$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gFDhDO-wEugeql_iQZfjl74bFQs.roa File: gFDhDO-wEugeql_iQZfjl74bFQs.roa (raw, json) Hash identifier: wwcH9MpCa8ENgtNT20YfnfUSYKJYsjKWL4xynMbMRl4= Subject key identifier: 80:50:E1:0C:EF:B0:12:E8:1E:AA:5F:E2:41:97:E3:97:BE:1B:15:0B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FD6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gFDhDO-wEugeql_iQZfjl74bFQs.roa Signing time: Mon 26 Aug 2024 05:28:53 +0000 ROA not before: Mon 26 Aug 2024 05:28:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12246 (0x2fd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8050E10CEFB012E81EAA5FE24197E397BE1B150B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:8f:b6:28:7e:35:c4:74:3b:09:fe:6a:e1: a7:ac:2d:51:c3:fb:59:19:86:e9:ee:ab:f8:d0:a4: 1a:82:34:3f:37:1c:f9:c9:dc:c6:73:98:e5:4e:71: b0:3c:63:dc:d4:68:69:0a:af:43:1e:48:ca:b8:a8: fc:cf:a8:a8:b7:2a:af:b0:3e:a6:0e:68:56:66:3c: c8:3e:ec:09:3a:32:2a:11:44:1a:3f:72:2f:18:6d: 2c:37:c8:7a:50:91:27:01:a1:a2:1a:34:4e:71:8a: c1:6c:72:8b:74:b5:25:83:0d:06:92:a1:b6:f3:7d: 69:11:9e:c9:4e:91:9c:5e:ee:8e:2b:56:ff:de:12: 6e:ae:39:b2:33:b5:56:23:4c:c9:33:3d:7a:75:f8: 57:7d:0c:43:30:f7:d8:3c:f7:61:38:fb:99:2f:be: 4b:3f:d8:26:ec:b5:af:99:df:f1:ae:bc:a4:43:e4: bc:a0:bd:3d:ea:7c:f4:dc:b2:08:24:13:84:bf:5d: cc:21:eb:1b:1a:25:d3:0b:7a:14:b0:15:f3:f1:89: c7:7a:2d:94:fa:34:10:ae:9b:1f:ea:c7:a1:ac:e8: b1:d1:93:ca:05:b8:bc:40:4d:0f:dc:7d:6a:57:e4: b5:c7:ea:7a:5f:b5:92:87:96:b6:2d:aa:fa:bb:48: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:E1:0C:EF:B0:12:E8:1E:AA:5F:E2:41:97:E3:97:BE:1B:15:0B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gFDhDO-wEugeql_iQZfjl74bFQs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.130.0/24 Signature Algorithm: sha256WithRSAEncryption 99:78:f9:16:c4:74:9c:3a:0f:16:fe:c7:77:f2:6c:41:02:b8: 54:a7:2d:8e:ef:da:86:27:6c:c9:ce:b5:74:0b:70:f9:20:e8: 89:c4:52:04:42:87:a9:49:6e:e1:ba:88:8f:17:48:d1:54:aa: ce:64:0e:6f:8c:34:9f:1f:80:8f:e4:72:b0:b5:ef:84:fd:00: c3:78:0b:e4:9e:b5:ef:8b:6b:25:c3:04:6a:84:ae:d7:d9:b1: 57:68:bc:3d:65:c7:6b:eb:c1:dd:a6:0a:d1:7c:16:f5:db:26: 06:8f:02:72:fd:00:48:0a:32:fb:c0:41:1e:dd:ca:1e:0d:36: 24:03:81:ed:7a:b8:28:bf:df:9c:28:12:69:6b:8c:e0:ce:50: ce:27:e7:f8:4c:c1:a0:eb:60:3d:c0:6f:f9:b8:73:c0:91:2e: 05:07:8f:84:b6:31:77:6f:60:2c:89:19:83:6b:50:49:59:77: ee:3e:b8:9c:0d:8f:8b:6f:91:29:a8:8c:bb:31:0a:e7:b2:27: 7e:39:e3:32:d8:18:d0:a5:c9:fe:eb:89:31:e2:9a:ac:fb:4b: 16:3f:30:f6:b2:c5:98:c3:8d:6b:32:f9:15:cc:ee:1f:08:93: 07:f5:27:21:5b:9f:1e:aa:dc:23:50:4c:f3:e0:95:f7:bc:42: 91:76:95:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwNTBFMTBDRUZCMDEy RTgxRUFBNUZFMjQxOTdFMzk3QkUxQjE1MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8k4+2KH41xHQ7Cf5q4aesLVHD+1kZhunuq/jQpBqCND83HPnJ 3MZzmOVOcbA8Y9zUaGkKr0MeSMq4qPzPqKi3Kq+wPqYOaFZmPMg+7Ak6MioRRBo/ ci8YbSw3yHpQkScBoaIaNE5xisFscot0tSWDDQaSobbzfWkRnslOkZxe7o4rVv/e Em6uObIztVYjTMkzPXp1+Fd9DEMw99g892E4+5kvvks/2Cbsta+Z3/GuvKRD5Lyg vT3qfPTcsggkE4S/Xcwh6xsaJdMLehSwFfPxicd6LZT6NBCumx/qx6Gs6LHRk8oF uLxATQ/cfWpX5LXH6npftZKHlrYtqvq7SBofAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgFDhDO+wEugeql/iQZfjl74bFQswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dGRGhETy13RXVnZXFsX2lR WmZqbDc0YkZRcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYIwDQYJKoZIhvcNAQELBQADggEBAJl4+RbEdJw6Dxb+x3fybEECuFSnLY7v2oYn bMnOtXQLcPkg6InEUgRCh6lJbuG6iI8XSNFUqs5kDm+MNJ8fgI/kcrC174T9AMN4 C+Sete+LayXDBGqErtfZsVdovD1lx2vrwd2mCtF8FvXbJgaPAnL9AEgKMvvAQR7d yh4NNiQDge16uCi/35woEmlrjODOUM4n5/hMwaDrYD3Ab/m4c8CRLgUHj4S2MXdv YCyJGYNrUElZd+4+uJwNj4tvkSmojLsxCueyJ3454zLYGNClyf7riTHimqz7SxY/ MPayxZjDjWsy+RXM7h8Ikwf1JyFbnx6q3CNQTPPglfe8QpF2lRg= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org