$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YN_ReANbhQoUdn_5mNQGaerIgiw.roa File: YN_ReANbhQoUdn_5mNQGaerIgiw.roa (raw, json) Hash identifier: LCbO/CRjzEyiyUBvdSB7Mpl0vhpH59WmTW5XT7ChH5I= Subject key identifier: 60:DF:D1:78:03:5B:85:0A:14:76:7F:F9:98:D4:06:69:EA:C8:82:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 305F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YN_ReANbhQoUdn_5mNQGaerIgiw.roa Signing time: Mon 26 Aug 2024 05:29:24 +0000 ROA not before: Mon 26 Aug 2024 05:29:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12383 (0x305f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=60DFD178035B850A14767FF998D40669EAC8822C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:c8:ee:77:58:aa:8e:35:bd:60:6d:58:57: 32:b9:8f:5b:db:4c:aa:5a:56:26:a6:4e:fd:4c:53: e1:e0:81:c4:6c:55:41:ee:ea:92:b7:22:ce:fc:49: f9:59:75:81:45:c9:14:7d:7a:c9:ee:db:1b:53:44: 00:26:7c:27:ae:90:4b:b7:8c:fc:7d:c1:cc:14:43: 87:d0:ef:ce:35:5c:c0:b0:19:45:3e:10:ab:c2:8b: 43:c3:0b:43:88:41:b4:a3:ae:4b:08:46:a5:a0:74: ce:c7:96:73:33:16:f4:26:b9:f9:40:94:62:e2:ad: 55:66:fc:f9:a4:7b:63:52:54:f6:4b:ec:7c:86:e5: b1:bc:b9:94:6a:07:6d:75:8d:e2:8d:23:8d:72:43: 16:ff:68:02:85:a1:f0:61:38:17:34:ff:cf:d5:52: 43:6c:ba:bf:cd:9c:26:02:1c:9a:5e:08:a2:92:93: 16:4d:65:a1:ae:5f:13:dd:8b:9a:5f:8c:94:0d:13: 9a:1a:0b:35:c7:a2:8a:18:84:6d:43:5f:23:5a:3a: 7b:5b:db:c5:49:a8:b8:b1:02:a1:c9:86:40:a9:4e: be:11:1f:9f:d8:35:ab:3c:9e:67:0b:34:26:d6:58: a6:18:8a:34:b8:4e:e7:c7:b5:03:bc:33:c8:e3:6c: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DF:D1:78:03:5B:85:0A:14:76:7F:F9:98:D4:06:69:EA:C8:82:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YN_ReANbhQoUdn_5mNQGaerIgiw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.200.0/21 Signature Algorithm: sha256WithRSAEncryption 13:ec:1f:73:3f:e8:35:02:50:66:f9:c1:c2:a8:dc:f2:71:ed: 5a:52:7a:84:b2:ec:dd:b1:6b:d8:1d:94:5d:d0:e1:0b:35:37: 0b:fe:b7:b8:9c:f3:ed:f4:d9:d8:92:62:4e:e3:15:96:fe:f9: fa:cc:70:ca:98:f5:4b:5a:71:9e:2c:22:59:e0:53:68:4a:63: af:e7:2b:a8:8a:f1:8e:6a:e6:9e:fe:6f:b1:be:04:9d:d0:28: d9:93:0a:07:ca:e0:a1:ef:9d:9d:17:fa:37:3d:2f:76:85:f0: a8:cb:c3:a0:5e:48:a7:51:10:46:be:77:05:05:c4:3b:30:69: a7:6e:9e:8c:18:c8:3e:7c:b1:09:dc:6c:8c:74:9b:35:59:73: 12:3b:53:10:5b:90:6a:3e:3c:1f:d7:bc:83:7f:64:7e:8c:fa: 0b:65:5a:59:09:0a:19:38:dc:93:6b:81:35:44:cc:0b:e5:9f: e0:f1:e8:1a:37:82:ae:09:a7:ee:fe:f0:87:d3:a1:52:30:fc: c6:67:8f:ea:13:7b:a2:b8:f3:33:61:4a:73:bc:ac:53:97:b6: 2e:67:eb:30:a0:f1:4b:e6:39:28:34:4e:38:eb:8f:65:3c:c1: d4:cc:3f:35:39:47:2e:e5:7c:a7:32:4d:98:11:f1:97:d9:8b: 76:73:4f:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwREZEMTc4MDM1Qjg1 MEExNDc2N0ZGOTk4RDQwNjY5RUFDODgyMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUQ8jud1iqjjW9YG1YVzK5j1vbTKpaViamTv1MU+HggcRsVUHu 6pK3Is78SflZdYFFyRR9esnu2xtTRAAmfCeukEu3jPx9wcwUQ4fQ7841XMCwGUU+ EKvCi0PDC0OIQbSjrksIRqWgdM7HlnMzFvQmuflAlGLirVVm/Pmke2NSVPZL7HyG 5bG8uZRqB211jeKNI41yQxb/aAKFofBhOBc0/8/VUkNsur/NnCYCHJpeCKKSkxZN ZaGuXxPdi5pfjJQNE5oaCzXHoooYhG1DXyNaOntb28VJqLixAqHJhkCpTr4RH5/Y Nas8nmcLNCbWWKYYijS4TufHtQO8M8jjbOuBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYN/ReANbhQoUdn/5mNQGaerIgiwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lOX1JlQU5iaFFvVWRuXzVt TlFHYWVySWdpdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w8gwDQYJKoZIhvcNAQELBQADggEBABPsH3M/6DUCUGb5wcKo3PJx7VpSeoSy7N2x a9gdlF3Q4Qs1Nwv+t7ic8+302diSYk7jFZb++frMcMqY9UtacZ4sIlngU2hKY6/n K6iK8Y5q5p7+b7G+BJ3QKNmTCgfK4KHvnZ0X+jc9L3aF8KjLw6BeSKdREEa+dwUF xDswaadunowYyD58sQncbIx0mzVZcxI7UxBbkGo+PB/XvIN/ZH6M+gtlWlkJChk4 3JNrgTVEzAvln+Dx6Bo3gq4Jp+7+8IfToVIw/MZnj+oTe6K48zNhSnO8rFOXti5n 6zCg8UvmOSg0Tjjrj2U8wdTMPzU5Ry7lfKcyTZgR8ZfZi3ZzTwA= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org