$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hxUhA5B1zBafDPL4Cu0kkA5tD4.roa File: _hxUhA5B1zBafDPL4Cu0kkA5tD4.roa (raw, json) Hash identifier: yGwTIpl5Dpblw3Pv2XyMCCMoAtgEd1ngu0rcQfrMbyI= Subject key identifier: FE:1C:54:84:0E:41:D7:30:5A:7C:33:CB:E0:2B:B4:92:40:39:B4:3E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3202 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hxUhA5B1zBafDPL4Cu0kkA5tD4.roa Signing time: Mon 26 Aug 2024 05:31:09 +0000 ROA not before: Mon 26 Aug 2024 05:31:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12802 (0x3202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FE1C54840E41D7305A7C33CBE02BB4924039B43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:d4:fb:12:c0:de:80:8f:c3:79:87:6f:6e: 53:a8:ad:5b:4b:77:c0:9d:e9:4e:e3:f7:8e:02:b0: bc:6d:46:81:f8:e2:64:5c:f0:fb:76:3f:de:ec:03: 24:7e:3f:a6:f2:77:e4:8b:48:18:bc:e2:bc:56:b1: 6c:23:cd:dc:e2:3a:e8:5f:35:63:c7:36:bf:bc:3b: b2:f5:97:61:71:0f:26:05:7f:b3:d3:c4:35:b7:91: eb:08:ef:07:eb:ff:f0:d4:d9:c4:df:ac:f4:57:c0: 8f:4e:7d:1d:81:66:fa:ce:ba:45:d6:d0:3f:e1:10: 97:2f:ff:a6:8d:bb:0b:7e:4c:f8:1b:7a:a0:4d:41: 63:a6:2f:c7:d3:e4:05:71:86:74:1d:79:4c:6f:3e: 1a:14:1b:41:4f:fb:23:86:98:c1:63:99:0d:24:df: 75:26:bd:e6:a6:5f:05:fd:0b:09:67:59:10:c3:19: ae:41:1b:ee:e1:fe:05:4d:14:a2:cf:5f:a8:3a:48: b2:2c:8c:b5:9f:b2:6f:d2:19:f1:e1:da:d3:10:10: 3e:0a:0f:d6:1b:ad:17:64:a3:b5:0a:b2:c1:57:14: cf:fe:89:1b:19:f8:17:36:dc:bf:49:9a:6b:b7:88: 15:3d:e2:80:d3:ae:4e:9f:fb:4d:9c:6b:d9:bf:6e: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1C:54:84:0E:41:D7:30:5A:7C:33:CB:E0:2B:B4:92:40:39:B4:3E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hxUhA5B1zBafDPL4Cu0kkA5tD4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.152.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:75:8d:3a:23:8f:ee:fc:3a:6d:8c:f0:70:5f:1d:39:27:9a: dd:48:3f:5e:09:c2:7a:e6:1b:6f:d3:77:5a:b7:10:e4:5e:7c: 23:aa:8e:8f:a8:f0:13:27:d6:2f:0e:52:13:43:82:d3:11:5c: 60:cc:87:11:5f:32:3d:cf:1d:2a:3a:41:54:e7:fe:90:8e:7c: 11:b6:25:28:8a:63:28:25:4e:77:ea:f2:03:91:59:6b:c2:8b: 47:f6:3d:d3:34:47:c7:3b:97:93:26:e9:5f:c0:cb:a6:ae:07: a1:fe:cc:24:f3:cd:a3:49:c5:f0:20:17:ea:14:5a:cb:40:51: e7:1c:19:03:58:79:3f:e4:86:19:ec:3a:8d:ca:2f:fd:2c:24: dd:ed:13:5d:c6:3e:30:85:55:45:69:78:ff:50:3e:62:5b:92: 73:19:94:02:09:e4:8d:34:bb:e0:e5:f0:dd:cc:e1:1f:5f:13: 11:fa:c2:40:ae:09:c0:e7:ad:66:ed:d3:35:ae:1a:16:53:ad: f0:50:44:8f:85:c8:df:b0:11:a6:e2:18:93:db:d7:4f:4c:df: 48:bf:8c:d1:bc:49:69:79:a4:d5:7d:17:39:2b:ae:b8:6b:ab: b7:4d:e1:07:1d:d6:a7:ca:7c:14:ea:4c:5f:2a:5c:0b:5d:03: c3:76:10:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFMUM1NDg0MEU0MUQ3 MzA1QTdDMzNDQkUwMkJCNDkyNDAzOUI0M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCptdT7EsDegI/DeYdvblOorVtLd8Cd6U7j944CsLxtRoH44mRc 8Pt2P97sAyR+P6byd+SLSBi84rxWsWwjzdziOuhfNWPHNr+8O7L1l2FxDyYFf7PT xDW3kesI7wfr//DU2cTfrPRXwI9OfR2BZvrOukXW0D/hEJcv/6aNuwt+TPgbeqBN QWOmL8fT5AVxhnQdeUxvPhoUG0FP+yOGmMFjmQ0k33UmveamXwX9CwlnWRDDGa5B G+7h/gVNFKLPX6g6SLIsjLWfsm/SGfHh2tMQED4KD9YbrRdko7UKssFXFM/+iRsZ +Bc23L9Jmmu3iBU94oDTrk6f+02ca9m/bvuVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/hxUhA5B1zBafDPL4Cu0kkA5tD4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19oeFVoQTVCMXpCYWZEUEw0 Q3Uwa2tBNXRENC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AZgwDQYJKoZIhvcNAQELBQADggEBAFt1jTojj+78Om2M8HBfHTknmt1IP14Jwnrm G2/Td1q3EORefCOqjo+o8BMn1i8OUhNDgtMRXGDMhxFfMj3PHSo6QVTn/pCOfBG2 JSiKYyglTnfq8gORWWvCi0f2PdM0R8c7l5Mm6V/Ay6auB6H+zCTzzaNJxfAgF+oU WstAUeccGQNYeT/khhnsOo3KL/0sJN3tE13GPjCFVUVpeP9QPmJbknMZlAIJ5I00 u+Dl8N3M4R9fExH6wkCuCcDnrWbt0zWuGhZTrfBQRI+FyN+wEabiGJPb109M30i/ jNG8SWl5pNV9Fzkrrrhrq7dN4Qcd1qfKfBTqTF8qXAtdA8N2ENY= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:52 2024 by rpki-client on console-ams.rpki-client.org