$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa File: Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa (raw, json) Hash identifier: 29YZDFSo0v1IRlEX/CdC1bZtmk5LHJiUIx2S5ZAPbkk= Subject key identifier: 62:FD:44:2B:64:56:93:F9:61:9C:7D:AA:9A:90:A0:3D:6E:40:80:9F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 329C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa Signing time: Mon 26 Aug 2024 05:31:49 +0000 ROA not before: Mon 26 Aug 2024 05:31:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12956 (0x329c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=62FD442B645693F9619C7DAA9A90A03D6E40809F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:e3:d2:01:ce:db:ac:87:2a:30:53:fb:ec: 2c:d4:67:be:a0:e9:09:c1:52:7d:a3:57:15:92:09: 0d:7b:7b:f2:f7:6f:36:d2:7c:00:20:86:8e:36:d0: 3d:2e:8e:ae:6f:95:c5:bf:ac:dc:50:d2:65:13:a2: a3:c5:ed:d9:1d:bb:a8:38:84:b1:9c:c6:3a:d7:3f: d4:c2:23:68:74:c3:30:96:ea:f7:32:5f:1e:21:9c: 58:13:dc:93:cd:b9:39:13:8b:6c:76:52:88:74:d6: fa:c8:92:4c:23:87:04:36:c4:9d:57:61:09:dc:03: 23:74:18:a0:fa:39:20:1b:1b:35:e4:a0:dd:05:2a: ee:83:b3:e3:91:94:e9:59:69:34:d7:82:5c:b5:00: ce:f3:f7:32:1a:bf:2e:a8:a2:b5:a5:5c:57:8f:7d: f6:d1:cc:64:d6:b5:6b:c8:35:39:06:a5:c3:e1:93: 60:af:31:11:7e:4e:9b:1a:01:c0:fb:4c:c7:af:c4: 0d:13:a5:8f:01:a6:42:6b:07:46:db:b4:a7:e7:9e: 11:d6:ba:c4:04:b1:7e:e0:c0:77:8f:40:da:c6:50: b5:62:c2:2d:37:40:bb:f4:dd:bb:ba:21:2f:12:cd: 58:d7:46:b3:22:e3:68:08:74:27:4a:b5:d6:30:d8: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FD:44:2B:64:56:93:F9:61:9C:7D:AA:9A:90:A0:3D:6E:40:80:9F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yv1EK2RWk_lhnH2qmpCgPW5AgJ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.12.0/22 Signature Algorithm: sha256WithRSAEncryption a0:72:e3:14:2f:fa:92:66:f6:45:c2:76:fd:61:96:bc:be:e2: 43:9f:20:c9:13:32:dd:1c:8a:53:08:52:45:31:5e:c6:d5:48: da:b2:e0:19:7b:34:47:90:11:05:e6:7e:87:94:69:fe:04:48: df:c1:0a:21:6f:3f:a2:c3:77:db:ad:56:50:ed:01:87:7a:cc: d9:c4:1d:d5:7c:c0:7b:4f:99:6a:c8:b9:3b:b8:1f:a1:bd:d9: bc:a3:7f:6a:1e:27:00:ce:cc:68:09:d9:c3:d4:ec:8a:a7:db: 8f:d4:ad:ea:df:78:d1:47:ab:55:7c:5b:5c:3c:5e:b5:90:58: ea:fd:91:51:50:6b:19:de:26:b8:f7:c4:62:f7:4b:fc:88:5c: 06:6c:92:6f:42:e6:5b:ea:f6:14:df:1f:fa:2e:d5:39:8b:bf: ef:9e:4e:92:4f:41:d7:e5:57:7d:ac:f6:5f:a6:d6:df:0d:19: 02:e6:f2:5e:b6:b9:cb:c1:12:1c:6f:b9:1a:fc:3b:c9:33:60: 8a:58:cd:bb:ee:7d:57:70:1f:33:3b:db:da:3b:50:a8:04:0b: 8c:6a:39:f8:d3:77:46:1d:0e:29:05:b6:1f:b1:90:f1:28:e2: 18:bb:86:5c:a7:12:fd:cf:e0:b4:89:bf:b9:51:36:db:9d:88: ec:13:17:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyRkQ0NDJCNjQ1Njkz Rjk2MTlDN0RBQTlBOTBBMDNENkU0MDgwOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4J+PSAc7brIcqMFP77CzUZ76g6QnBUn2jVxWSCQ17e/L3bzbS fAAgho420D0ujq5vlcW/rNxQ0mUToqPF7dkdu6g4hLGcxjrXP9TCI2h0wzCW6vcy Xx4hnFgT3JPNuTkTi2x2Uoh01vrIkkwjhwQ2xJ1XYQncAyN0GKD6OSAbGzXkoN0F Ku6Ds+ORlOlZaTTXgly1AM7z9zIavy6oorWlXFePffbRzGTWtWvINTkGpcPhk2Cv MRF+TpsaAcD7TMevxA0TpY8BpkJrB0bbtKfnnhHWusQEsX7gwHePQNrGULViwi03 QLv03bu6IS8SzVjXRrMi42gIdCdKtdYw2C0rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUYv1EK2RWk/lhnH2qmpCgPW5AgJ8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1l2MUVLMlJXa19saG5IMnFt cENnUFc1QWdKOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wgwwDQYJKoZIhvcNAQELBQADggEBAKBy4xQv+pJm9kXCdv1hlry+4kOfIMkTMt0c ilMIUkUxXsbVSNqy4Bl7NEeQEQXmfoeUaf4ESN/BCiFvP6LDd9utVlDtAYd6zNnE HdV8wHtPmWrIuTu4H6G92byjf2oeJwDOzGgJ2cPU7Iqn24/UrerfeNFHq1V8W1w8 XrWQWOr9kVFQaxneJrj3xGL3S/yIXAZskm9C5lvq9hTfH/ou1TmLv++eTpJPQdfl V32s9l+m1t8NGQLm8l62ucvBEhxvuRr8O8kzYIpYzbvufVdwHzM729o7UKgEC4xq OfjTd0YdDikFth+xkPEo4hi7hlynEv3P4LSJv7lRNtudiOwTFzU= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org