$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dUhw88CAzdtugdjJif4IBGAHShg.roa File: dUhw88CAzdtugdjJif4IBGAHShg.roa (raw, json) Hash identifier: /VUDLjzx16VFQjA43BSNHDGRgWOsyV9qGpCDTP58dMk= Subject key identifier: 75:48:70:F3:C0:80:CD:DB:6E:81:D8:C9:89:FE:08:04:60:07:4A:18 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3063 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dUhw88CAzdtugdjJif4IBGAHShg.roa Signing time: Mon 26 Aug 2024 05:29:24 +0000 ROA not before: Mon 26 Aug 2024 05:29:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12387 (0x3063) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=754870F3C080CDDB6E81D8C989FE080460074A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:16:ea:41:79:b2:08:2d:5f:ab:c1:67:bf: 71:e1:b8:89:67:66:e4:f7:63:43:b6:fe:2c:ce:0d: 47:33:84:dd:f6:02:84:1b:e4:fe:62:ac:3d:50:a0: b8:c8:47:ba:2b:c8:c3:e1:53:21:41:84:61:8b:b8: c4:07:a1:6d:09:8c:ea:c0:16:3d:65:50:08:6d:2f: c2:5b:8c:14:81:52:29:23:2f:af:0c:d5:50:18:7d: 53:9a:d2:21:22:12:e0:e1:e1:b0:0f:8a:c5:b8:d7: 3c:1f:58:8d:e4:dd:1a:1e:aa:ac:1b:a3:74:ad:68: 01:0a:37:c5:e8:3b:aa:6c:dc:2b:cc:e7:b2:c8:9f: 0d:5f:b1:44:0c:38:02:02:be:b0:40:62:4c:89:f3: f0:89:f2:a0:23:74:27:6c:d7:eb:bb:05:8d:d4:48: cf:26:6e:89:71:06:f7:e2:7e:78:78:d5:8f:dd:72: 02:27:67:44:d0:4a:e7:04:6d:c0:97:bd:3c:72:f6: a2:aa:56:60:11:2a:28:61:bb:12:29:7a:ef:54:15: 57:a3:97:20:08:9b:59:e2:3a:f3:0e:3c:8b:bd:04: 34:78:18:5d:48:84:b0:df:8b:8d:18:8d:6e:f7:ea: 73:75:2d:dc:eb:b4:2f:65:0a:0a:eb:44:90:e7:33: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:48:70:F3:C0:80:CD:DB:6E:81:D8:C9:89:FE:08:04:60:07:4A:18 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dUhw88CAzdtugdjJif4IBGAHShg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.96.0/21 Signature Algorithm: sha256WithRSAEncryption a5:33:85:d1:2f:94:00:e8:ed:69:eb:8c:71:f8:07:57:aa:b4: 6a:f4:d7:64:37:ba:b6:16:03:ad:50:fe:fc:2c:38:2e:0a:66: b7:63:b5:91:cd:47:66:f0:39:4b:2c:37:93:ef:fd:53:d8:7d: e7:80:85:f5:19:2c:97:f7:d9:b6:76:e2:b4:49:7c:c6:8a:c9: 5b:8e:66:20:0b:57:fc:34:81:a6:3e:13:8c:fc:a3:64:3d:e0: 5b:36:1d:f7:f0:56:0e:e8:1e:07:88:be:68:82:f8:5e:95:0d: 9b:1e:ff:eb:71:bf:1d:c8:e8:d8:0c:00:2a:5f:00:0f:28:37: fb:c7:37:77:41:91:d0:d8:68:02:3e:3e:3a:f6:6c:7c:ff:e8: 33:24:cb:ec:57:8f:4a:62:f5:9d:ad:9e:37:cf:63:3d:cd:43: d1:8f:83:13:dc:00:19:91:0d:57:f1:76:12:89:c5:25:2a:89: 3f:a6:59:c7:39:a0:67:e5:36:9f:84:87:62:2b:01:21:d7:11: 8e:ca:cd:67:9c:a9:88:1c:ae:36:39:05:22:87:a7:78:3c:6f: f5:16:0a:26:b8:43:48:f3:bf:fb:16:76:35:6b:f4:ef:4c:a3: 6b:c7:9b:fd:e6:fb:1a:55:f1:66:d5:31:8c:ae:2e:98:83:27: 73:b4:9d:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1NDg3MEYzQzA4MENE REI2RTgxRDhDOTg5RkUwODA0NjAwNzRBMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4txbqQXmyCC1fq8Fnv3HhuIlnZuT3Y0O2/izODUczhN32AoQb 5P5irD1QoLjIR7oryMPhUyFBhGGLuMQHoW0JjOrAFj1lUAhtL8JbjBSBUikjL68M 1VAYfVOa0iEiEuDh4bAPisW41zwfWI3k3Roeqqwbo3StaAEKN8XoO6ps3CvM57LI nw1fsUQMOAICvrBAYkyJ8/CJ8qAjdCds1+u7BY3USM8mbolxBvfifnh41Y/dcgIn Z0TQSucEbcCXvTxy9qKqVmARKihhuxIpeu9UFVejlyAIm1niOvMOPIu9BDR4GF1I hLDfi40YjW736nN1LdzrtC9lCgrrRJDnM8yRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdUhw88CAzdtugdjJif4IBGAHShgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RVaHc4OENBemR0dWdkakpp ZjRJQkdBSFNoZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wmAwDQYJKoZIhvcNAQELBQADggEBAKUzhdEvlADo7WnrjHH4B1eqtGr012Q3urYW A61Q/vwsOC4KZrdjtZHNR2bwOUssN5Pv/VPYfeeAhfUZLJf32bZ24rRJfMaKyVuO ZiALV/w0gaY+E4z8o2Q94Fs2HffwVg7oHgeIvmiC+F6VDZse/+txvx3I6NgMACpf AA8oN/vHN3dBkdDYaAI+Pjr2bHz/6DMky+xXj0pi9Z2tnjfPYz3NQ9GPgxPcABmR DVfxdhKJxSUqiT+mWcc5oGflNp+Eh2IrASHXEY7KzWecqYgcrjY5BSKHp3g8b/UW Cia4Q0jzv/sWdjVr9O9Mo2vHm/3m+xpV8WbVMYyuLpiDJ3O0nRE= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:53 2024 by rpki-client on console-fra.rpki-client.org