$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eQKcdV3DEKH52rYQ3-VyNVe0MvI.roa File: eQKcdV3DEKH52rYQ3-VyNVe0MvI.roa (raw, json) Hash identifier: IRwT2s1YOvWBJZhO6ofwgsjx7VBRA9vY0gt6FOS8jBs= Subject key identifier: 79:02:9C:75:5D:C3:10:A1:F9:DA:B6:10:DF:E5:72:35:57:B4:32:F2 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32E7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eQKcdV3DEKH52rYQ3-VyNVe0MvI.roa Signing time: Mon 26 Aug 2024 05:32:07 +0000 ROA not before: Mon 26 Aug 2024 05:32:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13031 (0x32e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=79029C755DC310A1F9DAB610DFE5723557B432F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:f9:2f:ab:c5:2e:d3:af:fc:76:bc:97:bc: 6d:a6:0e:44:e7:17:45:57:48:4d:e5:bf:2a:46:2f: 64:2c:31:d3:84:51:40:ae:a2:3a:6e:f0:a5:bd:b1: f0:24:46:33:46:f0:41:93:89:33:b0:d8:e7:bd:d9: 3c:a2:f2:10:25:ac:9a:b9:f0:13:db:9f:57:c0:db: 33:9c:09:66:04:b0:2d:71:9f:e8:26:7e:04:0c:c4: 6f:91:01:f2:56:8f:b8:01:fb:c0:74:f5:b6:19:b8: 64:d9:ec:a5:3e:9c:cd:c6:3b:40:04:55:48:2e:ec: cf:5a:d5:cc:fb:d2:b9:33:dd:19:ee:30:5c:bb:82: a1:92:8e:b8:c3:3c:e1:40:5d:44:2c:7f:42:2b:e4: 4b:f1:e9:38:3e:7f:92:04:a7:04:a2:c2:71:04:e6: 74:e8:d4:19:67:a0:c6:f5:f9:0c:dd:4e:7c:ad:d1: 44:64:0b:3c:c3:76:f3:d8:12:15:1b:66:bd:2b:2b: b1:0d:d1:c7:69:53:92:8b:66:7b:d0:ce:74:49:04: ba:38:e2:de:ab:ea:f4:37:bb:d1:a2:81:33:2a:ea: 35:d1:10:14:f3:36:7e:aa:61:8c:94:6f:55:bb:8b: f0:e2:94:4f:81:2a:ca:f3:42:e6:d6:e4:a2:8a:85: 53:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:02:9C:75:5D:C3:10:A1:F9:DA:B6:10:DF:E5:72:35:57:B4:32:F2 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eQKcdV3DEKH52rYQ3-VyNVe0MvI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.184.0/21 Signature Algorithm: sha256WithRSAEncryption b3:6b:5d:06:e6:f8:3d:eb:e7:38:42:34:a0:b5:ac:bf:c8:28: 17:56:b5:05:56:2a:62:dd:3b:40:37:25:91:11:be:ad:71:f3: 36:1a:76:43:ce:a0:fd:11:2d:f3:28:d0:b2:c6:d1:93:f2:b2: fe:fd:a5:6d:21:d5:a3:0e:e1:69:3b:b1:5e:ff:3f:fc:89:9b: d2:63:3a:0c:b0:36:e0:10:e0:1e:c9:29:4b:8e:9e:7c:4d:b6: 3d:05:df:85:8c:0a:75:1e:21:3e:37:1b:df:d4:65:cc:10:36: c3:83:69:44:75:06:16:6f:5e:2f:06:dc:55:50:5a:c0:88:60: 6a:f7:9d:6b:a6:01:9d:57:21:e2:2e:9b:69:fe:e2:55:d8:b7: 0b:b4:8a:0d:9a:77:5b:6b:f9:03:43:8d:c9:41:c9:d4:d2:30: 68:bd:00:54:90:27:4e:db:23:c4:7e:32:e6:0d:8a:98:38:a0: de:82:3a:78:37:80:8f:90:3e:d0:80:20:96:36:6c:d7:ac:33: 7d:c0:02:84:ce:c5:1e:00:6b:74:37:1e:e7:af:55:5c:7e:5a: 01:7f:c0:11:c5:3d:fb:ab:c5:05:c3:36:56:fd:58:b4:d9:bc: 10:80:69:4b:2a:f1:c6:ad:0d:11:a3:28:58:a9:4a:d4:d7:46: 62:53:51:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5MDI5Qzc1NURDMzEw QTFGOURBQjYxMERGRTU3MjM1NTdCNDMyRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCb/kvq8Uu06/8dryXvG2mDkTnF0VXSE3lvypGL2QsMdOEUUCu ojpu8KW9sfAkRjNG8EGTiTOw2Oe92Tyi8hAlrJq58BPbn1fA2zOcCWYEsC1xn+gm fgQMxG+RAfJWj7gB+8B09bYZuGTZ7KU+nM3GO0AEVUgu7M9a1cz70rkz3RnuMFy7 gqGSjrjDPOFAXUQsf0Ir5Evx6Tg+f5IEpwSiwnEE5nTo1BlnoMb1+QzdTnyt0URk CzzDdvPYEhUbZr0rK7EN0cdpU5KLZnvQznRJBLo44t6r6vQ3u9GigTMq6jXREBTz Nn6qYYyUb1W7i/DilE+BKsrzQubW5KKKhVM7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeQKcdV3DEKH52rYQ3+VyNVe0MvIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VRS2NkVjNERUtINTJyWVEz LVZ5TlZlME12SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wrgwDQYJKoZIhvcNAQELBQADggEBALNrXQbm+D3r5zhCNKC1rL/IKBdWtQVWKmLd O0A3JZERvq1x8zYadkPOoP0RLfMo0LLG0ZPysv79pW0h1aMO4Wk7sV7/P/yJm9Jj OgywNuAQ4B7JKUuOnnxNtj0F34WMCnUeIT43G9/UZcwQNsODaUR1BhZvXi8G3FVQ WsCIYGr3nWumAZ1XIeIum2n+4lXYtwu0ig2ad1tr+QNDjclBydTSMGi9AFSQJ07b I8R+MuYNipg4oN6COng3gI+QPtCAIJY2bNesM33AAoTOxR4Aa3Q3HuevVVx+WgF/ wBHFPfurxQXDNlb9WLTZvBCAaUsq8catDRGjKFipStTXRmJTUbg= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org