$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f_T-im-D1ZCOY_PshGgXwNMAHwo.roa File: f_T-im-D1ZCOY_PshGgXwNMAHwo.roa (raw, json) Hash identifier: nIZ6S3oSE/VpJ4ZRQzfBgkQtNJEJgpdLFrsWIhjoMDY= Subject key identifier: 7F:F4:FE:8A:6F:83:D5:90:8E:63:F3:EC:84:68:17:C0:D3:00:1F:0A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3092 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f_T-im-D1ZCOY_PshGgXwNMAHwo.roa Signing time: Mon 26 Aug 2024 05:29:36 +0000 ROA not before: Mon 26 Aug 2024 05:29:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12434 (0x3092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7FF4FE8A6F83D5908E63F3EC846817C0D3001F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:ab:05:9a:09:4e:39:1b:71:77:45:b7:32: 33:d9:0f:83:bc:29:ed:9e:5f:64:ed:e8:ec:88:ff: 35:39:86:2a:94:0a:11:a3:1f:9a:2b:33:94:e4:4b: c3:04:63:7a:39:bd:86:1c:37:2e:6d:64:87:53:bd: 18:98:a8:c4:a1:ab:91:72:cd:3e:84:1c:46:cb:4a: b6:17:e2:38:a8:80:e5:e0:c6:ec:3e:f9:fe:f6:47: ab:11:e3:f8:ad:13:d5:84:aa:33:de:c7:c7:96:f3: dd:a0:61:76:6a:23:95:ba:2d:f3:08:30:10:28:3b: 57:14:0a:0e:55:39:d5:43:d4:18:ac:ea:42:e1:80: f6:7d:85:4e:a1:a0:8d:ca:8a:f9:bc:f3:0a:2f:e6: 91:41:7d:63:dd:47:14:e8:92:85:86:bb:e1:7e:e1: 10:49:70:6e:cf:c8:2f:7e:6b:c6:93:df:03:e0:ca: fa:ff:53:9e:aa:43:89:2b:48:f2:68:6e:47:49:e6: a1:d3:3b:d5:2b:67:7d:5f:0c:6d:be:84:b7:10:4c: c6:c3:09:1a:a7:c6:59:13:e5:d9:da:1e:bc:8f:a1: 96:16:72:e9:10:04:ac:0a:ed:0e:83:f7:8a:61:03: a3:f2:93:b7:c2:2d:63:2e:54:56:1e:b1:2f:ca:56: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F4:FE:8A:6F:83:D5:90:8E:63:F3:EC:84:68:17:C0:D3:00:1F:0A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f_T-im-D1ZCOY_PshGgXwNMAHwo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.144.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:de:99:30:b6:a1:96:30:7d:9f:9b:7b:fa:93:3b:f4:22:41: b9:a1:aa:47:0f:4c:c0:48:02:24:ed:cd:3e:8a:f2:80:42:86: 10:ee:26:01:14:cf:1e:5a:da:2c:98:13:94:0c:94:4f:e4:43: 0d:55:12:c7:02:a1:11:df:3b:f6:0d:0c:19:de:21:a4:67:6b: da:92:79:4f:18:c8:27:aa:a5:23:3a:e2:6d:f1:c3:4d:89:f2: bc:0e:0d:e2:c4:bb:51:c8:fc:6f:9d:07:c3:e1:8d:04:27:63: 4b:f3:3d:69:e1:f7:01:07:16:24:a2:71:fb:e6:58:82:38:f3: 29:c4:20:76:be:89:d1:8c:ba:23:75:f9:32:97:9d:94:26:e0: 31:8c:0c:0e:72:9e:0e:4c:c5:6e:f0:ed:34:5b:6d:d8:d5:61: e5:9d:ad:80:42:d5:2a:26:af:e8:87:92:d0:54:3c:6e:e6:4f: 17:ce:02:88:be:62:6d:5d:42:21:ba:fe:02:e3:4d:49:48:2e: 6f:d7:c8:87:e5:08:15:8f:c9:ce:7c:7e:3b:96:40:d7:5c:b4: 01:cb:ce:2d:71:ea:0f:53:86:db:e6:19:a1:68:97:a8:a1:09: fa:68:d8:38:06:d4:85:2b:b4:12:4c:2d:d5:1e:af:90:9e:67: 1a:4f:95:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdGRjRGRThBNkY4M0Q1 OTA4RTYzRjNFQzg0NjgxN0MwRDMwMDFGMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi1asFmglOORtxd0W3MjPZD4O8Ke2eX2Tt6OyI/zU5hiqUChGj H5orM5TkS8MEY3o5vYYcNy5tZIdTvRiYqMShq5FyzT6EHEbLSrYX4jiogOXgxuw+ +f72R6sR4/itE9WEqjPex8eW892gYXZqI5W6LfMIMBAoO1cUCg5VOdVD1Bis6kLh gPZ9hU6hoI3Kivm88wov5pFBfWPdRxTokoWGu+F+4RBJcG7PyC9+a8aT3wPgyvr/ U56qQ4krSPJobkdJ5qHTO9UrZ31fDG2+hLcQTMbDCRqnxlkT5dnaHryPoZYWcukQ BKwK7Q6D94phA6Pyk7fCLWMuVFYesS/KVvk1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUf/T+im+D1ZCOY/PshGgXwNMAHwowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZfVC1pbS1EMVpDT1lfUHNo R2dYd05NQUh3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wJAwDQYJKoZIhvcNAQELBQADggEBAA3emTC2oZYwfZ+be/qTO/QiQbmhqkcPTMBI AiTtzT6K8oBChhDuJgEUzx5a2iyYE5QMlE/kQw1VEscCoRHfO/YNDBneIaRna9qS eU8YyCeqpSM64m3xw02J8rwODeLEu1HI/G+dB8PhjQQnY0vzPWnh9wEHFiSicfvm WII48ynEIHa+idGMuiN1+TKXnZQm4DGMDA5yng5MxW7w7TRbbdjVYeWdrYBC1Som r+iHktBUPG7mTxfOAoi+Ym1dQiG6/gLjTUlILm/XyIflCBWPyc58fjuWQNdctAHL zi1x6g9ThtvmGaFol6ihCfpo2DgG1IUrtBJMLdUer5CeZxpPles= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org