$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g4C-q2jUhBEUCloTwtZtx3fM9OY.roa File: g4C-q2jUhBEUCloTwtZtx3fM9OY.roa (raw, json) Hash identifier: bKX0jYc6vlWU4CMqurqNeAgpjUPODLgjwONRoUQje5I= Subject key identifier: 83:80:BE:AB:68:D4:84:11:14:0A:5A:13:C2:D6:6D:C7:77:CC:F4:E6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31B4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g4C-q2jUhBEUCloTwtZtx3fM9OY.roa Signing time: Mon 26 Aug 2024 05:30:50 +0000 ROA not before: Mon 26 Aug 2024 05:30:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12724 (0x31b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8380BEAB68D48411140A5A13C2D66DC777CCF4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:a6:da:7f:f3:13:76:fa:24:94:53:fd:d3: 2e:2a:21:74:5b:f5:0b:5e:79:d1:70:ee:a1:eb:68: 59:45:2b:df:6c:8d:4c:01:6e:79:9c:3c:b0:c6:e5: b1:e1:60:a3:9a:c7:79:78:8d:f8:d7:2b:af:a6:df: df:01:d4:3e:e0:62:c2:d8:3b:84:3a:6c:58:b4:3e: d4:88:51:26:15:e4:f5:0f:08:b8:f0:7f:c5:c1:b9: f3:92:74:4e:45:2d:ff:43:6a:48:1b:99:bb:7e:c5: 43:52:a6:09:85:75:5b:06:2f:bf:e1:a1:e3:28:8b: 08:dd:8a:ff:82:c6:6b:75:ef:ff:59:88:2d:b1:a9: 8d:7e:f8:85:9f:9d:07:aa:36:26:9d:53:ad:c8:9c: 35:5f:09:84:c3:d7:37:b3:1d:8c:8d:3f:2e:e2:e8: b2:ac:52:a7:83:60:c6:a2:af:e5:0a:a4:44:8f:55: 46:a9:4d:39:b9:55:e3:87:5e:c8:99:ed:7f:7b:37: 46:f9:e6:40:21:ec:ee:63:a3:3e:d8:0f:44:9f:8c: d2:b9:76:3b:ca:0e:9d:59:67:97:f4:28:fa:27:93: 6c:5f:6c:ac:89:36:20:47:08:a9:a3:13:58:d4:57: d4:29:99:04:e9:59:0b:3e:10:69:18:23:98:63:db: 16:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:80:BE:AB:68:D4:84:11:14:0A:5A:13:C2:D6:6D:C7:77:CC:F4:E6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g4C-q2jUhBEUCloTwtZtx3fM9OY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.196.0/22 Signature Algorithm: sha256WithRSAEncryption 32:ad:a6:f7:3a:96:01:56:5d:ea:c0:1b:56:5e:5b:a1:8e:97: e1:3e:43:3c:50:a8:cc:9b:e4:8f:80:47:ee:e3:35:83:af:68: 39:fc:1b:b2:68:a3:3c:fa:98:56:b8:7b:94:5a:06:42:d4:05: 26:b4:6f:51:d0:f5:4a:ed:a5:63:6f:6d:e5:2b:9c:a3:9c:63: b3:d4:68:f4:8a:50:14:9e:3e:64:eb:83:c0:a7:6c:f4:b7:09: 65:a2:7b:a2:c9:69:f8:ea:5f:fb:f8:72:6d:83:cb:b2:87:7c: 75:de:0b:53:4b:5d:65:eb:7d:c9:fe:c6:9f:0d:05:97:d8:8d: 35:06:04:a6:e9:4a:58:4b:57:1a:45:d3:b5:94:bb:59:79:37: 79:fe:25:79:58:6e:53:73:c7:ba:fe:d3:60:df:36:f1:f5:2d: 1a:c5:98:21:5a:30:f6:94:a7:08:29:9b:0a:d2:19:56:25:1b: cc:ef:e0:a1:99:68:9b:d4:f3:b1:2f:d1:77:2b:53:5f:61:4f: 5c:60:d4:9d:42:d7:43:be:28:40:63:9c:be:b1:e5:18:a2:99: be:b0:11:2d:75:3a:0e:88:da:ed:6a:0e:dd:2c:26:6f:77:bd: 10:32:27:d0:ef:d0:2f:ae:ea:14:49:92:a3:c9:a0:d2:4b:55: 04:5d:49:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgzODBCRUFCNjhENDg0 MTExNDBBNUExM0MyRDY2REM3NzdDQ0Y0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrXqbaf/MTdvoklFP90y4qIXRb9QteedFw7qHraFlFK99sjUwB bnmcPLDG5bHhYKOax3l4jfjXK6+m398B1D7gYsLYO4Q6bFi0PtSIUSYV5PUPCLjw f8XBufOSdE5FLf9Dakgbmbt+xUNSpgmFdVsGL7/hoeMoiwjdiv+Cxmt17/9ZiC2x qY1++IWfnQeqNiadU63InDVfCYTD1zezHYyNPy7i6LKsUqeDYMair+UKpESPVUap TTm5VeOHXsiZ7X97N0b55kAh7O5joz7YD0SfjNK5djvKDp1ZZ5f0KPonk2xfbKyJ NiBHCKmjE1jUV9QpmQTpWQs+EGkYI5hj2xanAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUg4C+q2jUhBEUCloTwtZtx3fM9OYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2c0Qy1xMmpVaEJFVUNsb1R3 dFp0eDNmTTlPWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6cQwDQYJKoZIhvcNAQELBQADggEBADKtpvc6lgFWXerAG1ZeW6GOl+E+QzxQqMyb 5I+AR+7jNYOvaDn8G7Joozz6mFa4e5RaBkLUBSa0b1HQ9UrtpWNvbeUrnKOcY7PU aPSKUBSePmTrg8CnbPS3CWWie6LJafjqX/v4cm2Dy7KHfHXeC1NLXWXrfcn+xp8N BZfYjTUGBKbpSlhLVxpF07WUu1l5N3n+JXlYblNzx7r+02DfNvH1LRrFmCFaMPaU pwgpmwrSGVYlG8zv4KGZaJvU87Ev0XcrU19hT1xg1J1C10O+KEBjnL6x5Riimb6w ES11Og6I2u1qDt0sJm93vRAyJ9Dv0C+u6hRJkqPJoNJLVQRdSdM= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org