$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h4J2o6BRh9aY0HC0RdNq0EiNtPY.roa File: h4J2o6BRh9aY0HC0RdNq0EiNtPY.roa (raw, json) Hash identifier: /DQjBUZATmjBWbTUES/bWRJhDqtrFNWJoni7UhSMXqE= Subject key identifier: 87:82:76:A3:A0:51:87:D6:98:D0:70:B4:45:D3:6A:D0:48:8D:B4:F6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3049 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h4J2o6BRh9aY0HC0RdNq0EiNtPY.roa Signing time: Mon 26 Aug 2024 05:29:19 +0000 ROA not before: Mon 26 Aug 2024 05:29:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.195.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12361 (0x3049) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=878276A3A05187D698D070B445D36AD0488DB4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:ba:00:24:ab:3f:62:8a:dc:5d:70:35:72: 2c:9c:f4:30:84:3a:13:cb:bc:c0:c3:49:23:a1:01: 41:39:6b:43:9c:03:29:80:e4:91:f7:77:79:74:ac: eb:01:c5:c4:fc:06:b8:aa:57:f4:44:a2:7f:56:66: 91:4d:f0:65:4d:d7:21:0e:f1:18:13:48:6c:be:a4: b2:c1:e6:6b:e2:82:5b:bf:72:f3:95:90:e8:e8:bf: 7f:ed:9a:05:9e:fd:70:60:d8:f7:bf:ed:05:99:5b: bf:f8:23:a9:f7:9a:06:42:10:f3:c8:70:e0:1c:66: 7f:8d:2e:c5:5d:83:84:61:a0:a4:f9:91:7b:a0:27: f0:42:9d:02:1d:a7:44:22:e6:77:9d:3a:e8:09:78: ae:22:28:a0:d7:60:7a:66:52:8c:1b:9b:53:74:d6: dc:5f:30:99:22:77:91:a7:92:a3:cb:a5:b4:0b:d2: c9:60:8a:96:c3:6b:e2:5e:7c:1f:a3:d9:ae:fd:a0: ad:66:26:37:d6:a3:64:99:b6:9e:ff:74:f0:11:af: ef:0f:06:aa:d7:8c:05:20:a7:54:7c:5f:27:e1:bc: 2e:08:c6:3f:3d:8d:06:ae:b4:db:56:2f:84:52:57: cc:c0:38:c2:d0:1a:f0:88:cc:12:29:44:e0:11:77: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:82:76:A3:A0:51:87:D6:98:D0:70:B4:45:D3:6A:D0:48:8D:B4:F6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h4J2o6BRh9aY0HC0RdNq0EiNtPY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.28.0/22 Signature Algorithm: sha256WithRSAEncryption b5:fb:4f:78:bc:99:6b:60:ec:1b:b7:54:82:2c:0e:32:be:22: b8:33:da:22:f7:df:a8:f9:0b:e2:1d:96:04:f2:c3:a5:45:fb: 4a:0b:52:00:a5:3c:b4:5f:61:e1:79:e4:3c:40:3a:e0:9f:12: 18:3a:b0:95:c9:81:95:94:c8:ac:4d:6c:b8:47:a8:73:f6:48: ea:47:7e:e7:7a:3e:34:cb:76:8d:16:d9:4c:f4:00:1b:2b:07: 1a:63:cd:f6:08:9f:4b:9f:30:a6:9b:ef:b1:d2:e9:48:1f:b3: 5b:c0:cf:cb:30:df:b8:9d:03:4d:01:38:7e:b6:98:0e:71:a4: 54:b1:db:3d:b4:f9:f9:0f:79:37:ef:4b:fd:7c:a2:17:80:83: a4:09:be:ef:15:ca:3b:24:92:50:a3:83:c1:1b:ec:43:71:d2: b1:18:0b:b5:0a:2b:95:7f:26:ba:16:8d:b9:d7:48:9b:c5:a3: 0f:51:3b:b6:fc:05:e9:38:31:90:14:c6:88:11:d1:92:60:ee: 1e:d6:9a:12:61:ff:e9:65:72:f7:d0:75:44:31:b3:93:4f:e0: b3:8d:cb:d1:43:5b:20:41:b6:ba:eb:08:c3:6d:6e:48:56:48: 74:57:09:d7:9d:ef:4a:eb:5d:cd:8e:b4:c1:46:76:62:d0:12: c2:a0:78:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3ODI3NkEzQTA1MTg3 RDY5OEQwNzBCNDQ1RDM2QUQwNDg4REI0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVuLoAJKs/YorcXXA1ciyc9DCEOhPLvMDDSSOhAUE5a0OcAymA 5JH3d3l0rOsBxcT8BriqV/REon9WZpFN8GVN1yEO8RgTSGy+pLLB5mviglu/cvOV kOjov3/tmgWe/XBg2Pe/7QWZW7/4I6n3mgZCEPPIcOAcZn+NLsVdg4RhoKT5kXug J/BCnQIdp0Qi5nedOugJeK4iKKDXYHpmUowbm1N01txfMJkid5GnkqPLpbQL0slg ipbDa+JefB+j2a79oK1mJjfWo2SZtp7/dPARr+8PBqrXjAUgp1R8XyfhvC4Ixj89 jQautNtWL4RSV8zAOMLQGvCIzBIpROARd9vvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUh4J2o6BRh9aY0HC0RdNq0EiNtPYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2g0SjJvNkJSaDlhWTBIQzBS ZE5xMEVpTnRQWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wxwwDQYJKoZIhvcNAQELBQADggEBALX7T3i8mWtg7Bu3VIIsDjK+Irgz2iL336j5 C+IdlgTyw6VF+0oLUgClPLRfYeF55DxAOuCfEhg6sJXJgZWUyKxNbLhHqHP2SOpH fud6PjTLdo0W2Uz0ABsrBxpjzfYIn0ufMKab77HS6Ugfs1vAz8sw37idA00BOH62 mA5xpFSx2z20+fkPeTfvS/18oheAg6QJvu8VyjskklCjg8Eb7ENx0rEYC7UKK5V/ JroWjbnXSJvFow9RO7b8Bek4MZAUxogR0ZJg7h7WmhJh/+llcvfQdUQxs5NP4LON y9FDWyBBtrrrCMNtbkhWSHRXCded70rrXc2OtMFGdmLQEsKgeDc= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:21 2024 by rpki-client on console-ams.rpki-client.org