:f1:dd:c5: 37:66:7c:cf:7e:3a:ac:83:a7:6b:38:c8:45:da:1b:db:70:a9: df:59:1d:35:0c:89:fa:73:f5:43:0a:ad:f5:f6:71:47:f1:a7: 87:e6:16:b2:ad:9a:9a:3b:de:0c:dc:5f:17:44:6c:af:73:f8: 1a:31:24:25:e7:69:64:99:8c:a8:3c:b6:9d:5b:1b:20:3e:a8: c4:b3:c9:18:e2:be:ea:30:d2:29:5b:2c:cd:00:47:ab:35:a3: ea:a4:9a:4d:47:7b:0f:ea:28:2b:26:89:27:c2:3d:0e:79:c5: a7:a6:af:70:70:35:1f:b9:70:a3:63:e6:39:12:a4:6c:04:e4: 8b:dc:76:4a:71:6b:49:d4:8b:30:3f:f1:f4:3e:3c:73:a8:d2: 27:10:30:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGQ0UyRjc4Rjk4RTc1 RUI1QjE0NDQyNUU4M0Q4NTU2MjM1MjlGNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOVDy91CTTVhG8T+49BoLgCEuUmb8D97p/zzG35YuZYcPLG5AG w3crH860eml08ygxPZy/x9e/sBWQ6g1MDewS1zInxrvJRJ8gGZXUzs/+L8KmLmEH sZR244KdA9+rt1O5Dm+ZQ3kMTboLd6yc1fR6qnVBmfWHPssIpPx04kDho6YyBf3l 1FZwYpAgdWa+iOH7WzhM0pBiAfmZtsPr/OJn6CDTig0qIZGWTfUyjazLNXlVUaIh 2xGEFpnmHf2BIkJe8gviXqBM6y1nGHTkxqodao0Gv6cJlfmNKVvxhaEL+I9AZW6F D3EuzDRYRAOm7XiQxxlXa+3dOpZeKrSTRFZvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUX84vePmOdetbFEQl6D2FViNSn0swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1g4NHZlUG1PZGV0YkZFUWw2 RDJGVmlOU24wcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wqAwDQYJKoZIhvcNAQELBQADggEBAFE5/JcSfD6jw4th3W8fCkqvXEKG6Xuiz4t1 Xhql6SzGv/bMGuW1QqwZLMLPkkkzl/0hMVnzt+CQARvHVdRddETcaaLhIOUPsd8x vcOBQdeRjr/UwiOzaJyTUn585OBGBbMqRksGD/pSA/HdxTdmfM9+OqyDp2s4yEXa G9twqd9ZHTUMifpz9UMKrfX2cUfxp4fmFrKtmpo73gzcXxdEbK9z+BoxJCXnaWSZ jKg8tp1bGyA+qMSzyRjivuow0ilbLM0AR6s1o+qkmk1Hew/qKCsmiSfCPQ55xaem r3BwNR+5cKNj5jkSpGwE5Ivcdkpxa0nUizA/8fQ+PHOo0icQMBo= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org