$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dCXC6Mr2XBnIV-Sx4PCiAGL8x3k.roa File: dCXC6Mr2XBnIV-Sx4PCiAGL8x3k.roa (raw, json) Hash identifier: nr3Bns3zUT9sWwtw9qNYKVK5TXb1WTPq1F19AsMjYzc= Subject key identifier: 74:25:C2:E8:CA:F6:5C:19:C8:57:E4:B1:E0:F0:A2:00:62:FC:C7:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3073 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dCXC6Mr2XBnIV-Sx4PCiAGL8x3k.roa Signing time: Mon 26 Aug 2024 05:29:28 +0000 ROA not before: Mon 26 Aug 2024 05:29:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12403 (0x3073) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7425C2E8CAF65C19C857E4B1E0F0A20062FCC779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:5b:6d:b4:15:55:da:99:c9:b1:af:ed:bd: 99:c8:36:2e:41:72:f6:e5:e8:04:67:a3:c3:78:08: 8f:1b:bf:11:81:fd:4c:2b:87:4c:b3:5a:34:28:c6: 3d:e2:ca:d6:9a:78:d8:1a:75:72:9f:ea:a9:4d:8d: 69:c5:5b:3a:82:69:b9:5f:91:3b:67:83:0d:16:1b: 1f:61:83:a4:bf:2c:d7:09:e9:a5:69:9d:d0:cf:40: 6e:66:ba:bf:e5:91:90:9d:68:64:f3:7a:cc:1a:fa: 64:ca:e0:66:7b:a2:05:0e:87:e1:c9:d2:15:82:e3: 20:2f:fa:ed:13:84:63:1a:9f:19:71:62:33:c4:ec: 8b:0e:8a:4b:73:3f:cd:22:62:8b:92:0a:36:70:c2: 07:56:8a:02:5e:35:c2:be:24:d5:ba:e3:26:b7:e1: 4e:93:06:d8:16:7a:16:59:8e:8b:23:d2:a9:52:88: b2:85:56:37:48:0c:fe:62:bc:eb:ff:64:85:f2:a3: 04:5d:a0:bc:80:74:71:28:b6:31:08:96:48:b0:90: 1e:b6:0d:c3:f9:3b:98:f6:7a:40:6e:67:6d:35:e1: c0:54:75:ae:9a:2f:22:10:b3:84:e7:d5:90:72:21: 09:81:ea:57:3f:67:bb:1c:5b:48:5f:84:9d:7c:8c: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:C2:E8:CA:F6:5C:19:C8:57:E4:B1:E0:F0:A2:00:62:FC:C7:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dCXC6Mr2XBnIV-Sx4PCiAGL8x3k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.112.0/22 Signature Algorithm: sha256WithRSAEncryption 03:f7:47:3e:df:de:bf:0f:ef:88:78:bf:09:9a:10:2c:92:c5: 02:25:2d:b5:c0:4e:d8:36:28:d1:19:b4:fc:c4:73:9b:6e:91: 25:46:a1:07:75:e6:32:46:9d:6a:94:7b:62:f9:a8:06:63:08: c5:23:c8:aa:e1:5a:70:ff:b4:1d:90:71:01:c9:63:19:fd:ef: df:3e:b3:68:b3:b0:6e:b7:db:2b:92:8f:48:e2:f9:63:8a:cc: 14:64:cc:0c:68:a5:90:95:8b:fb:a6:1f:69:ce:1c:ca:4b:42: eb:3f:d0:de:d0:4a:d4:68:b0:16:8f:29:75:ad:61:9d:59:3f: 01:0e:1a:32:0b:28:75:2c:a3:21:51:e6:bf:bd:62:78:c8:57: 16:bc:5f:88:56:99:3e:af:12:77:3e:b3:8a:b1:a1:a7:8f:63: 12:de:8d:a5:4f:81:ec:5a:82:d1:94:19:40:a7:91:c3:db:27: b3:df:ab:ce:2e:c3:34:de:eb:47:9f:d7:d9:6c:fc:41:4e:b0: 43:28:57:f7:84:28:cc:db:28:75:4d:9f:50:e9:be:e0:ee:4a: 6f:32:3f:80:ef:9b:1e:ee:8c:43:ec:5b:36:cb:4f:da:89:07: 39:c0:6b:3f:a8:37:dd:ea:a3:37:e0:11:a0:3c:ab:ba:66:e9: cb:a9:ab:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMHMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0MjVDMkU4Q0FGNjVD MTlDODU3RTRCMUUwRjBBMjAwNjJGQ0M3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTZltttBVV2pnJsa/tvZnINi5Bcvbl6ARno8N4CI8bvxGB/Uwr h0yzWjQoxj3iytaaeNgadXKf6qlNjWnFWzqCablfkTtngw0WGx9hg6S/LNcJ6aVp ndDPQG5mur/lkZCdaGTzeswa+mTK4GZ7ogUOh+HJ0hWC4yAv+u0ThGManxlxYjPE 7IsOiktzP80iYouSCjZwwgdWigJeNcK+JNW64ya34U6TBtgWehZZjosj0qlSiLKF VjdIDP5ivOv/ZIXyowRdoLyAdHEotjEIlkiwkB62DcP5O5j2ekBuZ2014cBUda6a LyIQs4Tn1ZByIQmB6lc/Z7scW0hfhJ18jKN5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdCXC6Mr2XBnIV+Sx4PCiAGL8x3kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RDWEM2TXIyWEJuSVYtU3g0 UENpQUdMOHgzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w3AwDQYJKoZIhvcNAQELBQADggEBAAP3Rz7f3r8P74h4vwmaECySxQIlLbXATtg2 KNEZtPzEc5tukSVGoQd15jJGnWqUe2L5qAZjCMUjyKrhWnD/tB2QcQHJYxn9798+ s2izsG632yuSj0ji+WOKzBRkzAxopZCVi/umH2nOHMpLQus/0N7QStRosBaPKXWt YZ1ZPwEOGjILKHUsoyFR5r+9YnjIVxa8X4hWmT6vEnc+s4qxoaePYxLejaVPgexa gtGUGUCnkcPbJ7Pfq84uwzTe60ef19ls/EFOsEMoV/eEKMzbKHVNn1DpvuDuSm8y P4Dvmx7ujEPsWzbLT9qJBznAaz+oN93qozfgEaA8q7pm6cupq60= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org