$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cT0ieypOoR5ePInJaYxBLDdUx5c.roa File: cT0ieypOoR5ePInJaYxBLDdUx5c.roa (raw, json) Hash identifier: aFkDyQJOfBH7Vto76NEt13wc03AzPpo0kojJD6p1ZmI= Subject key identifier: 71:3D:22:7B:2A:4E:A1:1E:5E:3C:89:C9:69:8C:41:2C:37:54:C7:97 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31E0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cT0ieypOoR5ePInJaYxBLDdUx5c.roa Signing time: Mon 26 Aug 2024 05:31:02 +0000 ROA not before: Mon 26 Aug 2024 05:31:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12768 (0x31e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=713D227B2A4EA11E5E3C89C9698C412C3754C797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:35:f9:f4:6b:01:28:f0:26:43:ea:e1:12:2c: a5:7a:32:a8:5c:d8:24:59:5a:d7:c1:a6:a1:c9:1f: 95:cc:66:89:2e:ed:31:43:43:22:1b:09:a7:a1:d5: 5b:db:68:83:b7:59:a5:e4:ee:1d:90:a6:50:66:15: e0:da:e0:2e:a8:67:a9:96:5d:23:bd:87:6f:3c:a6: 3b:6b:f5:df:e5:34:05:ac:a7:87:d8:75:8b:a8:27: 85:86:ae:2f:8c:61:78:a4:36:9b:72:89:3f:3e:4d: 5d:2f:0d:bb:cf:63:65:d4:2d:fe:6e:e7:3d:62:f0: 1c:94:8b:07:6b:9b:bc:be:72:6b:81:de:41:0a:db: 3b:f0:e6:ae:04:27:65:17:6f:06:93:ac:93:72:cc: 88:4e:80:2d:76:d9:05:c1:a0:6f:7b:e9:51:e8:f5: bc:0e:54:9e:4b:8b:71:51:73:a7:ae:32:a7:28:1c: fa:73:45:f2:d1:fb:b2:c9:0b:98:7e:4e:47:0f:b5: 27:5a:40:ad:ec:fc:53:b7:78:2e:31:f1:f7:5d:6c: 52:d5:89:88:01:ab:b9:18:71:ff:1c:26:70:87:5c: 91:dd:78:5c:4c:23:a7:dd:73:14:da:7a:c1:a9:90: 9e:ab:4d:6b:99:74:3a:c4:03:92:fc:00:83:5b:60: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:22:7B:2A:4E:A1:1E:5E:3C:89:C9:69:8C:41:2C:37:54:C7:97 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cT0ieypOoR5ePInJaYxBLDdUx5c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.0.0/21 Signature Algorithm: sha256WithRSAEncryption 84:84:2c:94:ef:c7:7d:27:32:d1:45:d4:69:09:b8:d8:d9:dd: 4f:0d:74:87:03:98:3e:c7:98:4c:dd:91:92:e3:78:39:13:13: 05:99:24:d8:03:f4:29:b6:cc:9f:35:28:ca:01:3c:b8:d9:b0: b2:a9:56:40:18:4b:9d:a7:48:cb:55:42:59:7c:1c:9a:be:6f: 73:34:fe:a5:ba:d1:15:4f:f8:7f:03:bb:c3:12:8e:cc:ff:66: 6f:f7:21:e0:f5:ee:47:dc:54:57:2d:7b:8a:77:ec:94:97:81: ac:7c:2d:14:06:04:7a:92:69:d9:32:aa:91:4d:30:b3:04:4b: 27:d5:f8:27:94:cb:38:f0:95:7c:53:21:67:dc:e2:93:0b:f8: 18:be:2d:67:b0:22:7d:c9:4c:97:3c:d4:0d:c1:12:90:43:70: 2d:8c:26:c8:28:6c:52:40:8e:69:4f:4e:48:95:00:6e:91:34: dc:05:eb:06:70:97:80:6a:65:59:94:d8:a7:50:a8:ac:50:23: 88:38:2e:eb:fe:f5:5b:7d:54:e6:0b:2f:0c:ed:36:ff:2a:a2: 2f:20:ed:4c:3b:aa:52:dc:03:16:2a:39:bc:4e:9b:0b:b8:68: e6:2e:cb:a0:f5:75:7c:73:57:11:ae:a9:3a:52:3f:f4:d4:17: 93:13:38:5c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxM0QyMjdCMkE0RUEx MUU1RTNDODlDOTY5OEM0MTJDMzc1NEM3OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpNfn0awEo8CZD6uESLKV6Mqhc2CRZWtfBpqHJH5XMZoku7TFD QyIbCaeh1VvbaIO3WaXk7h2QplBmFeDa4C6oZ6mWXSO9h288pjtr9d/lNAWsp4fY dYuoJ4WGri+MYXikNptyiT8+TV0vDbvPY2XULf5u5z1i8ByUiwdrm7y+cmuB3kEK 2zvw5q4EJ2UXbwaTrJNyzIhOgC122QXBoG976VHo9bwOVJ5Li3FRc6euMqcoHPpz RfLR+7LJC5h+TkcPtSdaQK3s/FO3eC4x8fddbFLViYgBq7kYcf8cJnCHXJHdeFxM I6fdcxTaesGpkJ6rTWuZdDrEA5L8AINbYEArAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcT0ieypOoR5ePInJaYxBLDdUx5cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NUMGlleXBPb1I1ZVBJbkph WXhCTERkVXg1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6QAwDQYJKoZIhvcNAQELBQADggEBAISELJTvx30nMtFF1GkJuNjZ3U8NdIcDmD7H mEzdkZLjeDkTEwWZJNgD9Cm2zJ81KMoBPLjZsLKpVkAYS52nSMtVQll8HJq+b3M0 /qW60RVP+H8Du8MSjsz/Zm/3IeD17kfcVFcte4p37JSXgax8LRQGBHqSadkyqpFN MLMESyfV+CeUyzjwlXxTIWfc4pML+Bi+LWewIn3JTJc81A3BEpBDcC2MJsgobFJA jmlPTkiVAG6RNNwF6wZwl4BqZVmU2KdQqKxQI4g4Luv+9Vt9VOYLLwztNv8qoi8g 7Uw7qlLcAxYqObxOmwu4aOYuy6D1dXxzVxGuqTpSP/TUF5MTOFw= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org