$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZJN2Yas28_wlPLUpvohcGs2L09k.roa File: ZJN2Yas28_wlPLUpvohcGs2L09k.roa (raw, json) Hash identifier: vz0D9qjRh7UwJx4oPPt7nEvE3Vk+l3/4pNiUoln2lf4= Subject key identifier: 64:93:76:61:AB:36:F3:FC:25:3C:B5:29:BE:88:5C:1A:CD:8B:D3:D9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 329B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZJN2Yas28_wlPLUpvohcGs2L09k.roa Signing time: Mon 26 Aug 2024 05:31:49 +0000 ROA not before: Mon 26 Aug 2024 05:31:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12955 (0x329b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=64937661AB36F3FC253CB529BE885C1ACD8BD3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:df:37:d2:6c:af:23:45:94:50:90:5d:c9:7e: 36:12:71:9c:64:87:6c:5e:18:86:9d:84:5b:d0:bf: 09:90:ed:0f:35:7b:a6:f2:4d:aa:2a:22:2e:0e:61: 7e:d7:98:bf:31:df:70:ed:b0:74:81:15:2b:6a:f7: 9b:11:46:5c:f7:3c:b5:1e:88:09:01:15:b1:7d:59: 18:95:17:d4:96:72:b5:00:c5:6d:80:6d:d0:f4:44: e3:2c:5e:c2:5b:ff:90:59:41:a9:19:f9:30:f7:39: b8:4c:d9:0b:ee:5a:b8:d9:16:fd:49:68:e0:b6:4f: a6:9d:b3:e7:a7:0b:fc:6e:df:e2:de:e1:7f:8b:c7: fd:45:18:ba:d2:ef:f8:c4:4b:28:0f:05:44:e7:42: 1c:35:7a:a7:61:00:38:7e:c9:00:db:b4:99:17:80: 59:96:f4:9b:3c:cf:2e:6d:da:7a:06:b8:05:b3:4a: bf:75:71:19:d3:b9:b4:4f:af:ac:62:93:ac:3d:95: f1:d1:83:e7:83:a1:7d:5e:f0:ae:af:7c:04:62:01: 3b:21:59:c0:18:a7:fa:1a:60:ff:c2:10:17:54:2d: cb:3d:0c:7d:1f:07:be:9b:d1:d9:09:59:8c:5d:49: 85:6a:22:c6:14:3a:f1:97:75:65:fb:46:28:e2:6b: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:93:76:61:AB:36:F3:FC:25:3C:B5:29:BE:88:5C:1A:CD:8B:D3:D9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZJN2Yas28_wlPLUpvohcGs2L09k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.200.0/21 Signature Algorithm: sha256WithRSAEncryption 57:c1:12:fc:ef:83:83:2d:60:b9:ea:c9:25:5a:6e:de:dc:0d: 0b:e5:de:06:7e:21:e9:d4:54:4a:15:5f:12:63:c6:89:b3:b8: af:4a:8b:a0:59:36:53:0a:70:b5:c6:df:ed:05:c5:fa:90:83: d7:1e:02:07:86:4d:c3:ef:1d:04:37:d4:1e:56:7a:91:b7:c3: 65:f9:df:06:49:dc:b2:82:4f:62:eb:ea:59:b6:8b:fc:48:5f: 38:30:4a:0a:32:e8:76:ba:6c:4b:0e:05:33:17:13:51:99:49: 14:95:df:71:3d:e0:36:25:16:94:94:64:df:7e:71:e7:ab:1b: b1:b5:40:26:b1:87:ef:fd:ff:b8:07:df:f4:b3:df:64:0b:a7: dd:35:09:28:8b:8b:2f:df:ed:67:c5:0c:e4:a3:77:23:c5:29: c9:26:4d:43:d2:42:be:41:60:6c:10:7a:6a:ae:f8:d9:df:5b: 2f:28:3c:34:2b:91:37:51:48:ee:cc:5b:1b:ee:30:70:23:32: 62:a6:7e:f2:a7:5a:84:a7:cc:cc:1d:bf:6a:97:4a:2c:5a:7d: b7:b0:ec:c4:be:c5:c0:12:8c:21:35:93:d4:40:64:df:78:e6: c6:15:79:14:7e:d4:1b:26:a0:9e:9d:64:83:a7:73:e9:92:66: 3e:e6:99:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0OTM3NjYxQUIzNkYz RkMyNTNDQjUyOUJFODg1QzFBQ0Q4QkQzRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV3zfSbK8jRZRQkF3JfjYScZxkh2xeGIadhFvQvwmQ7Q81e6by TaoqIi4OYX7XmL8x33DtsHSBFStq95sRRlz3PLUeiAkBFbF9WRiVF9SWcrUAxW2A bdD0ROMsXsJb/5BZQakZ+TD3ObhM2QvuWrjZFv1JaOC2T6ads+enC/xu3+Le4X+L x/1FGLrS7/jESygPBUTnQhw1eqdhADh+yQDbtJkXgFmW9Js8zy5t2noGuAWzSr91 cRnTubRPr6xik6w9lfHRg+eDoX1e8K6vfARiATshWcAYp/oaYP/CEBdULcs9DH0f B76b0dkJWYxdSYVqIsYUOvGXdWX7RijiayU1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZJN2Yas28/wlPLUpvohcGs2L09kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pKTjJZYXMyOF93bFBMVXB2 b2hjR3MyTDA5ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6MgwDQYJKoZIhvcNAQELBQADggEBAFfBEvzvg4MtYLnqySVabt7cDQvl3gZ+IenU VEoVXxJjxomzuK9Ki6BZNlMKcLXG3+0FxfqQg9ceAgeGTcPvHQQ31B5WepG3w2X5 3wZJ3LKCT2Lr6lm2i/xIXzgwSgoy6Ha6bEsOBTMXE1GZSRSV33E94DYlFpSUZN9+ ceerG7G1QCaxh+/9/7gH3/Sz32QLp901CSiLiy/f7WfFDOSjdyPFKckmTUPSQr5B YGwQemqu+NnfWy8oPDQrkTdRSO7MWxvuMHAjMmKmfvKnWoSnzMwdv2qXSixafbew 7MS+xcASjCE1k9RAZN945sYVeRR+1BsmoJ6dZIOnc+mSZj7mmZY= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org