$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_90BqV0CgN0VEPE6Fxo68_kC_Y4.roa File: _90BqV0CgN0VEPE6Fxo68_kC_Y4.roa (raw, json) Hash identifier: CWLDu6cyBcQPayifWI9k8MfXag8zCJSoKgVkdKJasAE= Subject key identifier: FF:DD:01:A9:5D:02:80:DD:15:10:F1:3A:17:1A:3A:F3:F9:02:FD:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3209 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_90BqV0CgN0VEPE6Fxo68_kC_Y4.roa Signing time: Mon 26 Aug 2024 05:31:11 +0000 ROA not before: Mon 26 Aug 2024 05:31:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12809 (0x3209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FFDD01A95D0280DD1510F13A171A3AF3F902FD8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:2d:64:f5:b5:13:28:c2:79:8f:79:c9:28: 29:a8:f0:a2:e7:37:04:fb:a0:60:d6:9a:3c:fe:08: 8a:e1:35:51:a4:44:89:a4:70:9a:c1:52:6d:4a:4c: 1b:24:ce:14:b4:70:23:86:1c:6d:e0:8b:6d:01:30: e8:81:da:7a:ea:ee:2c:84:9f:89:f5:7f:fb:f4:e7: 87:d5:80:70:a5:88:4b:cd:a3:e2:75:eb:78:81:d4: 7a:be:45:2b:cb:ef:38:5d:a5:67:dd:8f:88:15:86: 29:45:b3:d8:f8:32:c6:5c:17:e3:85:78:98:8f:93: ca:ef:37:33:8f:33:35:0a:4c:e3:af:67:6b:13:d5: e7:72:f7:5e:04:1f:1a:0b:93:bf:3d:4d:61:64:28: d1:89:a6:e3:ec:d8:9d:92:ee:9a:96:8f:47:df:91: 12:73:b4:63:42:08:e6:96:5f:ca:ef:3b:dc:e3:bf: ba:78:c4:79:bb:5a:fb:3a:ef:83:ea:b2:b5:03:aa: 2e:d7:00:ce:ed:97:47:6c:12:07:e1:a3:c6:98:a7: b7:cf:6a:91:c3:d9:4d:e3:32:96:50:44:89:60:96: 78:b4:85:ce:84:ac:41:f9:31:ef:ab:12:93:e5:d0: ac:1d:af:53:5b:3d:7e:ae:f9:1f:ec:87:6a:ce:3f: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DD:01:A9:5D:02:80:DD:15:10:F1:3A:17:1A:3A:F3:F9:02:FD:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_90BqV0CgN0VEPE6Fxo68_kC_Y4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.116.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:bd:4a:58:1e:f5:1b:e5:f3:71:de:e8:e4:0c:f7:14:26:1d: 5d:b8:a2:b9:2a:0d:aa:0e:9b:00:42:41:d2:c9:44:07:b0:ba: 1b:20:27:66:e6:d2:a1:c9:ce:5c:d6:f7:96:4a:bc:fb:bd:c6: 22:62:98:13:32:37:8f:6f:0a:74:b0:a0:cc:84:16:6f:59:9b: 24:e7:5f:57:1f:a7:23:42:6b:24:29:86:88:df:ee:54:c8:33: df:c7:a3:a5:85:cb:ed:4f:dc:c7:2a:35:6d:f3:e9:26:e8:94: 0c:7e:02:23:9d:8d:39:89:33:f3:4f:10:3b:85:d2:ca:a8:27: f9:21:2e:ca:4f:61:86:93:6a:38:36:9a:1e:a9:c2:e5:51:0c: b8:53:c1:c5:88:84:4a:c4:49:44:03:42:2a:7b:68:62:71:50: ce:5c:13:ae:12:bc:1d:fe:2e:3f:34:cc:ad:27:b0:3d:98:5e: 7c:36:3e:b5:29:b9:87:77:af:51:91:5c:f5:e7:47:83:26:33: c0:fd:c2:14:99:03:ea:55:b2:8e:c8:a6:d0:82:39:d7:37:aa: f7:17:3d:21:5a:83:4d:09:42:e4:f3:53:3e:f9:48:01:3b:4a: 64:b2:4c:6b:f0:40:6d:8c:b5:11:5c:03:f3:5a:fc:f9:cb:6f: 61:14:7e:55 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGREQwMUE5NUQwMjgw REQxNTEwRjEzQTE3MUEzQUYzRjkwMkZEOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzRS1k9bUTKMJ5j3nJKCmo8KLnNwT7oGDWmjz+CIrhNVGkRImk cJrBUm1KTBskzhS0cCOGHG3gi20BMOiB2nrq7iyEn4n1f/v054fVgHCliEvNo+J1 63iB1Hq+RSvL7zhdpWfdj4gVhilFs9j4MsZcF+OFeJiPk8rvNzOPMzUKTOOvZ2sT 1edy914EHxoLk789TWFkKNGJpuPs2J2S7pqWj0ffkRJztGNCCOaWX8rvO9zjv7p4 xHm7Wvs674PqsrUDqi7XAM7tl0dsEgfho8aYp7fPapHD2U3jMpZQRIlglni0hc6E rEH5Me+rEpPl0Kwdr1NbPX6u+R/sh2rOPxCLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/90BqV0CgN0VEPE6Fxo68/kC/Y4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL185MEJxVjBDZ04wVkVQRTZG eG82OF9rQ19ZNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6XQwDQYJKoZIhvcNAQELBQADggEBAH+9Slge9Rvl83He6OQM9xQmHV24orkqDaoO mwBCQdLJRAewuhsgJ2bm0qHJzlzW95ZKvPu9xiJimBMyN49vCnSwoMyEFm9ZmyTn X1cfpyNCayQphojf7lTIM9/Ho6WFy+1P3McqNW3z6SbolAx+AiOdjTmJM/NPEDuF 0sqoJ/khLspPYYaTajg2mh6pwuVRDLhTwcWIhErESUQDQip7aGJxUM5cE64SvB3+ Lj80zK0nsD2YXnw2PrUpuYd3r1GRXPXnR4MmM8D9whSZA+pVso7IptCCOdc3qvcX PSFag00JQuTzUz75SAE7SmSyTGvwQG2MtRFcA/Na/PnLb2EUflU= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org