$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJCWoJlA1IstYmU-pnDFcAwcZd8.roa File: hJCWoJlA1IstYmU-pnDFcAwcZd8.roa (raw, json) Hash identifier: YMcXO+hk5iPuWpfk+19i7hFWPx0ocMBqCCZmGwh/8+s= Subject key identifier: 84:90:96:A0:99:40:D4:8B:2D:62:65:3E:A6:70:C5:70:0C:1C:65:DF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3138 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJCWoJlA1IstYmU-pnDFcAwcZd8.roa Signing time: Mon 26 Aug 2024 05:30:14 +0000 ROA not before: Mon 26 Aug 2024 05:30:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12600 (0x3138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=849096A09940D48B2D62653EA670C5700C1C65DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:e8:cd:2e:69:fd:98:3b:a5:09:c3:fa:bd: 7e:56:59:8c:cf:f4:d6:e5:75:ab:d1:69:9b:4c:42: fb:89:a5:48:3c:62:b8:4b:69:4f:c7:83:d7:e7:7e: 25:e0:11:ab:ec:fc:80:e7:ac:f4:3a:0e:59:98:76: b0:cb:7f:9e:62:02:f1:17:5b:00:81:80:3a:74:65: b2:9e:d5:97:9a:5d:bd:65:41:e8:9c:4d:d7:8c:fb: 81:b4:4a:2d:f7:6b:5b:5d:52:13:87:1c:7f:6c:d3: e1:62:71:21:0d:fb:75:a7:2c:62:83:f6:1a:ea:e3: 16:d4:ad:bd:3c:c2:83:cb:66:d4:94:47:ef:39:bd: 52:41:10:b6:be:af:25:fd:91:c1:ed:a0:92:25:2c: f0:9b:63:d4:00:05:16:71:60:b9:8b:70:68:d5:dd: ac:a9:6e:29:fd:b3:f8:cf:04:14:eb:79:06:04:fa: 4f:b3:63:3d:1f:8f:9e:f5:75:51:6b:4a:ec:7d:28: e2:c2:41:c8:e4:4f:d3:ef:25:26:a4:af:1b:dc:3a: e7:77:17:6c:88:54:c3:8f:b9:cf:df:1f:c4:6e:a4: 48:36:fe:85:2c:47:73:93:5c:d2:05:a1:58:a2:48: 70:32:ee:73:fa:86:69:2f:54:06:ce:f0:01:c5:d6: 41:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:90:96:A0:99:40:D4:8B:2D:62:65:3E:A6:70:C5:70:0C:1C:65:DF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJCWoJlA1IstYmU-pnDFcAwcZd8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.188.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:e8:d5:a8:6a:3a:11:c0:c8:fb:fa:1c:3b:3b:60:7c:10:3c: cf:e8:92:67:15:42:e1:f5:e7:5d:77:de:96:c0:86:ba:7f:0e: cf:49:02:2d:a0:ab:80:91:60:a1:1a:a6:1b:7c:08:55:a3:10: 79:ec:7f:48:53:6d:cb:4d:21:80:5c:ce:f5:c8:6c:a2:b6:1e: b8:e4:a7:8d:16:a0:85:27:cb:a8:9d:c6:ba:3e:e1:92:38:bd: 6a:eb:3d:bc:92:77:70:9b:37:4c:6a:1a:b3:c2:54:cd:22:8c: 56:34:58:f4:d3:90:30:dd:4f:34:37:dd:4c:8e:a1:63:a3:93: 55:0c:5d:87:2d:a9:0d:e8:97:98:4b:fd:27:96:8b:40:e7:2f: 7d:db:a1:25:49:aa:58:0c:0d:a5:3e:d4:ab:90:2a:cb:0a:58: 8c:3b:36:58:8a:c9:0e:ce:e8:64:52:1b:15:4d:ca:6f:19:1c: 7c:b6:1b:65:ca:df:f1:59:24:a0:6f:75:63:24:4f:02:90:1c: 2d:89:0a:76:67:50:57:3c:dc:ee:03:f0:20:bc:48:2c:e8:9a: 08:23:4f:e2:05:64:1c:37:80:d4:eb:de:16:7f:b0:51:03:4f: d6:22:f6:fc:c7:83:26:3d:a3:fa:65:1f:5f:35:9b:a9:2f:31: a0:0a:91:2a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0OTA5NkEwOTk0MEQ0 OEIyRDYyNjUzRUE2NzBDNTcwMEMxQzY1REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw+ejNLmn9mDulCcP6vX5WWYzP9NbldavRaZtMQvuJpUg8YrhL aU/Hg9fnfiXgEavs/IDnrPQ6DlmYdrDLf55iAvEXWwCBgDp0ZbKe1ZeaXb1lQeic TdeM+4G0Si33a1tdUhOHHH9s0+FicSEN+3WnLGKD9hrq4xbUrb08woPLZtSUR+85 vVJBELa+ryX9kcHtoJIlLPCbY9QABRZxYLmLcGjV3aypbin9s/jPBBTreQYE+k+z Yz0fj571dVFrSux9KOLCQcjkT9PvJSakrxvcOud3F2yIVMOPuc/fH8RupEg2/oUs R3OTXNIFoViiSHAy7nP6hmkvVAbO8AHF1kHhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhJCWoJlA1IstYmU+pnDFcAwcZd8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hKQ1dvSmxBMUlzdFltVS1w bkRGY0F3Y1pkOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wrwwDQYJKoZIhvcNAQELBQADggEBAFvo1ahqOhHAyPv6HDs7YHwQPM/okmcVQuH1 51133pbAhrp/Ds9JAi2gq4CRYKEapht8CFWjEHnsf0hTbctNIYBczvXIbKK2Hrjk p40WoIUny6idxro+4ZI4vWrrPbySd3CbN0xqGrPCVM0ijFY0WPTTkDDdTzQ33UyO oWOjk1UMXYctqQ3ol5hL/SeWi0DnL33boSVJqlgMDaU+1KuQKssKWIw7NliKyQ7O 6GRSGxVNym8ZHHy2G2XK3/FZJKBvdWMkTwKQHC2JCnZnUFc83O4D8CC8SCzomggj T+IFZBw3gNTr3hZ/sFEDT9Yi9vzHgyY9o/plH181m6kvMaAKkSo= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org