$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZiOaYgicUa0qBzISoLh5KXpDGRY.roa File: ZiOaYgicUa0qBzISoLh5KXpDGRY.roa (raw, json) Hash identifier: 3Skckq7fGQRyP52KYFqcqUbhSj2Cf3O34cLLweDl/sI= Subject key identifier: 66:23:9A:62:08:9C:51:AD:2A:07:32:12:A0:B8:79:29:7A:43:19:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32EA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZiOaYgicUa0qBzISoLh5KXpDGRY.roa Signing time: Mon 26 Aug 2024 05:32:08 +0000 ROA not before: Mon 26 Aug 2024 05:32:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13034 (0x32ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=66239A62089C51AD2A073212A0B879297A431916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:e9:99:47:1b:69:35:d4:da:1c:97:3b:ce: 0d:93:3a:fe:10:31:9e:90:b5:35:9b:7d:24:5f:36: 3a:b4:7a:8c:cb:4e:73:88:d1:cb:5e:f6:c2:52:1d: 92:6a:ee:6f:69:d7:8e:07:46:7f:b1:24:f4:d0:01: 73:97:9c:ce:58:85:a2:23:01:c4:93:c4:ed:26:26: 1f:f4:24:bf:da:ec:e4:a7:4d:aa:ca:da:28:7a:b2: f2:e8:c9:8b:14:ed:76:6e:f9:b0:30:f8:40:58:e2: 59:be:4e:23:00:e8:2b:80:32:81:ca:e4:94:48:de: cf:93:38:30:ec:d2:0d:41:a8:7c:b2:e1:37:8d:03: 30:08:f3:0b:ac:a7:9c:43:22:78:9b:bb:27:a7:68: 43:c3:ba:a6:ae:3b:80:6a:39:e4:b6:e8:b5:eb:f9: 52:7f:32:1f:ba:90:bf:9b:cc:4f:4a:75:5f:0c:fc: 5f:31:40:4a:09:f7:4f:48:5e:41:66:b3:04:99:27: c1:31:ee:2c:e0:1c:71:d2:4f:8e:da:b6:dc:57:bb: f5:34:6d:18:12:66:0f:2e:45:12:b6:9c:48:a0:20: 51:78:79:44:9e:c3:11:0b:83:c7:e1:44:4c:1e:76: be:2e:45:fc:51:67:29:d4:f3:b8:f5:b5:48:af:f8: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:9A:62:08:9C:51:AD:2A:07:32:12:A0:B8:79:29:7A:43:19:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZiOaYgicUa0qBzISoLh5KXpDGRY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.60.0/22 Signature Algorithm: sha256WithRSAEncryption 53:11:72:66:67:2b:ff:a0:3a:da:d7:78:79:4b:4c:5d:fa:43: f6:3d:25:e6:a0:9b:34:23:14:6a:11:36:b0:12:4c:c1:19:2f: 6d:a4:93:19:41:53:b7:60:4b:14:52:f4:fd:0b:3e:e6:e2:25: 4e:e7:cb:a9:95:0b:01:8d:42:e7:5f:51:2d:1e:a5:c9:05:5e: 08:ea:da:78:2e:f4:68:44:dc:80:5b:b9:9c:c0:25:9d:d2:cb: 7d:fd:bc:e0:c8:b9:9c:b0:14:23:1f:25:18:3b:d9:73:e7:1e: e7:e7:d3:3b:2d:aa:ff:f7:b7:5e:99:09:4f:9d:57:d8:19:84: 4b:9f:58:ef:90:72:c6:90:7d:15:ba:30:16:a4:ab:a1:e2:43: 60:bf:f5:d0:e3:24:45:70:76:0b:a2:47:b0:38:e3:2e:f6:8a: ba:31:3e:01:40:75:cd:1f:7a:a4:8f:03:0d:59:d1:e2:4d:85: 6a:ac:b9:6e:c0:dd:b0:3b:29:f1:59:f8:80:30:30:a7:a4:bc: 00:8b:85:83:d9:77:f7:60:45:88:c7:32:6e:80:63:ac:88:bf: 6c:58:9e:7b:22:99:92:c0:d5:63:6e:0d:42:d8:6c:30:e4:1b: 83:64:c8:1d:d1:b3:17:d2:a2:89:7f:7b:3a:b7:f8:bf:dd:9a: c5:25:b2:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2MjM5QTYyMDg5QzUx QUQyQTA3MzIxMkEwQjg3OTI5N0E0MzE5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPDumZRxtpNdTaHJc7zg2TOv4QMZ6QtTWbfSRfNjq0eozLTnOI 0cte9sJSHZJq7m9p144HRn+xJPTQAXOXnM5YhaIjAcSTxO0mJh/0JL/a7OSnTarK 2ih6svLoyYsU7XZu+bAw+EBY4lm+TiMA6CuAMoHK5JRI3s+TODDs0g1BqHyy4TeN AzAI8wusp5xDInibuyenaEPDuqauO4BqOeS26LXr+VJ/Mh+6kL+bzE9KdV8M/F8x QEoJ909IXkFmswSZJ8Ex7izgHHHST47attxXu/U0bRgSZg8uRRK2nEigIFF4eUSe wxELg8fhREwedr4uRfxRZynU87j1tUiv+AwnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZiOaYgicUa0qBzISoLh5KXpDGRYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ppT2FZZ2ljVWEwcUJ6SVNv TGg1S1hwREdSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq ATwwDQYJKoZIhvcNAQELBQADggEBAFMRcmZnK/+gOtrXeHlLTF36Q/Y9JeagmzQj FGoRNrASTMEZL22kkxlBU7dgSxRS9P0LPubiJU7ny6mVCwGNQudfUS0epckFXgjq 2ngu9GhE3IBbuZzAJZ3Sy339vODIuZywFCMfJRg72XPnHufn0zstqv/3t16ZCU+d V9gZhEufWO+QcsaQfRW6MBakq6HiQ2C/9dDjJEVwdguiR7A44y72iroxPgFAdc0f eqSPAw1Z0eJNhWqsuW7A3bA7KfFZ+IAwMKekvACLhYPZd/dgRYjHMm6AY6yIv2xY nnsimZLA1WNuDULYbDDkG4NkyB3RsxfSool/ezq3+L/dmsUlsnY= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org