$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Txh-HB_6jJx257Sq4TlHDVMXZo.roa File: _Txh-HB_6jJx257Sq4TlHDVMXZo.roa (raw, json) Hash identifier: lnnzDxrzKBiOPhAWVPV5Cujc8xTQsStOy75PmnTcIJY= Subject key identifier: FD:3C:61:F8:70:7F:EA:32:71:DB:9E:D2:AB:84:E5:1C:35:4C:5D:9A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3123 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Txh-HB_6jJx257Sq4TlHDVMXZo.roa Signing time: Mon 26 Aug 2024 05:30:08 +0000 ROA not before: Mon 26 Aug 2024 05:30:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12579 (0x3123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FD3C61F8707FEA3271DB9ED2AB84E51C354C5D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:57:c8:87:e1:2d:76:e1:be:50:31:90:a6: 77:e6:54:7a:b9:32:d6:e8:1a:00:c7:6a:1a:8e:30: 45:f8:b9:6a:94:31:6f:13:e1:c3:cd:c7:45:21:c1: 4d:a6:f3:96:10:30:b5:23:81:1a:54:d6:3c:0d:ff: f7:ce:b4:5a:e5:b6:98:55:fa:21:bf:84:8f:2d:14: a7:52:d3:de:4b:19:60:48:f9:b1:9f:ac:ab:c5:b6: 8f:03:2b:8b:f5:53:94:a2:02:be:1e:e9:28:0e:ae: cc:da:ee:76:92:a4:34:94:63:65:9b:50:a0:5d:e5: 9f:07:60:bf:e3:8b:38:b6:1b:e9:4c:c9:8c:d3:13: a3:cd:08:d4:a1:6a:0a:67:48:8b:99:94:09:dc:45: db:f7:3d:ad:b9:9a:d1:8a:ed:5f:78:6f:02:19:97: 73:77:ce:0f:03:62:e5:8a:9a:61:f5:b3:9c:05:17: 13:7a:8d:9e:9b:38:de:15:62:9c:31:8e:db:16:bb: fd:e0:43:df:85:98:ac:c3:1a:f3:14:bf:ad:2b:a8: d0:22:ce:aa:3e:3d:1f:79:13:e1:3c:90:36:30:bf: b1:e5:87:67:a2:fe:11:64:48:5e:69:ab:18:43:8a: e3:e1:3f:96:f3:21:1b:11:f0:2c:f1:d8:43:d1:40: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3C:61:F8:70:7F:EA:32:71:DB:9E:D2:AB:84:E5:1C:35:4C:5D:9A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Txh-HB_6jJx257Sq4TlHDVMXZo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.132.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:1a:e9:6d:99:8a:4f:88:47:bd:c5:51:20:29:02:81:44:69: 9a:8c:1b:cb:9a:98:c2:2f:5f:7e:03:1d:87:cd:de:52:9a:f5: 5f:aa:4b:5e:34:ef:0e:83:c8:bd:14:b0:2e:ae:27:9d:db:fc: 96:58:00:1a:02:0a:78:0a:3c:7a:fb:e2:94:01:a2:af:d3:12: 1e:18:fa:99:14:99:88:d9:92:e9:64:3f:59:ab:76:69:b4:53: b8:51:8c:6b:28:c6:6d:14:e7:b3:3e:a1:df:e6:d1:a7:e3:a2: 51:57:75:a0:f9:85:de:ff:c3:14:62:4a:63:6b:60:40:77:cc: d8:68:dd:ef:2d:e0:c8:1d:82:a8:25:6d:61:3c:98:44:b4:1f: ad:aa:90:b2:d5:df:06:87:83:31:17:5b:fc:60:ab:1b:c9:4d: 4e:b2:16:ac:ee:fa:08:84:8a:18:e3:15:15:5a:13:16:3f:4d: 36:36:ac:a1:86:2c:04:d7:34:f2:47:be:85:a3:06:2a:4f:71: 7a:51:8a:75:00:26:81:e5:a4:9f:e2:fd:bc:1a:7b:6e:2a:f0: eb:40:3b:67:22:71:b7:89:1d:a1:2a:00:18:98:1b:3e:11:72: b3:1f:2c:08:46:6e:30:4a:f4:3c:75:82:38:b5:ce:98:a4:2e: d1:5a:4e:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZEM0M2MUY4NzA3RkVB MzI3MURCOUVEMkFCODRFNTFDMzU0QzVEOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCusVfIh+EtduG+UDGQpnfmVHq5MtboGgDHahqOMEX4uWqUMW8T 4cPNx0UhwU2m85YQMLUjgRpU1jwN//fOtFrltphV+iG/hI8tFKdS095LGWBI+bGf rKvFto8DK4v1U5SiAr4e6SgOrsza7naSpDSUY2WbUKBd5Z8HYL/jizi2G+lMyYzT E6PNCNShagpnSIuZlAncRdv3Pa25mtGK7V94bwIZl3N3zg8DYuWKmmH1s5wFFxN6 jZ6bON4VYpwxjtsWu/3gQ9+FmKzDGvMUv60rqNAizqo+PR95E+E8kDYwv7Hlh2ei /hFkSF5pqxhDiuPhP5bzIRsR8Czx2EPRQDp9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/Txh+HB/6jJx257Sq4TlHDVMXZowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19UeGgtSEJfNmpKeDI1N1Nx NFRsSERWTVhaby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wYQwDQYJKoZIhvcNAQELBQADggEBAHoa6W2Zik+IR73FUSApAoFEaZqMG8uamMIv X34DHYfN3lKa9V+qS1407w6DyL0UsC6uJ53b/JZYABoCCngKPHr74pQBoq/TEh4Y +pkUmYjZkulkP1mrdmm0U7hRjGsoxm0U57M+od/m0afjolFXdaD5hd7/wxRiSmNr YEB3zNho3e8t4MgdgqglbWE8mES0H62qkLLV3waHgzEXW/xgqxvJTU6yFqzu+giE ihjjFRVaExY/TTY2rKGGLATXNPJHvoWjBipPcXpRinUAJoHlpJ/i/bwae24q8OtA O2cicbeJHaEqABiYGz4RcrMfLAhGbjBK9Dx1gji1zpikLtFaTgc= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org