$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-LZFH5e9fesU21t2gksCX0R-1I.roa File: b-LZFH5e9fesU21t2gksCX0R-1I.roa (raw, json) Hash identifier: FIdJTmyXdzO20hVUQhVYIgz021fZGXGtaL1lkob3JQE= Subject key identifier: 6F:E2:D9:14:7E:5E:F5:F7:AC:53:6D:6D:DA:09:2C:09:7D:11:FB:52 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30B1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-LZFH5e9fesU21t2gksCX0R-1I.roa Signing time: Mon 26 Aug 2024 05:29:44 +0000 ROA not before: Mon 26 Aug 2024 05:29:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12465 (0x30b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6FE2D9147E5EF5F7AC536D6DDA092C097D11FB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:18:1c:54:7c:19:50:f9:8d:b8:6c:ae:6d: 89:94:e9:6c:de:82:42:48:fa:1e:a0:2f:c9:fe:4e: 0c:fa:e2:d9:4c:a8:ab:7b:af:66:a4:e2:f4:e0:89: a3:d2:ba:a9:3f:04:9a:a2:4d:27:ad:5c:82:ff:d0: 1e:2c:7f:4c:aa:7e:81:20:45:f4:e9:a1:27:78:49: 8c:a9:d0:27:ae:be:aa:fd:8f:0c:2a:be:f7:86:d5: d0:46:29:bd:98:14:96:28:7c:a7:59:99:90:ab:2c: 78:cf:31:fd:ce:23:0d:e5:82:a5:53:c6:93:60:0e: fa:b8:5c:a2:07:9a:b9:66:7f:2d:fc:c8:c5:40:17: a7:a8:33:bd:82:d4:37:4d:88:a1:d4:5e:79:ae:e0: cb:f7:41:2f:af:64:f6:75:2f:2e:d6:8f:64:9b:f0: 09:75:4d:61:cf:ef:e5:ce:ea:6a:92:34:02:42:7b: b4:90:0e:66:48:a7:91:d2:e8:41:b6:4c:68:cd:8d: 47:a0:6a:b5:85:42:23:23:7d:20:d0:5d:a2:b7:69: 74:32:6a:12:e3:a0:65:b2:44:36:22:ca:b6:a2:c2: 59:5c:6b:4b:3d:39:ad:b4:35:2b:02:7e:0e:d2:01: 59:f2:e6:85:93:3a:d1:89:a9:be:1d:9f:33:c5:4a: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E2:D9:14:7E:5E:F5:F7:AC:53:6D:6D:DA:09:2C:09:7D:11:FB:52 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-LZFH5e9fesU21t2gksCX0R-1I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.208.0/23 Signature Algorithm: sha256WithRSAEncryption 49:f9:9e:08:e3:96:c3:f3:52:1c:30:a7:30:72:04:7f:72:c0: 41:6d:78:e2:6e:cc:c5:06:22:2a:d8:39:2c:84:3c:cb:fe:c1: 2b:ed:fa:21:cd:2c:08:5e:c4:dc:a9:94:af:79:db:5e:b1:e2: 36:81:d0:14:43:c2:f9:6f:dd:97:b4:53:1f:11:53:d6:44:95: 48:b5:93:30:b3:23:cc:12:40:d8:7a:0b:65:fb:77:6d:26:15: fe:ce:7c:0c:b8:69:dc:8a:5c:84:4b:51:81:90:57:b3:c4:9f: c4:6d:4d:66:ab:81:33:cb:c6:13:84:af:97:88:25:5a:34:05: 1c:59:89:5e:39:9a:a8:0f:2e:e6:b8:88:5a:b6:25:7f:a2:b3: 9a:0e:97:76:bc:b5:0c:48:b9:b5:72:2c:bd:0f:5b:5c:36:1f: fd:15:66:e2:99:35:d4:01:01:f4:4c:1f:5f:de:ce:bc:fd:9b: d0:c4:2b:76:01:77:07:0c:bc:be:96:26:e5:1b:15:7a:9b:1f: b6:de:02:dc:6a:c4:e8:bf:6f:03:02:de:42:66:b1:7e:ec:20: 31:c6:49:6d:8f:08:b8:f2:1a:fd:5d:a0:e2:21:2e:b1:9c:63: 7b:0d:c8:04:30:d3:af:2d:35:82:81:e2:e5:1f:53:39:5c:17: 6c:de:4e:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGRTJEOTE0N0U1RUY1 RjdBQzUzNkQ2RERBMDkyQzA5N0QxMUZCNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3VhgcVHwZUPmNuGyubYmU6WzegkJI+h6gL8n+Tgz64tlMqKt7 r2ak4vTgiaPSuqk/BJqiTSetXIL/0B4sf0yqfoEgRfTpoSd4SYyp0Ceuvqr9jwwq vveG1dBGKb2YFJYofKdZmZCrLHjPMf3OIw3lgqVTxpNgDvq4XKIHmrlmfy38yMVA F6eoM72C1DdNiKHUXnmu4Mv3QS+vZPZ1Ly7Wj2Sb8Al1TWHP7+XO6mqSNAJCe7SQ DmZIp5HS6EG2TGjNjUegarWFQiMjfSDQXaK3aXQyahLjoGWyRDYiyraiwllca0s9 Oa20NSsCfg7SAVny5oWTOtGJqb4dnzPFSju7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUb+LZFH5e9fesU21t2gksCX0R+1IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ItTFpGSDVlOWZlc1UyMXQy Z2tzQ1gwUi0xSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6dAwDQYJKoZIhvcNAQELBQADggEBAEn5ngjjlsPzUhwwpzByBH9ywEFteOJuzMUG IirYOSyEPMv+wSvt+iHNLAhexNyplK95216x4jaB0BRDwvlv3Ze0Ux8RU9ZElUi1 kzCzI8wSQNh6C2X7d20mFf7OfAy4adyKXIRLUYGQV7PEn8RtTWargTPLxhOEr5eI JVo0BRxZiV45mqgPLua4iFq2JX+is5oOl3a8tQxIubVyLL0PW1w2H/0VZuKZNdQB AfRMH1/ezrz9m9DEK3YBdwcMvL6WJuUbFXqbH7beAtxqxOi/bwMC3kJmsX7sIDHG SW2PCLjyGv1doOIhLrGcY3sNyAQw068tNYKB4uUfUzlcF2zeTqg= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org