$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZYb6Erp2Fv2kgsFTeQ_cNhiS6jQ.roa File: ZYb6Erp2Fv2kgsFTeQ_cNhiS6jQ.roa (raw, json) Hash identifier: ermDJyTEsAVABIqSj7lFjE4Iqw//nm3QJcJ12bMz9wc= Subject key identifier: 65:86:FA:12:BA:76:16:FD:A4:82:C1:53:79:0F:DC:36:18:92:EA:34 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32FE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZYb6Erp2Fv2kgsFTeQ_cNhiS6jQ.roa Signing time: Mon 26 Aug 2024 05:32:12 +0000 ROA not before: Mon 26 Aug 2024 05:32:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13054 (0x32fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6586FA12BA7616FDA482C153790FDC361892EA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:7f:d5:0c:0a:d0:6e:db:6d:0e:c1:94:db: 08:d8:e2:fd:36:24:1f:7d:16:6a:3a:2d:f2:0e:ab: 86:dc:8f:c9:68:0e:58:d0:74:95:5f:58:37:41:d3: a4:ad:6a:ec:bc:a9:b0:ed:23:31:04:f0:13:5a:5b: cf:bf:a1:71:36:8b:75:4d:eb:e4:2a:20:91:cf:d3: 76:e2:37:4e:80:01:0d:ab:52:8c:67:58:22:59:b9: b3:71:1a:aa:32:22:3e:18:7a:a4:9b:3e:9d:5a:c0: c9:6c:f6:7f:74:d6:47:f3:fe:9c:9f:24:6e:a4:7a: e3:6e:87:1d:bc:2f:56:e2:9f:a1:32:70:0d:7e:e4: b5:84:86:2b:ab:96:77:83:b0:35:86:0e:86:9d:38: 22:b5:81:8e:67:36:0d:29:76:03:f9:0e:ec:ac:de: d8:ac:38:58:d1:2a:59:c0:65:74:b1:d0:b2:20:fd: 36:2e:23:1d:47:3e:dd:38:ef:94:04:7a:14:dd:b5: 99:c8:1c:a6:93:4a:c0:ab:2a:7f:5c:3b:f9:c3:7a: 5a:61:91:06:a1:86:4a:f5:93:a8:97:72:9e:66:65: ae:c9:f6:61:a3:17:02:8e:d5:75:a7:5e:11:b9:70: ce:fa:d7:e2:62:6b:0d:13:16:0b:46:52:08:de:0d: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:86:FA:12:BA:76:16:FD:A4:82:C1:53:79:0F:DC:36:18:92:EA:34 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZYb6Erp2Fv2kgsFTeQ_cNhiS6jQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.176.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:57:7c:8e:5a:fd:dc:d8:15:66:f0:53:13:a9:33:c2:af:20: ab:47:75:b5:e8:4d:e2:d2:8b:81:df:7e:06:9b:75:9f:44:21: 3f:26:51:5c:cb:ec:6a:d9:b1:a6:ae:80:c5:94:a7:12:59:57: de:10:bd:b9:8b:a3:8b:52:3d:a3:41:87:64:5f:40:0e:b7:f2: c3:bb:d7:62:b9:a2:91:d3:17:7c:ec:e9:69:b7:22:5f:58:66: 0e:fe:09:55:b2:aa:11:9f:58:f1:be:d5:00:9c:c1:73:78:85: d4:8b:67:fa:b6:8d:d3:e1:9a:06:fe:bb:0a:09:f6:67:c2:3a: 0c:f9:ec:fe:50:02:38:71:b3:21:c8:9c:08:b4:87:39:53:22: a7:68:00:2c:83:26:48:d0:24:32:e8:2b:0c:8c:fb:8b:e4:0f: f4:bd:41:8d:c4:b7:8f:8c:4e:f5:4f:8d:a6:e0:ed:29:98:01: 0e:05:0a:8f:65:c1:13:f8:23:4f:73:d3:e0:58:84:5d:7c:c6: e0:c4:62:4a:1b:ce:88:27:0f:25:c2:1e:39:d8:00:54:81:e4: dc:1f:91:bf:5a:9f:98:7b:da:55:bb:fa:a8:2a:d6:e4:58:a4: 8a:dc:04:0a:3e:80:e3:a4:26:7d:79:2b:3b:1f:4d:c2:a6:ee: 0f:0a:a6:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY1ODZGQTEyQkE3NjE2 RkRBNDgyQzE1Mzc5MEZEQzM2MTg5MkVBMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMX/VDArQbtttDsGU2wjY4v02JB99Fmo6LfIOq4bcj8loDljQ dJVfWDdB06Stauy8qbDtIzEE8BNaW8+/oXE2i3VN6+QqIJHP03biN06AAQ2rUoxn WCJZubNxGqoyIj4YeqSbPp1awMls9n901kfz/pyfJG6keuNuhx28L1bin6EycA1+ 5LWEhiurlneDsDWGDoadOCK1gY5nNg0pdgP5Duys3tisOFjRKlnAZXSx0LIg/TYu Ix1HPt0475QEehTdtZnIHKaTSsCrKn9cO/nDelphkQahhkr1k6iXcp5mZa7J9mGj FwKO1XWnXhG5cM761+Jiaw0TFgtGUgjeDSM/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZYb6Erp2Fv2kgsFTeQ/cNhiS6jQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pZYjZFcnAyRnYya2dzRlRl UV9jTmhpUzZqUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wrAwDQYJKoZIhvcNAQELBQADggEBADpXfI5a/dzYFWbwUxOpM8KvIKtHdbXoTeLS i4HffgabdZ9EIT8mUVzL7GrZsaaugMWUpxJZV94QvbmLo4tSPaNBh2RfQA638sO7 12K5opHTF3zs6Wm3Il9YZg7+CVWyqhGfWPG+1QCcwXN4hdSLZ/q2jdPhmgb+uwoJ 9mfCOgz57P5QAjhxsyHInAi0hzlTIqdoACyDJkjQJDLoKwyM+4vkD/S9QY3Et4+M TvVPjabg7SmYAQ4FCo9lwRP4I09z0+BYhF18xuDEYkobzognDyXCHjnYAFSB5Nwf kb9an5h72lW7+qgq1uRYpIrcBAo+gOOkJn15KzsfTcKm7g8Kprs= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org