$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZseHDI0a_b7k96gaub2yV270048.roa File: ZseHDI0a_b7k96gaub2yV270048.roa (raw, json) Hash identifier: BrW4OdhciHxDLOPKpXRlGyWKvyqNJtN7w9J5glriCtg= Subject key identifier: 66:C7:87:0C:8D:1A:FD:BE:E4:F7:A8:1A:B9:BD:B2:57:6E:F4:D3:8F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3090 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZseHDI0a_b7k96gaub2yV270048.roa Signing time: Mon 26 Aug 2024 05:29:36 +0000 ROA not before: Mon 26 Aug 2024 05:29:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12432 (0x3090) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=66C7870C8D1AFDBEE4F7A81AB9BDB2576EF4D38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:c6:94:5c:26:fa:30:82:85:b0:ed:0b:cf: 17:6b:ce:bc:46:10:a1:3b:9d:45:e7:f2:34:0b:30: fa:e5:33:47:0a:a3:27:6f:f2:ab:e2:1d:99:58:3b: a2:64:79:65:d3:c4:46:71:4c:13:15:52:f0:de:7b: f1:01:59:bc:9e:5c:a2:e9:4b:11:0b:ea:b8:66:4b: 33:41:93:83:fa:91:f7:d4:b6:b7:4c:8d:ab:c3:b3: ba:21:f3:68:f2:bc:56:33:76:2a:75:b3:5e:9d:b9: db:5d:8a:c1:25:65:16:c7:35:a5:b2:ad:3b:c5:19: 33:ab:be:15:6a:37:8d:08:c9:c6:1d:c1:39:b5:eb: 5c:9a:72:1f:02:cc:b1:0f:23:58:bc:1c:3f:93:5d: 1d:1c:97:7d:94:05:b9:0e:b7:36:30:51:52:bb:8b: c2:02:2d:fd:16:14:c1:56:89:14:c7:b2:ae:64:3c: b8:e3:b7:86:db:dd:0f:9d:d1:f0:02:f4:d4:5a:a8: dd:cc:5c:d3:6a:4f:0c:1f:61:34:fa:46:50:c1:fd: 07:93:8c:bd:4a:c7:3b:d6:55:61:ba:3a:94:74:25: c5:c3:38:3f:79:28:43:ed:06:da:f8:7c:3f:5c:0a: 34:18:78:22:24:a9:75:8a:27:a7:85:ff:b7:b5:83: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C7:87:0C:8D:1A:FD:BE:E4:F7:A8:1A:B9:BD:B2:57:6E:F4:D3:8F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZseHDI0a_b7k96gaub2yV270048.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.120.0/22 Signature Algorithm: sha256WithRSAEncryption ac:e6:b2:4b:be:6f:fa:90:2d:86:8d:08:81:60:6e:a1:e3:79: cb:31:21:37:da:67:0c:b3:c0:bc:85:4f:f0:4f:4d:5b:d5:7e: 3f:c7:2e:8f:72:c2:50:f8:2c:a5:3c:11:36:60:19:89:62:6a: b5:fb:0e:7f:e5:17:4e:ef:01:18:2f:a2:82:36:8d:9d:b0:2b: c8:eb:42:cc:af:7b:44:29:54:66:ae:21:b6:ed:7a:49:0a:44: 9e:cf:7c:ef:46:d7:bc:82:f1:bf:38:25:28:2a:5f:a6:7f:d1: 9e:6e:44:85:19:21:51:36:ba:08:f0:1f:95:8e:1d:b2:23:20: 05:d1:fe:2c:5d:bb:4c:3c:35:a2:5d:ed:ca:98:3a:56:73:3f: bf:e7:d6:fc:7e:cd:d2:30:70:6a:04:58:c2:70:ef:65:b5:b0: da:96:2b:62:b0:43:57:05:06:35:b4:58:51:b2:53:5e:2b:6b: d9:41:21:52:55:f7:55:74:35:27:db:99:c1:a1:7c:64:67:bb: 8a:24:af:d8:89:63:ab:af:06:ee:aa:43:71:f9:22:65:87:18: 85:88:c8:9b:21:eb:be:03:bd:62:67:e3:6b:64:b9:0b:08:00: 9c:0a:4f:b6:c0:29:ae:4e:af:25:90:44:c4:04:63:ad:a4:19: a9:51:9e:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2Qzc4NzBDOEQxQUZE QkVFNEY3QTgxQUI5QkRCMjU3NkVGNEQzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+8MaUXCb6MIKFsO0LzxdrzrxGEKE7nUXn8jQLMPrlM0cKoydv 8qviHZlYO6JkeWXTxEZxTBMVUvDee/EBWbyeXKLpSxEL6rhmSzNBk4P6kffUtrdM javDs7oh82jyvFYzdip1s16dudtdisElZRbHNaWyrTvFGTOrvhVqN40IycYdwTm1 61yach8CzLEPI1i8HD+TXR0cl32UBbkOtzYwUVK7i8ICLf0WFMFWiRTHsq5kPLjj t4bb3Q+d0fAC9NRaqN3MXNNqTwwfYTT6RlDB/QeTjL1KxzvWVWG6OpR0JcXDOD95 KEPtBtr4fD9cCjQYeCIkqXWKJ6eF/7e1g5oTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZseHDI0a/b7k96gaub2yV270048wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pzZUhESTBhX2I3azk2Z2F1 YjJ5VjI3MDA0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6HgwDQYJKoZIhvcNAQELBQADggEBAKzmsku+b/qQLYaNCIFgbqHjecsxITfaZwyz wLyFT/BPTVvVfj/HLo9ywlD4LKU8ETZgGYliarX7Dn/lF07vARgvooI2jZ2wK8jr Qsyve0QpVGauIbbtekkKRJ7PfO9G17yC8b84JSgqX6Z/0Z5uRIUZIVE2ugjwH5WO HbIjIAXR/ixdu0w8NaJd7cqYOlZzP7/n1vx+zdIwcGoEWMJw72W1sNqWK2KwQ1cF BjW0WFGyU14ra9lBIVJV91V0NSfbmcGhfGRnu4okr9iJY6uvBu6qQ3H5ImWHGIWI yJsh674DvWJn42tkuQsIAJwKT7bAKa5OryWQRMQEY62kGalRnhA= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org