$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa File: Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa (raw, json) Hash identifier: NFEzHed9+aRirt0Jc7553wnmJ40be0BZdBxztD4FdWU= Subject key identifier: 63:64:F0:3E:D8:8B:92:95:09:A8:8A:9B:E1:56:EE:81:C1:DF:B1:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 308F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa Signing time: Mon 26 Aug 2024 05:29:35 +0000 ROA not before: Mon 26 Aug 2024 05:29:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12431 (0x308f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6364F03ED88B929509A88A9BE156EE81C1DFB146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:eb:b7:8b:b9:de:af:98:42:81:70:6e:85: 8f:bc:40:f8:30:9d:e8:d6:5e:bf:7e:c7:94:fc:22: 54:aa:a2:3e:c6:9b:7e:4a:1a:aa:6b:df:41:c3:96: fc:c8:b8:c5:dc:6a:44:fe:4c:b3:34:db:e3:c7:aa: 7a:15:15:af:99:00:90:7f:32:67:7a:df:3e:62:87: 83:34:8b:e4:a2:02:a4:1f:77:d4:2a:73:53:38:7e: e7:95:e9:e8:f3:1e:aa:56:c7:7b:70:eb:c5:08:b4: f9:eb:69:b8:b8:84:91:f0:b4:f7:8c:3d:ac:bb:ca: 0a:e4:e6:49:5e:68:84:dc:e3:ca:3e:b7:42:a0:fe: 02:4e:f5:d6:e1:e4:26:01:49:7b:9e:ce:a0:63:fc: cd:40:f6:ba:a5:b6:f9:eb:5c:2e:ab:37:27:1d:ca: c3:01:47:60:01:c5:f0:5a:84:44:24:4b:d1:4f:c6: 48:a1:5e:e4:1e:31:26:1f:da:34:12:2c:cb:17:86: 96:05:cc:dd:19:82:ac:4f:ab:8b:e2:75:72:1b:f9: 71:9b:ad:16:a1:69:4f:89:4c:ad:8e:8e:f9:b4:3a: cd:cc:71:5a:50:96:34:88:a7:f6:7c:58:59:ad:bd: 78:b9:02:a4:c9:bf:1d:b4:ff:16:59:c9:df:18:d8: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:F0:3E:D8:8B:92:95:09:A8:8A:9B:E1:56:EE:81:C1:DF:B1:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y2TwPtiLkpUJqIqb4VbugcHfsUY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.234.0/23 Signature Algorithm: sha256WithRSAEncryption 22:5f:34:e0:a2:19:58:dc:ca:fc:87:a9:09:27:6f:77:98:34: 58:b1:e8:fa:97:6e:c6:03:08:4a:b0:f5:9c:56:48:7a:2f:a5: 10:80:82:17:54:a7:e4:ad:79:40:b9:4b:9e:91:75:f1:2e:23: dd:6a:5b:23:c8:7a:54:61:19:ae:03:06:11:62:94:b4:f5:4b: b4:ef:52:05:b9:ac:44:9a:35:ac:d3:27:93:55:ec:8d:f3:8a: d6:ae:2b:d3:56:c4:6c:53:fe:9c:6e:a4:79:12:38:c4:c1:ab: e4:78:f1:61:80:16:87:3e:b6:53:4a:9d:61:e2:b9:38:11:91: 19:c2:9f:40:fe:eb:6d:90:74:b3:6d:e9:b7:6d:93:4c:e7:27: 39:e6:a0:1d:a7:15:58:38:a5:fd:c0:9b:cf:46:d8:68:e9:7a: a2:fa:0c:77:61:e8:ac:11:48:3e:5b:d5:34:81:e8:1e:77:10: e2:6d:3d:29:8d:a6:cb:7a:54:8e:4d:1b:36:38:88:27:51:f2: 4c:2b:80:6e:ac:04:54:fa:67:e0:a8:c7:d6:c7:e3:ec:68:e5: f5:c2:a1:0b:47:7c:ed:3c:03:b5:90:34:f2:bf:bb:21:a6:16: dd:d8:c1:71:08:19:ae:39:d2:6a:e7:e6:d6:89:e4:8a:37:18: 24:05:a4:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzNjRGMDNFRDg4Qjky OTUwOUE4OEE5QkUxNTZFRTgxQzFERkIxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG6eu3i7ner5hCgXBuhY+8QPgwnejWXr9+x5T8IlSqoj7Gm35K Gqpr30HDlvzIuMXcakT+TLM02+PHqnoVFa+ZAJB/Mmd63z5ih4M0i+SiAqQfd9Qq c1M4fueV6ejzHqpWx3tw68UItPnrabi4hJHwtPeMPay7ygrk5kleaITc48o+t0Kg /gJO9dbh5CYBSXuezqBj/M1A9rqltvnrXC6rNycdysMBR2ABxfBahEQkS9FPxkih XuQeMSYf2jQSLMsXhpYFzN0ZgqxPq4vidXIb+XGbrRahaU+JTK2Ojvm0Os3McVpQ ljSIp/Z8WFmtvXi5AqTJvx20/xZZyd8Y2KkjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUY2TwPtiLkpUJqIqb4VbugcHfsUYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1kyVHdQdGlMa3BVSnFJcWI0 VmJ1Z2NIZnNVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6eowDQYJKoZIhvcNAQELBQADggEBACJfNOCiGVjcyvyHqQknb3eYNFix6PqXbsYD CEqw9ZxWSHovpRCAghdUp+SteUC5S56RdfEuI91qWyPIelRhGa4DBhFilLT1S7Tv UgW5rESaNazTJ5NV7I3zitauK9NWxGxT/pxupHkSOMTBq+R48WGAFoc+tlNKnWHi uTgRkRnCn0D+622QdLNt6bdtk0znJznmoB2nFVg4pf3Am89G2GjpeqL6DHdh6KwR SD5b1TSB6B53EOJtPSmNpst6VI5NGzY4iCdR8kwrgG6sBFT6Z+Cox9bH4+xo5fXC oQtHfO08A7WQNPK/uyGmFt3YwXEIGa450mrn5taJ5Io3GCQFpM8= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org