$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b0EhI_7BMhozKiS6ICGJKK6Fmns.roa File: b0EhI_7BMhozKiS6ICGJKK6Fmns.roa (raw, json) Hash identifier: gBbf5IiCgjV3UfT6fk+HRRVLxKWGpKuGA4KTxWezaQI= Subject key identifier: 6F:41:21:23:FE:C1:32:1A:33:2A:24:BA:20:21:89:28:AE:85:9A:7B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30A2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b0EhI_7BMhozKiS6ICGJKK6Fmns.roa Signing time: Mon 26 Aug 2024 05:29:40 +0000 ROA not before: Mon 26 Aug 2024 05:29:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.8.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12450 (0x30a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6F412123FEC1321A332A24BA20218928AE859A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:b0:ad:db:18:50:9d:e0:80:22:80:ba:e4: 28:f3:7b:75:98:a9:1f:a3:9c:fc:b4:28:88:39:7b: fe:81:ce:47:3d:83:0f:e2:7e:ed:39:48:75:fe:0e: df:ec:ee:cd:57:a2:c1:3d:6a:2a:35:19:54:42:9c: 37:85:73:89:c6:53:2b:55:80:26:c6:e9:d2:a4:50: ea:c9:67:1f:60:cb:34:c1:7d:13:64:4d:15:3c:8f: 92:39:5a:ca:42:0e:13:60:28:50:05:4d:1b:b2:8e: e6:5d:3f:b4:fa:2e:94:11:a9:b8:f6:5a:5a:54:c9: 4d:ff:c9:92:98:6c:6d:2f:26:e5:95:89:05:4e:9c: 29:47:61:70:35:54:05:53:5e:e0:98:32:b2:af:18: 6d:b3:bb:d1:f0:ef:79:68:05:91:c5:ac:2d:9d:f7: be:34:d2:38:a6:8c:98:fe:24:21:f1:30:fc:c4:5c: 2d:44:ca:b1:f7:1a:f2:af:fd:52:ee:82:81:e4:d1: 0e:3b:ff:47:45:34:59:9c:fe:3e:db:f7:08:54:9b: 63:93:fa:3e:eb:fb:de:f3:ac:52:27:db:e0:a8:42: 95:0b:79:2e:ec:38:0c:e4:2e:47:48:fc:34:8b:2f: c0:26:b6:ab:b5:75:bd:85:a4:4a:dd:11:f3:cc:ce: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:21:23:FE:C1:32:1A:33:2A:24:BA:20:21:89:28:AE:85:9A:7B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b0EhI_7BMhozKiS6ICGJKK6Fmns.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.8.192/26 Signature Algorithm: sha256WithRSAEncryption ba:8a:54:3f:18:2e:c3:a6:82:2e:8c:5b:d3:16:a1:c7:cf:1e: ce:a9:de:a8:3f:44:7e:65:a7:93:dc:d6:ba:64:e3:16:7c:18: 9c:16:bc:d3:1b:bf:a5:e7:fa:69:3c:04:35:a3:36:c9:03:63: 44:73:77:e2:3e:2b:e4:25:2e:f0:67:0f:87:b6:fb:0a:63:d1: d0:b9:6e:22:a3:4d:c9:34:c3:08:53:5f:a1:00:05:3f:3b:2a: bc:af:d3:5b:d2:8c:85:0f:42:56:5e:98:76:ea:dc:54:6d:1c: 1e:d5:d1:07:91:07:be:72:e6:53:35:99:bc:b2:d0:82:fa:a6: db:76:83:5f:04:c2:33:18:79:14:e7:b6:8a:2b:d1:4c:12:f7: d1:d9:01:39:bd:ad:c1:d3:b3:3d:76:c0:05:7b:d7:f1:3e:d5: 56:72:6a:0f:3e:9d:03:f8:16:5e:c0:47:62:f5:c3:8d:0f:ed: a2:ab:35:1b:8f:0f:ff:0a:e3:e9:93:14:52:4d:5c:ab:94:af: 20:a4:b0:9d:3e:d2:0d:f8:30:a5:d8:d2:90:28:ec:34:2f:80: f5:86:24:0a:c6:c5:75:34:62:9a:97:4e:96:7c:35:e9:6b:a3: 77:89:b9:4d:93:c8:dd:2d:fd:ef:10:e5:ee:a2:77:31:4a:7d: c8:26:76:57 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGNDEyMTIzRkVDMTMy MUEzMzJBMjRCQTIwMjE4OTI4QUU4NTlBN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsP7Ct2xhQneCAIoC65Cjze3WYqR+jnPy0KIg5e/6Bzkc9gw/i fu05SHX+Dt/s7s1XosE9aio1GVRCnDeFc4nGUytVgCbG6dKkUOrJZx9gyzTBfRNk TRU8j5I5WspCDhNgKFAFTRuyjuZdP7T6LpQRqbj2WlpUyU3/yZKYbG0vJuWViQVO nClHYXA1VAVTXuCYMrKvGG2zu9Hw73loBZHFrC2d97400jimjJj+JCHxMPzEXC1E yrH3GvKv/VLugoHk0Q47/0dFNFmc/j7b9whUm2OT+j7r+97zrFIn2+CoQpULeS7s OAzkLkdI/DSLL8Amtqu1db2FpErdEfPMzjq1AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUb0EhI/7BMhozKiS6ICGJKK6FmnswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2IwRWhJXzdCTWhvektpUzZJ Q0dKS0s2Rm1ucy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7 wwjAMA0GCSqGSIb3DQEBCwUAA4IBAQC6ilQ/GC7DpoIujFvTFqHHzx7Oqd6oP0R+ ZaeT3Na6ZOMWfBicFrzTG7+l5/ppPAQ1ozbJA2NEc3fiPivkJS7wZw+HtvsKY9HQ uW4io03JNMMIU1+hAAU/Oyq8r9Nb0oyFD0JWXph26txUbRwe1dEHkQe+cuZTNZm8 stCC+qbbdoNfBMIzGHkU57aKK9FMEvfR2QE5va3B07M9dsAFe9fxPtVWcmoPPp0D +BZewEdi9cOND+2iqzUbjw//CuPpkxRSTVyrlK8gpLCdPtIN+DCl2NKQKOw0L4D1 hiQKxsV1NGKal06WfDXpa6N3iblNk8jdLf3vEOXuoncxSn3IJnZX -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org