$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa File: hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa (raw, json) Hash identifier: bEywOnQzpocpuM8omRNJPc0OAb/QgdLSr9wVFztDUGs= Subject key identifier: 84:A6:49:EE:1E:31:CD:58:BF:00:C8:05:8C:87:F7:0F:C9:8A:11:98 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FFF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa Signing time: Mon 26 Aug 2024 05:29:02 +0000 ROA not before: Mon 26 Aug 2024 05:29:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12287 (0x2fff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=84A649EE1E31CD58BF00C8058C87F70FC98A1198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:cc:ba:00:75:8a:a4:62:86:f1:55:3a:11: 26:ea:69:c0:ca:e9:76:1b:c4:98:f9:9c:17:83:a4: b2:8b:45:d1:9a:6c:12:dd:fd:f0:49:8a:7e:11:82: 40:0b:6e:4e:ce:89:69:44:21:2f:57:27:31:6b:76: 7f:ef:3e:f1:27:f9:b9:b7:4c:20:d0:08:46:8e:d0: ae:32:35:1b:e4:2e:17:fd:4d:56:6b:48:09:29:1c: e4:4c:d5:53:f2:47:e4:a2:f2:98:e5:98:c7:f5:30: b5:b1:4d:4a:39:47:cf:a1:e4:eb:ba:0e:6e:cc:e2: 27:d6:b8:d5:fc:5b:44:c8:fb:48:32:7b:2a:73:c0: e8:69:4a:bf:03:76:a2:00:e0:3b:f9:9f:75:90:ea: 87:73:73:0e:e9:2e:0a:55:7d:db:8c:92:e2:11:ef: 8d:a4:4a:7d:4a:6d:c6:8d:31:dc:cf:00:32:bc:4a: e7:e7:79:36:c2:83:6f:fe:06:7b:64:96:3c:cb:c5: 24:6d:00:df:06:df:00:47:b6:11:b2:dd:e9:bd:f1: e2:c1:f4:0b:52:c8:57:c2:75:87:f7:9f:fb:15:7e: d5:b3:5f:de:79:ef:88:31:df:a8:f7:4e:57:f3:bd: ab:c5:67:89:de:66:33:17:bf:47:a0:00:ad:48:ca: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A6:49:EE:1E:31:CD:58:BF:00:C8:05:8C:87:F7:0F:C9:8A:11:98 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKZJ7h4xzVi_AMgFjIf3D8mKEZg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.64.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:73:3f:20:ca:a8:c9:98:f2:35:33:c0:bf:f5:82:14:f6:e3: c0:9d:6e:a4:06:7f:4b:53:cb:1a:83:f6:88:11:5d:e1:1c:b4: 77:c3:b4:ab:1b:3c:50:e2:3e:16:3f:79:a7:52:af:9f:e8:b2: bb:12:d2:f5:83:8d:f8:60:6e:35:fd:bc:d1:3e:79:c8:96:a2: 3d:cb:51:01:5c:21:5a:0b:8b:82:5c:f6:cf:0a:0a:a1:da:e0: f6:f1:c7:a9:93:3b:b6:1f:f9:17:bc:89:a5:f3:e1:df:69:7f: 5c:41:e8:a4:76:97:a4:e4:a7:eb:15:43:32:29:b4:d6:3c:0d: 4d:02:4a:f7:8d:16:e4:03:32:1c:a8:d0:46:93:21:5c:88:b2: 71:4e:e0:9a:96:cd:4e:6d:0b:46:e4:14:c2:db:73:b3:1e:ad: e5:3b:a3:c3:81:b0:1a:d2:d3:1f:4c:63:e7:c0:6c:71:1a:dc: 13:a6:fc:e2:e1:2e:3a:28:b5:8c:27:b6:a4:86:2d:d1:69:50: 10:ce:5d:d2:07:b1:35:8d:fd:db:78:b8:5a:28:92:aa:29:a4: 69:28:86:60:3b:73:7b:66:10:79:bf:8f:75:1b:d1:e7:d2:5c: c7:c3:66:07:f3:9e:ec:fc:14:49:a9:54:f8:77:f3:ad:39:04: 2b:a8:55:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0QTY0OUVFMUUzMUNE NThCRjAwQzgwNThDODdGNzBGQzk4QTExOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXh8y6AHWKpGKG8VU6ESbqacDK6XYbxJj5nBeDpLKLRdGabBLd /fBJin4RgkALbk7OiWlEIS9XJzFrdn/vPvEn+bm3TCDQCEaO0K4yNRvkLhf9TVZr SAkpHORM1VPyR+Si8pjlmMf1MLWxTUo5R8+h5Ou6Dm7M4ifWuNX8W0TI+0gyeypz wOhpSr8DdqIA4Dv5n3WQ6odzcw7pLgpVfduMkuIR742kSn1KbcaNMdzPADK8Sufn eTbCg2/+BntkljzLxSRtAN8G3wBHthGy3em98eLB9AtSyFfCdYf3n/sVftWzX955 74gx36j3TlfzvavFZ4neZjMXv0egAK1IyiXHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhKZJ7h4xzVi/AMgFjIf3D8mKEZgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hLWko3aDR4elZpX0FNZ0Zq SWYzRDhtS0VaZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wkAwDQYJKoZIhvcNAQELBQADggEBAEpzPyDKqMmY8jUzwL/1ghT248CdbqQGf0tT yxqD9ogRXeEctHfDtKsbPFDiPhY/eadSr5/osrsS0vWDjfhgbjX9vNE+eciWoj3L UQFcIVoLi4Jc9s8KCqHa4Pbxx6mTO7Yf+Re8iaXz4d9pf1xB6KR2l6Tkp+sVQzIp tNY8DU0CSveNFuQDMhyo0EaTIVyIsnFO4JqWzU5tC0bkFMLbc7MereU7o8OBsBrS 0x9MY+fAbHEa3BOm/OLhLjootYwntqSGLdFpUBDOXdIHsTWN/dt4uFookqoppGko hmA7c3tmEHm/j3Ub0efSXMfDZgfznuz8FEmpVPh38605BCuoVZc= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:57 2024 by rpki-client on console-fra.rpki-client.org