$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIdSgDH3OU2DbC12fL8YCkQvtLk.roa File: cIdSgDH3OU2DbC12fL8YCkQvtLk.roa (raw, json) Hash identifier: yK+bYnBFBTLXBQeLC9EX987z614MWJrwM3TB4DyTv7o= Subject key identifier: 70:87:52:80:31:F7:39:4D:83:6C:2D:76:7C:BF:18:0A:44:2F:B4:B9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 317E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIdSgDH3OU2DbC12fL8YCkQvtLk.roa Signing time: Mon 26 Aug 2024 05:30:31 +0000 ROA not before: Mon 26 Aug 2024 05:30:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12670 (0x317e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7087528031F7394D836C2D767CBF180A442FB4B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:f9:99:42:26:a2:fb:32:e8:f6:6c:8c:a0: 39:1b:55:6f:57:67:0b:2a:f9:39:7c:1d:52:1a:d7: 44:2b:bf:f5:4b:8c:39:06:77:ac:62:8f:3f:a4:56: fa:b3:b3:e0:5c:58:ea:7a:de:11:14:86:a0:25:aa: eb:2d:9f:50:5b:3e:c8:3d:5f:2b:7a:89:a5:35:57: e1:e6:54:2e:95:84:81:f7:77:da:d1:c9:8f:9b:8f: dc:d0:34:cf:07:1c:4e:f4:6b:24:94:ff:dd:c8:9c: 6c:1e:6a:a2:89:da:50:5c:b4:bb:a7:e4:02:5c:6b: db:65:79:16:7a:c6:2c:45:17:07:66:71:4a:9c:c8: 77:49:48:a6:ea:64:39:f1:e5:80:b3:cb:1e:ce:d8: 46:91:22:ea:d9:1f:5b:ba:0f:ea:d6:0f:be:35:33: 0d:67:89:7d:1e:57:b6:a0:e0:f4:c1:39:fc:fc:18: 65:71:19:d0:36:b3:1c:60:18:0f:d8:12:ff:89:9f: 8a:21:11:24:05:ab:58:25:29:15:e3:59:9c:9f:f2: 04:e9:7b:f3:44:49:66:4b:8d:93:1f:9d:f9:fc:c5: 5e:b1:da:3c:d8:a4:27:fa:76:06:7b:2b:bd:38:85: a4:42:bd:40:75:80:f7:5b:a1:03:f5:a4:35:e4:18: 65:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:87:52:80:31:F7:39:4D:83:6C:2D:76:7C:BF:18:0A:44:2F:B4:B9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cIdSgDH3OU2DbC12fL8YCkQvtLk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.159.0/24 Signature Algorithm: sha256WithRSAEncryption 57:ac:57:ba:c0:d3:62:ca:6b:0d:53:73:93:4c:b2:4a:f8:bb: 23:64:2f:a3:fe:64:b8:8e:9a:09:80:fa:b2:32:dd:87:84:c7: 3e:a7:5c:8a:3d:48:8f:6e:dd:e3:99:25:1e:26:7a:25:ed:1b: 3d:2a:c6:e2:19:34:4a:bc:d7:9b:82:8c:69:9f:a1:d1:6d:88: e4:39:dc:ef:84:3c:1b:df:63:53:1e:29:6a:d7:4f:12:eb:21: 32:cd:07:bc:ae:f6:30:15:be:32:ef:07:d8:be:9d:eb:aa:fe: c5:6b:d7:01:b8:93:d3:ac:61:79:38:4d:c6:55:14:20:13:24: e9:fe:82:14:6f:96:18:e1:d6:6a:d9:dd:93:8d:35:a6:87:42: d5:ce:c3:b5:3c:f7:d6:0a:40:93:10:82:1b:f0:41:04:a7:8d: e4:85:24:62:dd:a1:36:ae:78:6c:af:d2:21:2d:c6:5c:e3:88: d0:78:bd:28:21:2d:07:b2:54:98:79:0c:df:67:f2:95:c7:c0: da:5f:a5:ad:ae:5e:4e:e6:cb:e0:bb:83:03:49:7b:92:6a:70: f5:bf:70:b1:b9:2f:be:7d:ae:95:75:8e:61:a4:66:29:d6:9c: 8d:e7:ed:d7:6d:7a:45:90:e1:5d:85:51:3f:6b:e2:1d:5c:63: 17:0f:e4:3b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwODc1MjgwMzFGNzM5 NEQ4MzZDMkQ3NjdDQkYxODBBNDQyRkI0QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE2PmZQiai+zLo9myMoDkbVW9XZwsq+Tl8HVIa10Qrv/VLjDkG d6xijz+kVvqzs+BcWOp63hEUhqAlqustn1BbPsg9Xyt6iaU1V+HmVC6VhIH3d9rR yY+bj9zQNM8HHE70aySU/93InGweaqKJ2lBctLun5AJca9tleRZ6xixFFwdmcUqc yHdJSKbqZDnx5YCzyx7O2EaRIurZH1u6D+rWD741Mw1niX0eV7ag4PTBOfz8GGVx GdA2sxxgGA/YEv+Jn4ohESQFq1glKRXjWZyf8gTpe/NESWZLjZMfnfn8xV6x2jzY pCf6dgZ7K704haRCvUB1gPdboQP1pDXkGGU5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcIdSgDH3OU2DbC12fL8YCkQvtLkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NJZFNnREgzT1UyRGJDMTJm TDhZQ2tRdnRMay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wZ8wDQYJKoZIhvcNAQELBQADggEBAFesV7rA02LKaw1Tc5NMskr4uyNkL6P+ZLiO mgmA+rIy3YeExz6nXIo9SI9u3eOZJR4meiXtGz0qxuIZNEq815uCjGmfodFtiOQ5 3O+EPBvfY1MeKWrXTxLrITLNB7yu9jAVvjLvB9i+neuq/sVr1wG4k9OsYXk4TcZV FCATJOn+ghRvlhjh1mrZ3ZONNaaHQtXOw7U899YKQJMQghvwQQSnjeSFJGLdoTau eGyv0iEtxlzjiNB4vSghLQeyVJh5DN9n8pXHwNpfpa2uXk7my+C7gwNJe5JqcPW/ cLG5L759rpV1jmGkZinWnI3n7ddtekWQ4V2FUT9r4h1cYxcP5Ds= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org