$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa File: eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa (raw, json) Hash identifier: tGH/5nwiPu/WP3GiJc8GGVodGei3Qj2e1cVGd0cPtp4= Subject key identifier: 78:AF:63:84:46:2E:36:6D:CC:7B:47:08:02:6F:CA:AF:84:B9:2E:DD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3148 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa Signing time: Mon 26 Aug 2024 05:30:18 +0000 ROA not before: Mon 26 Aug 2024 05:30:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12616 (0x3148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=78AF6384462E366DCC7B4708026FCAAF84B92EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:83:4b:e6:28:c0:af:df:90:e2:11:7e:7e: 6b:d0:27:f6:09:8b:a9:e7:00:3d:89:b5:83:51:99: 5a:21:b3:cd:b0:05:46:c3:ac:0f:e8:75:3b:93:18: e3:5e:f4:a0:36:00:57:da:6d:6a:81:dd:6b:59:63: ce:37:89:e5:59:68:ac:90:46:b0:25:54:26:14:13: 48:eb:92:ed:9b:3a:89:37:c8:6e:78:0d:c3:74:8d: 19:37:c4:9d:fa:5c:ed:d2:f9:4e:60:8a:01:80:42: 16:51:3a:7a:54:03:80:05:dd:0c:a4:25:26:ea:4a: ec:dc:72:e0:9d:9e:df:8b:6a:b5:b2:3a:e7:78:5f: ea:de:21:92:62:d1:f8:54:70:0a:40:65:85:41:25: ea:dc:71:be:ec:7a:93:fa:4a:26:7f:00:61:f9:52: 66:96:bf:3c:b4:e8:a9:a7:87:c6:95:6e:59:00:d3: e2:cd:e6:a5:bc:7e:47:44:9b:ad:97:70:8d:6d:d0: 22:52:5a:cf:0c:c3:b7:ae:4b:db:5f:eb:b7:37:6f: 5c:60:52:3c:68:50:e7:cf:06:c8:31:0c:84:43:be: fa:ed:99:2e:df:47:20:08:ef:48:3d:22:67:a3:16: 78:36:c7:a5:d6:5d:e1:b1:70:37:62:cd:fe:37:b3: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AF:63:84:46:2E:36:6D:CC:7B:47:08:02:6F:CA:AF:84:B9:2E:DD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.160.0/19 Signature Algorithm: sha256WithRSAEncryption 68:6c:a3:b2:f3:39:47:0d:da:da:21:9f:c5:65:76:f5:ff:21: 4e:68:86:01:85:8b:8b:c3:d0:e6:3a:de:73:c4:65:51:07:dd: a6:cb:21:7f:35:bc:63:d9:8b:42:3d:10:1e:e2:63:8c:89:7f: b7:7f:54:2f:a6:a4:54:59:59:5a:87:d5:d7:8f:aa:f1:75:49: 96:29:a5:b9:e8:b6:db:1a:1c:70:0e:4f:26:94:06:2e:55:74: 62:cd:cf:a2:f1:35:38:54:31:f6:23:8b:68:5d:1d:e9:53:39: e6:b0:1a:f7:55:55:69:a6:4a:fb:3e:d1:f0:8c:ee:d3:f4:f1: 9e:eb:8b:ce:e4:61:bb:58:83:21:c0:10:9c:5e:da:37:c5:72: 96:6e:0e:ea:26:89:fa:f4:85:39:ac:17:48:88:69:55:a9:ce: c9:fd:9e:6e:c5:f4:04:ac:b0:21:bc:01:b7:68:24:b7:2a:e6: f8:38:4e:1b:90:fb:df:7f:9b:41:6a:e1:66:54:63:32:30:2d: f6:e2:1b:d0:65:3e:d1:72:bc:7b:38:98:43:f9:a0:53:e3:52: 45:c8:0e:f0:e9:8e:be:89:6b:fb:dd:43:60:49:04:2f:15:9d: dd:63:a4:e0:59:6b:ec:67:c2:f6:bf:f5:52:4d:a2:4d:bb:b7: e7:2c:98:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4QUY2Mzg0NDYyRTM2 NkRDQzdCNDcwODAyNkZDQUFGODRCOTJFREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV1INL5ijAr9+Q4hF+fmvQJ/YJi6nnAD2JtYNRmVohs82wBUbD rA/odTuTGONe9KA2AFfabWqB3WtZY843ieVZaKyQRrAlVCYUE0jrku2bOok3yG54 DcN0jRk3xJ36XO3S+U5gigGAQhZROnpUA4AF3QykJSbqSuzccuCdnt+LarWyOud4 X+reIZJi0fhUcApAZYVBJerccb7sepP6SiZ/AGH5UmaWvzy06Kmnh8aVblkA0+LN 5qW8fkdEm62XcI1t0CJSWs8Mw7euS9tf67c3b1xgUjxoUOfPBsgxDIRDvvrtmS7f RyAI70g9ImejFng2x6XWXeGxcDdizf43s29HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeK9jhEYuNm3Me0cIAm/Kr4S5Lt0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VLOWpoRVl1Tm0zTWUwY0lB bV9LcjRTNUx0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6KAwDQYJKoZIhvcNAQELBQADggEBAGhso7LzOUcN2tohn8VldvX/IU5ohgGFi4vD 0OY63nPEZVEH3abLIX81vGPZi0I9EB7iY4yJf7d/VC+mpFRZWVqH1dePqvF1SZYp pbnottsaHHAOTyaUBi5VdGLNz6LxNThUMfYji2hdHelTOeawGvdVVWmmSvs+0fCM 7tP08Z7ri87kYbtYgyHAEJxe2jfFcpZuDuomifr0hTmsF0iIaVWpzsn9nm7F9ASs sCG8AbdoJLcq5vg4ThuQ+99/m0Fq4WZUYzIwLfbiG9BlPtFyvHs4mEP5oFPjUkXI DvDpjr6Ja/vdQ2BJBC8Vnd1jpOBZa+xnwva/9VJNok27t+csmHs= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:21 2024 by rpki-client on console-ams.rpki-client.org