$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XqoFK_4cxwTAxXPV_ijTpZB15Xk.roa File: XqoFK_4cxwTAxXPV_ijTpZB15Xk.roa (raw, json) Hash identifier: e+LCx+Viwu6U+0y98j+Q7AwqaohRtqvKTF96YQQQUL0= Subject key identifier: 5E:AA:05:2B:FE:1C:C7:04:C0:C5:73:D5:FE:28:D3:A5:90:75:E5:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 305D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XqoFK_4cxwTAxXPV_ijTpZB15Xk.roa Signing time: Mon 26 Aug 2024 05:29:23 +0000 ROA not before: Mon 26 Aug 2024 05:29:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12381 (0x305d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5EAA052BFE1CC704C0C573D5FE28D3A59075E579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:af:56:53:26:7e:da:03:af:d6:96:00:a6: 79:db:eb:0a:46:83:26:86:5d:ba:77:07:94:48:f5: b0:52:9a:bb:a0:6c:d7:8c:3d:00:2e:85:0f:26:01: 4d:08:7f:a7:d5:31:48:b0:83:08:fa:99:fd:b7:58: b1:35:ed:46:88:b8:b7:f5:a2:1a:a2:3e:33:e3:d6: 3d:cb:85:9d:6a:ef:14:b9:f3:3b:b8:ef:86:e7:14: 31:62:37:f9:24:23:06:14:4f:db:cb:7f:e7:48:15: 37:10:b1:ff:e3:13:e4:99:36:1c:60:f2:ae:11:a1: c5:3a:3e:98:12:ad:79:4f:ca:75:ed:d3:58:b3:3d: 1a:6b:95:5f:a1:43:e8:e5:0a:b1:4c:0a:d5:5e:e9: 12:1d:f4:d2:3b:e6:20:48:6d:bb:62:36:0c:04:da: e1:83:6e:96:37:88:28:0c:de:39:84:cf:88:02:3b: 38:e1:39:a1:ba:76:bc:a0:5f:a2:47:ce:e1:8c:8c: 7f:bb:85:ea:77:07:59:14:c1:9d:45:d4:11:14:4c: f6:55:06:97:46:72:69:97:a1:17:8c:98:95:09:f4: 45:6a:d7:4a:b3:71:cf:77:1e:61:28:27:75:20:29: 67:75:97:65:96:9d:ff:c8:ba:25:54:aa:17:c9:20: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AA:05:2B:FE:1C:C7:04:C0:C5:73:D5:FE:28:D3:A5:90:75:E5:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XqoFK_4cxwTAxXPV_ijTpZB15Xk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.210.0/24 Signature Algorithm: sha256WithRSAEncryption b7:83:71:b8:90:b6:5b:65:3c:c9:af:80:1c:d1:57:08:b9:7b: 03:3c:dc:b6:8a:51:7a:5f:cd:3e:66:ae:62:a4:4f:cc:85:aa: 4f:a6:43:ef:2c:bd:a0:24:99:d0:ed:9f:88:bd:47:8e:b9:88: 23:00:75:a8:f4:a2:9d:59:c0:45:63:63:66:09:78:56:a2:15: ef:ac:72:17:b7:83:b5:73:43:20:3f:06:ef:d7:22:12:d5:92: f0:8e:e6:32:9a:d0:39:4f:b5:ac:67:05:4b:81:24:63:b2:7c: 52:78:f1:c5:72:19:1b:68:f4:2b:c4:52:ef:9e:09:4c:05:47: 3a:03:4f:cc:e5:5e:3c:69:84:3c:6d:63:8f:64:c0:62:6f:d3: 88:f2:a5:db:0e:3a:96:d5:0d:4a:44:df:d6:95:a7:22:fd:24: d9:67:85:3e:95:bf:84:95:f8:47:fe:be:40:0b:e9:ab:b6:d1: a5:fa:ea:2d:f6:21:85:51:39:05:02:03:db:78:1a:d7:4c:60: f4:be:db:ce:26:6a:5b:bd:69:fb:dd:a3:c4:0e:d7:a7:00:c9: 33:d1:75:be:40:ef:b1:d2:ba:ec:34:c5:63:e2:1d:d9:97:c5: 94:be:58:76:7c:a9:7c:12:87:64:4e:c7:a6:87:53:bf:89:ed: a2:a7:9b:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVFQUEwNTJCRkUxQ0M3 MDRDMEM1NzNENUZFMjhEM0E1OTA3NUU1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIRq9WUyZ+2gOv1pYApnnb6wpGgyaGXbp3B5RI9bBSmrugbNeM PQAuhQ8mAU0If6fVMUiwgwj6mf23WLE17UaIuLf1ohqiPjPj1j3LhZ1q7xS58zu4 74bnFDFiN/kkIwYUT9vLf+dIFTcQsf/jE+SZNhxg8q4RocU6PpgSrXlPynXt01iz PRprlV+hQ+jlCrFMCtVe6RId9NI75iBIbbtiNgwE2uGDbpY3iCgM3jmEz4gCOzjh OaG6drygX6JHzuGMjH+7hep3B1kUwZ1F1BEUTPZVBpdGcmmXoReMmJUJ9EVq10qz cc93HmEoJ3UgKWd1l2WWnf/IuiVUqhfJIG5ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXqoFK/4cxwTAxXPV/ijTpZB15XkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hxb0ZLXzRjeHdUQXhYUFZf aWpUcFpCMTVYay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6dIwDQYJKoZIhvcNAQELBQADggEBALeDcbiQtltlPMmvgBzRVwi5ewM83LaKUXpf zT5mrmKkT8yFqk+mQ+8svaAkmdDtn4i9R465iCMAdaj0op1ZwEVjY2YJeFaiFe+s che3g7VzQyA/Bu/XIhLVkvCO5jKa0DlPtaxnBUuBJGOyfFJ48cVyGRto9CvEUu+e CUwFRzoDT8zlXjxphDxtY49kwGJv04jypdsOOpbVDUpE39aVpyL9JNlnhT6Vv4SV +Ef+vkAL6au20aX66i32IYVROQUCA9t4GtdMYPS+284malu9afvdo8QO16cAyTPR db5A77HSuuw0xWPiHdmXxZS+WHZ8qXwSh2ROx6aHU7+J7aKnmwk= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org