$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avdh-Cc_ZpXfb63ZDRcx-eY9_Ho.roa File: avdh-Cc_ZpXfb63ZDRcx-eY9_Ho.roa (raw, json) Hash identifier: w3n4a5tQmTXgmxXLjDCEAMH53saSXBcLwvsA7df7wv8= Subject key identifier: 6A:F7:61:F8:27:3F:66:95:DF:6F:AD:D9:0D:17:31:F9:E6:3D:FC:7A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3119 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avdh-Cc_ZpXfb63ZDRcx-eY9_Ho.roa Signing time: Mon 26 Aug 2024 05:30:06 +0000 ROA not before: Mon 26 Aug 2024 05:30:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12569 (0x3119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6AF761F8273F6695DF6FADD90D1731F9E63DFC7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:5a:2c:e9:2b:64:d6:a6:4b:e6:d7:bb:d9: 48:1f:89:8b:39:78:28:64:ce:65:21:14:62:23:67: 72:ac:1b:db:74:21:8f:70:63:f1:60:c3:ba:1d:6f: 28:17:20:f1:ec:f3:b4:72:4d:c0:56:1a:71:b5:fc: 8b:03:8a:2a:70:ea:43:03:3a:27:37:35:84:fc:f4: d0:c9:55:c6:1b:58:0a:46:78:da:53:6c:51:68:ac: a7:df:55:db:ac:0b:fd:5b:20:25:0d:39:06:29:ae: 6b:69:1a:b3:31:0d:bb:2c:7b:02:83:74:22:f9:24: ab:3d:73:8d:88:e9:bf:75:7d:e3:b5:fc:76:13:28: 90:1c:18:ff:f3:1e:c5:63:9a:6f:ce:89:33:2c:1c: 01:f7:74:df:2a:48:11:08:1f:7d:b8:f5:17:79:e5: 6c:5f:ba:8f:81:c4:09:28:ed:9f:88:68:0d:7c:b1: 1a:de:4c:3e:a8:3d:f9:a9:98:17:ff:7b:28:c8:1c: cc:a9:41:04:5f:4e:67:9c:00:a6:f6:3d:aa:a7:38: 74:ca:f9:fd:c1:91:0e:5f:64:03:24:68:97:83:fb: 1e:75:ab:b1:88:bc:73:92:00:ce:12:53:36:28:05: fe:c6:ad:f9:92:d2:1e:d4:da:a4:e8:63:ba:31:82: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F7:61:F8:27:3F:66:95:DF:6F:AD:D9:0D:17:31:F9:E6:3D:FC:7A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avdh-Cc_ZpXfb63ZDRcx-eY9_Ho.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.40.0/22 Signature Algorithm: sha256WithRSAEncryption 89:00:db:24:e3:29:1b:fe:7e:67:03:1b:0c:7d:a9:cf:e3:6e: 29:49:e3:5a:00:3c:a9:3c:6a:a3:a0:b0:fa:a4:28:a0:48:42: 25:12:4c:87:31:db:ac:4a:f9:bb:d8:32:7c:a0:f5:9b:4e:65: 79:d0:26:41:48:27:e4:6c:3d:fe:2d:a1:ea:79:6a:ba:1b:81: 86:c8:85:b4:42:b3:aa:e8:4c:9c:5e:ad:13:55:c7:a2:0d:95: 9b:6c:f4:45:f8:0f:f5:bf:83:c3:9b:a9:46:41:60:d6:1c:6b: e4:c6:49:b8:7d:ae:01:81:c8:f9:b3:e7:02:74:cd:19:c3:1e: d4:b9:1e:a7:bf:55:cb:32:96:55:b5:96:a6:8a:9f:eb:e4:ff: 95:41:b6:8a:6c:48:f7:b3:c4:17:19:6c:44:7d:a3:5c:ae:96: dd:f5:ee:08:37:71:e8:91:2a:aa:e7:b4:26:74:96:02:d0:20: a7:c7:3f:ee:13:1a:1b:55:23:9a:0a:82:1d:0e:20:bc:d1:85: 41:16:72:3d:29:15:76:52:75:5e:05:6c:b7:75:6c:46:65:ce: 74:8e:f8:c9:33:0b:3e:1f:0f:a5:61:ec:a8:cb:6a:b6:be:7e: 70:c0:ff:55:8b:e8:4a:b5:ab:cf:e2:0c:70:0a:d2:9b:33:e5: 50:f2:33:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZBRjc2MUY4MjczRjY2 OTVERjZGQUREOTBEMTczMUY5RTYzREZDN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCksFos6Stk1qZL5te72UgfiYs5eChkzmUhFGIjZ3KsG9t0IY9w Y/Fgw7odbygXIPHs87RyTcBWGnG1/IsDiipw6kMDOic3NYT89NDJVcYbWApGeNpT bFForKffVdusC/1bICUNOQYprmtpGrMxDbssewKDdCL5JKs9c42I6b91feO1/HYT KJAcGP/zHsVjmm/OiTMsHAH3dN8qSBEIH3249Rd55Wxfuo+BxAko7Z+IaA18sRre TD6oPfmpmBf/eyjIHMypQQRfTmecAKb2PaqnOHTK+f3BkQ5fZAMkaJeD+x51q7GI vHOSAM4SUzYoBf7GrfmS0h7U2qToY7oxgpj1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUavdh+Cc/ZpXfb63ZDRcx+eY9/HowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2F2ZGgtQ2NfWnBYZmI2M1pE UmN4LWVZOV9Iby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wygwDQYJKoZIhvcNAQELBQADggEBAIkA2yTjKRv+fmcDGwx9qc/jbilJ41oAPKk8 aqOgsPqkKKBIQiUSTIcx26xK+bvYMnyg9ZtOZXnQJkFIJ+RsPf4toep5arobgYbI hbRCs6roTJxerRNVx6INlZts9EX4D/W/g8ObqUZBYNYca+TGSbh9rgGByPmz5wJ0 zRnDHtS5Hqe/VcsyllW1lqaKn+vk/5VBtopsSPezxBcZbER9o1yult317gg3ceiR KqrntCZ0lgLQIKfHP+4TGhtVI5oKgh0OILzRhUEWcj0pFXZSdV4FbLd1bEZlznSO +MkzCz4fD6Vh7KjLara+fnDA/1WL6Eq1q8/iDHAK0psz5VDyM24= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org