$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z_BpUXoo5SZQ5TyY-n4rPVB0eqs.roa File: Z_BpUXoo5SZQ5TyY-n4rPVB0eqs.roa (raw, json) Hash identifier: ArQEGednZB+USOAN0eBhOzospvgqVCBVubfZItliPT0= Subject key identifier: 67:F0:69:51:7A:28:E5:26:50:E5:3C:98:FA:7E:2B:3D:50:74:7A:AB Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31BF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z_BpUXoo5SZQ5TyY-n4rPVB0eqs.roa Signing time: Mon 26 Aug 2024 05:30:53 +0000 ROA not before: Mon 26 Aug 2024 05:30:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.121.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12735 (0x31bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=67F069517A28E52650E53C98FA7E2B3D50747AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:a3:25:68:dc:19:0d:36:b1:97:10:cd:91: c3:1b:7b:b0:65:9c:f2:70:e4:76:3b:21:04:92:60: 43:1c:ce:0d:74:a3:4b:c5:ab:47:76:7a:90:13:ea: 86:e6:8d:f9:b2:0b:35:88:b0:66:b4:04:6a:b4:99: 23:fa:2f:da:81:1e:ed:0d:a2:cf:ad:44:2d:a0:b8: 8b:1f:c3:f7:53:58:c2:7a:a2:fc:81:3d:ba:42:08: 68:f5:42:c6:15:1c:51:bb:1d:77:49:ff:e6:51:08: 4e:c2:82:77:ac:c3:18:5e:da:34:9d:3b:1a:f5:06: 99:32:b0:ed:40:10:d5:3f:d2:26:90:26:4e:90:ce: 6a:69:fd:de:f8:39:3d:d4:49:ad:a9:90:aa:9f:fd: 3f:af:41:d1:22:c1:e6:73:97:82:15:b8:16:cf:d4: 15:1d:66:63:b6:05:c9:75:ba:bb:37:9d:be:4b:f9: b9:34:1a:df:59:8c:4d:0f:e2:d9:22:fd:98:89:08: 14:59:f6:31:a8:7f:bc:09:5e:ec:12:37:22:7b:fd: 30:7c:2a:8d:3a:36:28:2e:3e:b9:a8:84:e1:ee:cb: 90:12:44:b4:57:34:93:47:10:f2:9d:8a:76:48:ad: 4d:c6:3a:06:f9:56:14:8b:44:3f:7b:33:04:38:42: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:69:51:7A:28:E5:26:50:E5:3C:98:FA:7E:2B:3D:50:74:7A:AB X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z_BpUXoo5SZQ5TyY-n4rPVB0eqs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.121.128/25 Signature Algorithm: sha256WithRSAEncryption b1:e5:cd:2d:56:0c:b1:06:3f:a2:f0:c3:19:1b:55:92:f0:5d: 54:53:22:a9:47:01:56:8e:5b:5d:bd:3e:39:30:e9:60:ca:40: 02:58:68:75:7d:59:97:8b:c8:2d:2e:e2:03:39:ba:a4:d4:79: e2:02:93:a5:1e:59:b0:f2:24:90:4f:c5:63:7d:36:60:ec:59: c2:b0:8c:1f:62:12:9c:b2:6c:d2:c3:f6:82:97:92:b5:d7:84: 3f:3a:6c:39:af:b4:e6:27:68:6d:11:8f:96:d6:86:57:eb:d9: 7f:72:c4:27:82:c4:96:fe:30:81:35:71:54:6e:30:e8:a3:c6: a8:b6:23:6d:2b:f4:50:cd:8c:17:20:0c:2c:bf:88:c0:5c:69: 23:0e:a2:57:f8:04:f2:04:8f:c6:03:a2:ef:54:e3:a4:82:f6: e8:9b:e7:9b:e2:bf:40:b4:4c:7d:5d:80:44:52:63:02:e6:a8: 73:60:b2:3f:88:7e:d9:c2:c8:36:2d:f7:20:02:df:de:60:07: 30:c6:34:d9:7c:02:b8:65:93:1e:e3:11:91:2b:13:33:1e:89: 93:0f:9e:5b:fc:1e:af:ef:77:ba:6e:2f:28:44:05:af:89:85: 27:f8:7a:ed:f5:dc:74:15:e5:c4:38:d8:dd:74:56:0d:c0:89: 10:d6:6d:a8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3RjA2OTUxN0EyOEU1 MjY1MEU1M0M5OEZBN0UyQjNENTA3NDdBQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO/6MlaNwZDTaxlxDNkcMbe7BlnPJw5HY7IQSSYEMczg10o0vF q0d2epAT6obmjfmyCzWIsGa0BGq0mSP6L9qBHu0Nos+tRC2guIsfw/dTWMJ6ovyB PbpCCGj1QsYVHFG7HXdJ/+ZRCE7Cgneswxhe2jSdOxr1BpkysO1AENU/0iaQJk6Q zmpp/d74OT3USa2pkKqf/T+vQdEiweZzl4IVuBbP1BUdZmO2Bcl1urs3nb5L+bk0 Gt9ZjE0P4tki/ZiJCBRZ9jGof7wJXuwSNyJ7/TB8Ko06NiguPrmohOHuy5ASRLRX NJNHEPKdinZIrU3GOgb5VhSLRD97MwQ4QgkLAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUZ/BpUXoo5SZQ5TyY+n4rPVB0eqswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pfQnBVWG9vNVNaUTVUeVkt bjRyUFZCMGVxcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THmAMA0GCSqGSIb3DQEBCwUAA4IBAQCx5c0tVgyxBj+i8MMZG1WS8F1UUyKpRwFW jltdvT45MOlgykACWGh1fVmXi8gtLuIDObqk1HniApOlHlmw8iSQT8VjfTZg7FnC sIwfYhKcsmzSw/aCl5K114Q/Omw5r7TmJ2htEY+W1oZX69l/csQngsSW/jCBNXFU bjDoo8aotiNtK/RQzYwXIAwsv4jAXGkjDqJX+ATyBI/GA6LvVOOkgvbom+eb4r9A tEx9XYBEUmMC5qhzYLI/iH7Zwsg2LfcgAt/eYAcwxjTZfAK4ZZMe4xGRKxMzHomT D55b/B6v73e6bi8oRAWviYUn+Hrt9dx0FeXEONjddFYNwIkQ1m2o -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org