$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/csMMXfeBEBCF8scehDmPxS23BrQ.roa File: csMMXfeBEBCF8scehDmPxS23BrQ.roa (raw, json) Hash identifier: Nd25kKy2/u1eWKzoWYTvm73OpDCxyvWC2zuIjm5fW6c= Subject key identifier: 72:C3:0C:5D:F7:81:10:10:85:F2:C7:1E:84:39:8F:C5:2D:B7:06:B4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3227 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/csMMXfeBEBCF8scehDmPxS23BrQ.roa Signing time: Mon 26 Aug 2024 05:31:20 +0000 ROA not before: Mon 26 Aug 2024 05:31:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12839 (0x3227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=72C30C5DF781101085F2C71E84398FC52DB706B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:cb:03:47:7d:b5:af:18:ff:29:53:4a:0d: 5b:b1:06:db:e8:15:05:c7:84:a6:77:de:86:82:ce: e8:f2:2e:88:cc:8e:e2:97:b5:34:68:1a:e2:c4:53: 7a:ea:f6:06:8c:44:8a:25:b8:8e:5f:f7:b5:96:54: 0a:b7:61:97:f7:0c:b8:4f:e8:d0:fb:f6:9c:ae:88: 3d:2d:43:89:1f:1b:db:8e:dd:a4:4a:5e:74:b6:b1: c8:f1:13:cf:59:64:7c:12:9a:47:35:5d:16:6d:e7: 62:38:f2:d2:1d:39:e8:69:3a:e1:81:95:10:81:57: e6:84:9a:a5:b5:96:ea:2a:1e:f7:7b:4b:3f:9f:eb: 63:1b:12:b9:63:1c:4e:a5:8f:39:d5:d7:57:87:56: 7f:80:b1:96:1b:36:3f:76:ef:64:e8:f5:f9:cd:b5: 94:7e:61:fa:7e:39:4c:d0:1f:21:27:be:f0:11:62: 70:3a:3a:db:08:df:68:a5:88:d5:5d:c4:91:cd:39: c1:f2:0a:04:69:43:77:fb:c3:e2:13:87:03:87:e1: 7a:65:c2:95:cc:35:03:88:50:4f:b0:72:c9:92:03: d1:67:93:30:fd:3f:86:53:d2:47:c3:b7:6a:79:43: f8:36:ce:50:d2:ea:8a:88:d4:85:09:d1:23:39:4a: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:0C:5D:F7:81:10:10:85:F2:C7:1E:84:39:8F:C5:2D:B7:06:B4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/csMMXfeBEBCF8scehDmPxS23BrQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.170.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:6c:72:72:7a:9c:0b:78:ee:de:39:20:8e:92:91:a2:53:02: d1:f5:cf:3e:e9:94:d8:2c:8a:04:f0:73:c9:cb:c6:ea:d0:c5: 4a:c2:12:e2:c3:64:cd:d8:29:b8:d0:40:d8:f8:fb:60:fe:af: 4d:a6:ca:f6:07:bd:22:01:1b:21:63:0e:1d:1c:bf:dc:47:9d: 0e:60:83:3d:cd:9f:78:1c:7c:fa:ae:6e:f5:4a:dc:98:ec:e5: d9:f3:bd:e5:65:f4:52:09:d5:0f:e4:e4:7b:14:0c:3b:ea:8c: 71:6a:b3:ee:c4:56:1e:ff:24:cb:d3:41:6a:40:fb:38:47:37: ac:8c:ac:e8:fc:d4:8e:06:4d:4d:8b:c2:0a:94:e4:6f:86:ca: b7:ed:fc:01:02:3a:50:3a:49:bb:43:b3:36:e9:50:b9:6e:c5: dd:2e:fb:d2:00:82:d5:33:b1:c3:44:d3:f8:27:67:9a:13:3e: 0d:b7:e1:34:6c:2a:db:24:10:e0:91:5a:0d:b7:ce:f9:60:dd: 8a:b9:c8:9f:48:dc:73:0c:70:4b:50:9e:d9:ac:2d:b5:8f:ff: ee:3a:93:56:29:c8:bd:45:dd:00:4d:66:b0:6e:69:91:ba:b6: 8f:4b:b8:64:15:b4:d4:e6:19:b1:c1:73:bb:1d:de:4a:b0:03: 2f:ee:34:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyQzMwQzVERjc4MTEw MTA4NUYyQzcxRTg0Mzk4RkM1MkRCNzA2QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI4MsDR321rxj/KVNKDVuxBtvoFQXHhKZ33oaCzujyLojMjuKX tTRoGuLEU3rq9gaMRIoluI5f97WWVAq3YZf3DLhP6ND79pyuiD0tQ4kfG9uO3aRK XnS2scjxE89ZZHwSmkc1XRZt52I48tIdOehpOuGBlRCBV+aEmqW1luoqHvd7Sz+f 62MbErljHE6ljznV11eHVn+AsZYbNj9272To9fnNtZR+Yfp+OUzQHyEnvvARYnA6 OtsI32iliNVdxJHNOcHyCgRpQ3f7w+IThwOH4XplwpXMNQOIUE+wcsmSA9FnkzD9 P4ZT0kfDt2p5Q/g2zlDS6oqI1IUJ0SM5SnK1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcsMMXfeBEBCF8scehDmPxS23BrQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NzTU1YZmVCRUJDRjhzY2Vo RG1QeFMyM0JyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AaowDQYJKoZIhvcNAQELBQADggEBAItscnJ6nAt47t45II6SkaJTAtH1zz7plNgs igTwc8nLxurQxUrCEuLDZM3YKbjQQNj4+2D+r02myvYHvSIBGyFjDh0cv9xHnQ5g gz3Nn3gcfPqubvVK3Jjs5dnzveVl9FIJ1Q/k5HsUDDvqjHFqs+7EVh7/JMvTQWpA +zhHN6yMrOj81I4GTU2LwgqU5G+Gyrft/AECOlA6SbtDszbpULluxd0u+9IAgtUz scNE0/gnZ5oTPg234TRsKtskEOCRWg23zvlg3Yq5yJ9I3HMMcEtQntmsLbWP/+46 k1YpyL1F3QBNZrBuaZG6to9LuGQVtNTmGbHBc7sd3kqwAy/uNEU= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org