$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f1wMo1CkLPC5JCVoBk42xgrVZk4.roa File: f1wMo1CkLPC5JCVoBk42xgrVZk4.roa (raw, json) Hash identifier: nLGRPxHqqpakkkh8AKRuLQsI6P1SSp/ETv0UFn8Rzxw= Subject key identifier: 7F:5C:0C:A3:50:A4:2C:F0:B9:24:25:68:06:4E:36:C6:0A:D5:66:4E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30F1 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f1wMo1CkLPC5JCVoBk42xgrVZk4.roa Signing time: Mon 26 Aug 2024 05:29:58 +0000 ROA not before: Mon 26 Aug 2024 05:29:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12529 (0x30f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7F5C0CA350A42CF0B9242568064E36C60AD5664E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:04:f1:43:82:e0:e1:d2:67:2c:22:7e:1a: b6:9a:a8:cd:ae:6e:a8:05:8f:4a:86:31:b9:af:38: ce:0d:08:f3:4c:45:91:26:7a:17:d0:33:6c:fa:c7: c7:bf:5b:1f:ed:46:1a:c3:ae:ff:b0:ab:42:b9:0d: 72:5b:75:61:01:a7:4b:d3:5c:fa:5e:37:f6:05:61: f8:02:9c:2a:fe:07:dc:12:b5:b6:07:49:8b:d0:79: 2e:b8:91:17:55:1c:49:4b:4f:4c:75:88:b2:0e:d0: ca:3f:30:be:ca:5d:d6:e6:a7:bb:67:6e:32:17:fb: d9:a2:d4:f5:5d:96:dc:22:91:ac:3b:7f:e1:df:46: 9d:e5:f5:d4:6f:b8:be:ef:d8:87:cb:ea:16:56:21: 58:82:f1:a6:2f:16:3d:94:a2:9a:ce:5b:74:a9:0a: 5a:fb:5c:00:b3:f3:25:77:e7:73:26:fb:d0:49:d2: 88:ef:8e:ef:2b:3f:60:fb:1c:83:92:3a:39:9d:26: f3:e3:4f:45:1b:50:80:ba:1b:7e:64:ae:6f:42:af: 23:7b:7b:d9:93:af:47:3b:37:bd:ce:84:bb:16:35: 35:82:8e:0c:c4:c7:6f:cd:b1:04:cf:ec:4a:dc:98: 68:8e:b4:7f:30:b7:74:59:f7:e4:1c:28:ee:b5:4d: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5C:0C:A3:50:A4:2C:F0:B9:24:25:68:06:4E:36:C6:0A:D5:66:4E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f1wMo1CkLPC5JCVoBk42xgrVZk4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.0/24 Signature Algorithm: sha256WithRSAEncryption 76:49:58:37:6b:7e:cd:e1:be:05:f3:3c:00:6a:ce:da:12:1c: 1b:74:31:00:fd:e9:ec:f5:7f:12:cc:66:52:1c:b8:04:5f:97: 53:cc:fb:83:a0:5e:e1:0f:45:dc:9a:7d:26:da:75:be:90:1d: 7e:34:ae:36:e2:48:36:92:90:bd:cd:94:17:c0:af:84:c1:e6: 6c:a3:ac:67:b4:3d:7f:77:72:cb:71:48:08:b7:24:32:e3:e7: f6:7a:a5:62:27:ac:6e:2e:a4:21:ac:d1:c8:5b:f9:89:38:da: 43:6f:c2:94:0b:cd:2a:09:cb:54:7f:5d:0c:67:56:45:27:bc: a8:d2:52:c0:33:46:2a:9c:6e:7d:a1:69:c2:14:79:dd:2a:60: e8:23:97:b7:57:fe:50:da:88:56:13:07:12:7b:84:ab:3f:52: 36:2e:7e:e5:e6:b1:18:e0:70:9d:28:53:4a:cf:d7:da:fd:ce: 1b:dc:35:93:b6:b5:d3:ee:12:82:17:3b:5f:35:c0:3b:61:16: 26:d6:9a:af:ea:7e:81:34:b1:73:79:6d:76:a1:4c:12:aa:b4: 5f:bc:64:98:ba:94:56:c7:d9:95:45:48:3f:7a:0a:ff:3c:95: 3d:7a:df:6b:33:8b:bf:bd:c9:33:ab:a7:32:52:cc:7f:a9:89: b5:0f:2b:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdGNUMwQ0EzNTBBNDJD RjBCOTI0MjU2ODA2NEUzNkM2MEFENTY2NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUWQTxQ4Lg4dJnLCJ+GraaqM2ubqgFj0qGMbmvOM4NCPNMRZEm ehfQM2z6x8e/Wx/tRhrDrv+wq0K5DXJbdWEBp0vTXPpeN/YFYfgCnCr+B9wStbYH SYvQeS64kRdVHElLT0x1iLIO0Mo/ML7KXdbmp7tnbjIX+9mi1PVdltwikaw7f+Hf Rp3l9dRvuL7v2IfL6hZWIViC8aYvFj2UoprOW3SpClr7XACz8yV353Mm+9BJ0ojv ju8rP2D7HIOSOjmdJvPjT0UbUIC6G35krm9CryN7e9mTr0c7N73OhLsWNTWCjgzE x2/NsQTP7ErcmGiOtH8wt3RZ9+QcKO61Taa/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUf1wMo1CkLPC5JCVoBk42xgrVZk4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Yxd01vMUNrTFBDNUpDVm9C azQyeGdyVlprNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w+4wDQYJKoZIhvcNAQELBQADggEBAHZJWDdrfs3hvgXzPABqztoSHBt0MQD96ez1 fxLMZlIcuARfl1PM+4OgXuEPRdyafSbadb6QHX40rjbiSDaSkL3NlBfAr4TB5myj rGe0PX93cstxSAi3JDLj5/Z6pWInrG4upCGs0chb+Yk42kNvwpQLzSoJy1R/XQxn VkUnvKjSUsAzRiqcbn2hacIUed0qYOgjl7dX/lDaiFYTBxJ7hKs/UjYufuXmsRjg cJ0oU0rP19r9zhvcNZO2tdPuEoIXO181wDthFibWmq/qfoE0sXN5bXahTBKqtF+8 ZJi6lFbH2ZVFSD96Cv88lT1632szi7+9yTOrpzJSzH+pibUPK54= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org