$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dSUOBspsnCypO7ReEBXa3mCM984.roa File: dSUOBspsnCypO7ReEBXa3mCM984.roa (raw, json) Hash identifier: W3TPwyhKPvVUb4ySsjN5h74Md5tfgXnP0NkR4atQkE0= Subject key identifier: 75:25:0E:06:CA:6C:9C:2C:A9:3B:B4:5E:10:15:DA:DE:60:8C:F7:CE Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 314A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dSUOBspsnCypO7ReEBXa3mCM984.roa Signing time: Mon 26 Aug 2024 05:30:19 +0000 ROA not before: Mon 26 Aug 2024 05:30:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12618 (0x314a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=75250E06CA6C9C2CA93BB45E1015DADE608CF7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f8:91:c4:33:34:e9:a8:8c:19:64:3c:3a:b3: 30:c3:ee:c3:aa:04:9e:7b:96:ba:87:73:04:7c:a6: 91:00:27:d8:db:4f:f3:b2:d7:97:4c:80:63:d8:e2: 2d:2d:db:57:cf:0e:d6:d2:30:3f:09:5a:cb:d2:8a: a7:f9:3a:d5:4a:5d:dd:d5:db:e3:34:fd:6e:14:fd: c6:0b:b8:f7:c2:fc:99:66:31:6c:32:f6:88:70:12: 5a:65:3b:ef:63:2f:02:3e:b3:9d:7e:38:b4:85:dd: 47:a9:24:05:7c:19:29:2f:c4:7b:ff:24:4a:e0:de: 87:5e:fe:6b:6e:9e:a3:ee:73:7d:9a:72:7b:3d:38: 6a:e1:e5:96:3b:42:a0:36:7c:24:34:8e:9d:4e:90: 55:84:4f:ba:d5:4a:7a:c1:78:e9:23:cd:b3:70:e5: 0f:01:01:fd:a4:4a:78:79:6e:53:4b:79:27:29:01: a9:a4:5b:de:5f:c0:f5:b7:b5:97:5e:b2:14:f8:c9: df:ea:34:f8:6a:30:b4:ba:e3:8c:4a:c8:44:2c:48: 78:cf:3a:c5:c3:06:36:30:a6:5a:c2:fc:d5:6e:e4: 79:bc:4c:c2:8d:17:51:67:5e:5b:90:85:6f:6f:32: 5e:a9:e5:ab:ee:9c:5c:d9:f2:3b:91:f9:02:12:fa: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:25:0E:06:CA:6C:9C:2C:A9:3B:B4:5E:10:15:DA:DE:60:8C:F7:CE X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dSUOBspsnCypO7ReEBXa3mCM984.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.245.0/24 Signature Algorithm: sha256WithRSAEncryption 21:38:0a:81:fe:c3:98:39:6e:a5:93:64:b1:db:ea:41:4e:fa: ba:ce:41:cd:6a:4d:39:d5:cb:a3:63:0a:ba:78:5d:a9:52:da: 4d:80:b9:33:04:2d:1a:99:f5:cb:82:d9:64:76:24:c1:9e:3e: fe:c4:90:83:30:da:8c:80:4a:71:52:ad:80:fa:9f:9b:f1:3e: 15:1b:12:8c:a3:d5:99:53:2a:69:68:94:d0:98:d4:7f:e8:82: ff:05:1c:c5:65:3a:d5:65:87:51:e1:90:77:13:35:92:e5:7d: d0:27:78:d6:d1:6e:9d:39:02:9e:d3:42:4e:7d:27:ec:64:5f: 41:b7:eb:c1:4c:83:62:c5:16:dd:56:64:52:b7:b6:4e:d4:9b: 50:d9:20:b0:60:61:3f:6a:bf:4b:cd:02:11:a1:53:89:5e:24: b4:0a:19:36:9c:da:16:75:1e:bb:0e:06:30:2b:c7:e6:ab:2a: 96:51:f2:30:80:98:61:43:50:6c:0b:24:62:cb:1f:c8:53:4e: 44:9f:30:be:06:f9:84:8e:f9:13:d8:01:23:b6:4f:2d:5d:a2: e0:b1:b4:9b:6a:7b:d9:79:aa:11:e0:7a:fb:1c:13:22:31:2a: 40:f5:03:47:36:ce:ee:64:92:55:9e:aa:9e:43:5f:0d:5c:85: af:be:92:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1MjUwRTA2Q0E2QzlD MkNBOTNCQjQ1RTEwMTVEQURFNjA4Q0Y3Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2+JHEMzTpqIwZZDw6szDD7sOqBJ57lrqHcwR8ppEAJ9jbT/Oy 15dMgGPY4i0t21fPDtbSMD8JWsvSiqf5OtVKXd3V2+M0/W4U/cYLuPfC/JlmMWwy 9ohwElplO+9jLwI+s51+OLSF3UepJAV8GSkvxHv/JErg3ode/mtunqPuc32acns9 OGrh5ZY7QqA2fCQ0jp1OkFWET7rVSnrBeOkjzbNw5Q8BAf2kSnh5blNLeScpAamk W95fwPW3tZdeshT4yd/qNPhqMLS644xKyEQsSHjPOsXDBjYwplrC/NVu5Hm8TMKN F1FnXluQhW9vMl6p5avunFzZ8juR+QIS+o69AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdSUOBspsnCypO7ReEBXa3mCM984wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RTVU9Cc3BzbkN5cE83UmVF QlhhM21DTTk4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6fUwDQYJKoZIhvcNAQELBQADggEBACE4CoH+w5g5bqWTZLHb6kFO+rrOQc1qTTnV y6NjCrp4XalS2k2AuTMELRqZ9cuC2WR2JMGePv7EkIMw2oyASnFSrYD6n5vxPhUb Eoyj1ZlTKmlolNCY1H/ogv8FHMVlOtVlh1HhkHcTNZLlfdAneNbRbp05Ap7TQk59 J+xkX0G368FMg2LFFt1WZFK3tk7Um1DZILBgYT9qv0vNAhGhU4leJLQKGTac2hZ1 HrsOBjArx+arKpZR8jCAmGFDUGwLJGLLH8hTTkSfML4G+YSO+RPYASO2Ty1douCx tJtqe9l5qhHgevscEyIxKkD1A0c2zu5kklWeqp5DXw1cha++koI= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org