$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJuEoGUV633hdliolsYtLvKyH7A.roa File: XJuEoGUV633hdliolsYtLvKyH7A.roa (raw, json) Hash identifier: tHssHnez2x0nZPaLZQvnKeQuhPY9G0VfGRE6igvqg5o= Subject key identifier: 5C:9B:84:A0:65:15:EB:7D:E1:76:58:A8:96:C6:2D:2E:F2:B2:1F:B0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3290 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJuEoGUV633hdliolsYtLvKyH7A.roa Signing time: Mon 26 Aug 2024 05:31:46 +0000 ROA not before: Mon 26 Aug 2024 05:31:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12944 (0x3290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C9B84A06515EB7DE17658A896C62D2EF2B21FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:ef:d4:92:3c:9f:de:6e:c1:63:c6:cd:42: 58:d2:0e:f1:9b:f8:7b:f3:88:56:3c:26:6b:f2:6d: 91:1b:23:cd:e2:d1:36:fd:11:ee:17:53:f6:40:c6: 3a:f5:f6:68:47:bf:54:05:87:98:0c:5f:66:6e:cf: b7:70:a4:d3:c6:db:ea:ee:d4:fb:e4:b5:21:45:6b: d9:1f:4d:cf:96:68:6a:4b:ce:1b:0a:b4:02:84:35: e2:55:72:fe:3a:ea:93:bd:12:d4:ba:2f:48:22:3e: 90:40:e1:e7:99:c5:9e:ab:a3:59:d6:09:8d:b7:f6: bc:8d:49:e4:08:d8:37:54:f5:4b:a3:50:36:a2:fd: ad:48:2e:52:fb:66:76:73:98:07:e6:d7:1d:19:9f: 11:69:80:70:d6:8a:7e:da:96:4f:e4:d9:97:75:0a: 00:0f:6e:0d:5e:1c:cd:fb:71:7b:ee:26:9a:9e:b8: 8b:53:69:4d:55:a6:87:d5:dc:67:a4:6d:68:09:70: 14:89:8c:96:3d:5d:2a:af:f8:76:a3:3c:c9:6a:f8: 75:f0:fc:64:49:7c:b3:42:11:85:e4:e0:86:7e:21: 35:c8:3e:48:5a:3e:56:da:ee:3f:be:b2:38:5a:93: ed:2a:6b:01:8c:39:66:02:dc:27:30:47:10:e4:2d: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9B:84:A0:65:15:EB:7D:E1:76:58:A8:96:C6:2D:2E:F2:B2:1F:B0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJuEoGUV633hdliolsYtLvKyH7A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.24.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:30:3d:08:69:ce:6b:43:f6:48:b0:a0:11:13:62:bb:2a:1d: d9:4a:87:d2:08:1c:a1:10:e6:37:92:91:e2:25:ba:5f:ac:11: 20:b4:12:bd:07:91:b0:aa:c4:12:75:f4:23:6b:34:90:40:e6: c1:95:19:61:c7:56:d5:fd:49:2b:87:60:7f:5c:e7:00:7b:2e: 20:95:4b:9a:a8:47:e1:b5:e2:6a:23:9a:d7:40:d0:f2:ac:65: b6:0c:75:c6:a6:ed:f3:21:0f:cd:30:9e:71:e2:59:a5:74:38: 5a:44:94:2f:02:03:a4:39:e0:68:ae:f3:13:52:df:5b:df:b3: 63:97:9d:dc:43:10:5e:0d:1c:bb:29:3b:ec:9e:65:7f:f5:87: c6:95:93:0b:79:3d:23:f8:2d:1e:6e:d9:c2:1c:00:b5:a7:88: 1d:60:b4:2c:23:55:2f:32:62:00:dd:6d:1f:99:5c:d3:75:0d: 72:6a:e6:22:9e:8e:70:de:e0:30:4c:59:ee:b5:86:d0:29:c0: 99:05:47:95:d5:17:7c:74:9c:e9:05:e5:0c:de:d4:f7:a4:1a: bf:b7:a5:51:62:8b:0f:66:cb:c3:5b:06:ca:f0:19:63:33:b3: 0e:40:00:58:c4:39:7a:06:53:74:7d:fd:c0:a6:96:37:47:15: 79:66:a0:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMpAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDOUI4NEEwNjUxNUVC N0RFMTc2NThBODk2QzYyRDJFRjJCMjFGQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOTO/Ukjyf3m7BY8bNQljSDvGb+HvziFY8JmvybZEbI83i0Tb9 Ee4XU/ZAxjr19mhHv1QFh5gMX2Zuz7dwpNPG2+ru1PvktSFFa9kfTc+WaGpLzhsK tAKENeJVcv466pO9EtS6L0giPpBA4eeZxZ6ro1nWCY239ryNSeQI2DdU9UujUDai /a1ILlL7ZnZzmAfm1x0ZnxFpgHDWin7alk/k2Zd1CgAPbg1eHM37cXvuJpqeuItT aU1VpofV3GekbWgJcBSJjJY9XSqv+HajPMlq+HXw/GRJfLNCEYXk4IZ+ITXIPkha Plba7j++sjhak+0qawGMOWYC3CcwRxDkLSBxAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXJuEoGUV633hdliolsYtLvKyH7AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hKdUVvR1VWNjMzaGRsaW9s c1l0THZLeUg3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6BgwDQYJKoZIhvcNAQELBQADggEBAG8wPQhpzmtD9kiwoBETYrsqHdlKh9IIHKEQ 5jeSkeIlul+sESC0Er0HkbCqxBJ19CNrNJBA5sGVGWHHVtX9SSuHYH9c5wB7LiCV S5qoR+G14mojmtdA0PKsZbYMdcam7fMhD80wnnHiWaV0OFpElC8CA6Q54Giu8xNS 31vfs2OXndxDEF4NHLspO+yeZX/1h8aVkwt5PSP4LR5u2cIcALWniB1gtCwjVS8y YgDdbR+ZXNN1DXJq5iKejnDe4DBMWe61htApwJkFR5XVF3x0nOkF5Qze1PekGr+3 pVFiiw9my8NbBsrwGWMzsw5AAFjEOXoGU3R9/cCmljdHFXlmoJI= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org