$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gWWGUUHZKIxEkjXf6S0FZX5UzcM.roa File: gWWGUUHZKIxEkjXf6S0FZX5UzcM.roa (raw, json) Hash identifier: 0agl3av6A64TLmYzK4DbMhNnLvixSjz7eHMN6dmEn4E= Subject key identifier: 81:65:86:51:41:D9:28:8C:44:92:35:DF:E9:2D:05:65:7E:54:CD:C3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32B0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gWWGUUHZKIxEkjXf6S0FZX5UzcM.roa Signing time: Mon 26 Aug 2024 05:31:54 +0000 ROA not before: Mon 26 Aug 2024 05:31:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12976 (0x32b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8165865141D9288C449235DFE92D05657E54CDC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:3f:6f:1f:5d:d4:75:47:b3:60:68:c2:fd: 93:d9:3c:cd:2d:31:93:b2:90:15:88:dc:4f:c0:8b: 1f:b2:1b:c4:2c:91:7d:33:9c:18:58:ee:cf:94:03: 77:da:cd:c6:96:27:0c:1c:2b:21:4a:51:bd:c3:1b: 21:4e:20:3d:5b:ee:38:85:75:77:5b:e8:ad:9e:61: 25:8c:93:01:66:1e:b9:22:24:51:36:19:50:77:b6: c0:70:43:a5:cb:b7:c2:de:ae:f4:32:5d:c3:bc:f7: 7b:72:65:66:89:3b:c2:7f:18:cd:cd:b7:d0:60:63: 6c:df:04:38:65:89:53:bf:55:1a:2e:e0:52:a1:1f: 53:05:02:78:c1:2b:b6:b4:4e:03:db:0b:24:0a:52: 19:cc:ca:7e:f7:59:25:4c:9c:e5:8c:06:13:ee:18: 3c:56:b6:68:58:78:3c:a1:da:95:18:22:24:05:c2: 64:13:98:00:5a:f4:4c:ce:77:f9:fd:92:12:4f:75: 7e:30:b0:90:73:ad:eb:8b:91:21:05:37:d4:c5:c8: 33:8c:72:e9:ce:ef:93:f2:e9:7e:e4:06:23:15:9b: ab:0b:ff:17:5c:e7:fb:e3:6b:61:d8:de:e6:c9:d5: 62:4f:8f:7d:55:e3:bb:a0:41:61:eb:b6:7f:b4:1e: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:65:86:51:41:D9:28:8C:44:92:35:DF:E9:2D:05:65:7E:54:CD:C3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gWWGUUHZKIxEkjXf6S0FZX5UzcM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.196.0/22 Signature Algorithm: sha256WithRSAEncryption 08:24:43:24:7a:03:83:3c:df:d0:d8:97:2c:83:1b:c0:44:94: 9b:77:c3:3d:b2:b5:33:69:3c:85:7b:28:0f:87:31:ed:45:fd: e8:1f:f0:9d:34:92:3e:24:95:97:2f:df:8c:47:ab:07:42:d5: 27:22:83:b8:a9:a3:96:2f:5f:d9:fc:e2:57:a1:21:c6:c8:f3: 62:f4:6e:ca:7f:e0:6d:a0:8d:0a:09:50:44:17:e7:8f:c0:b0: 06:dc:86:dc:fe:c3:e4:6b:47:25:c9:d7:de:20:07:40:38:77: 43:ae:15:ab:56:7a:8f:4c:e6:e9:13:7b:77:7b:97:35:dc:b5: 5e:da:99:b2:52:c4:41:f4:5e:ed:6a:03:8c:8f:2f:55:69:33: d9:9f:ed:18:a0:14:8a:4d:0f:c6:53:44:04:8a:fd:92:10:4b: 10:11:3f:75:43:6d:58:28:80:c1:c0:e7:fc:18:70:19:e5:ff: 93:7a:6e:5b:d6:a9:5d:85:15:96:bb:65:9f:00:22:8b:86:82: 30:95:f4:69:85:2a:05:ae:3c:3b:79:ff:83:33:fb:b4:77:4d: b0:44:4a:79:ce:72:c3:1e:58:b2:84:85:1a:60:a1:48:45:c1: 42:63:7c:10:78:eb:30:33:01:2a:47:a7:14:cd:0a:ac:97:4a: a0:0c:c3:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxNjU4NjUxNDFEOTI4 OEM0NDkyMzVERkU5MkQwNTY1N0U1NENEQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqIj9vH13UdUezYGjC/ZPZPM0tMZOykBWI3E/Aix+yG8QskX0z nBhY7s+UA3fazcaWJwwcKyFKUb3DGyFOID1b7jiFdXdb6K2eYSWMkwFmHrkiJFE2 GVB3tsBwQ6XLt8LervQyXcO893tyZWaJO8J/GM3Nt9BgY2zfBDhliVO/VRou4FKh H1MFAnjBK7a0TgPbCyQKUhnMyn73WSVMnOWMBhPuGDxWtmhYeDyh2pUYIiQFwmQT mABa9EzOd/n9khJPdX4wsJBzreuLkSEFN9TFyDOMcunO75Py6X7kBiMVm6sL/xdc 5/vja2HY3ubJ1WJPj31V47ugQWHrtn+0Hs/RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgWWGUUHZKIxEkjXf6S0FZX5UzcMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dXV0dVVUhaS0l4RWtqWGY2 UzBGWlg1VXpjTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wsQwDQYJKoZIhvcNAQELBQADggEBAAgkQyR6A4M839DYlyyDG8BElJt3wz2ytTNp PIV7KA+HMe1F/egf8J00kj4klZcv34xHqwdC1Scig7ipo5YvX9n84lehIcbI82L0 bsp/4G2gjQoJUEQX54/AsAbchtz+w+RrRyXJ194gB0A4d0OuFatWeo9M5ukTe3d7 lzXctV7ambJSxEH0Xu1qA4yPL1VpM9mf7RigFIpND8ZTRASK/ZIQSxARP3VDbVgo gMHA5/wYcBnl/5N6blvWqV2FFZa7ZZ8AIouGgjCV9GmFKgWuPDt5/4Mz+7R3TbBE SnnOcsMeWLKEhRpgoUhFwUJjfBB46zAzASpHpxTNCqyXSqAMwzQ= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org