$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq7dSFHsqhpDhQpDbYf9zj3uDek.roa File: hq7dSFHsqhpDhQpDbYf9zj3uDek.roa (raw, json) Hash identifier: Atnnjt+ONG3kw8kpnn1drSQkop4cDlKCwC4OmZa/jeA= Subject key identifier: 86:AE:DD:48:51:EC:AA:1A:43:85:0A:43:6D:87:FD:CE:3D:EE:0D:E9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3048 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq7dSFHsqhpDhQpDbYf9zj3uDek.roa Signing time: Mon 26 Aug 2024 05:29:19 +0000 ROA not before: Mon 26 Aug 2024 05:29:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12360 (0x3048) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=86AEDD4851ECAA1A43850A436D87FDCE3DEE0DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:6e:51:70:00:a3:ca:d8:a7:ac:cd:61:7e: 87:02:36:be:ae:68:2f:4e:fd:94:ee:7a:14:49:08: a4:1f:28:07:df:29:13:64:1a:85:6a:af:80:54:2e: 02:c0:c2:6f:01:45:0e:7f:c0:6b:16:a4:5d:89:6b: f1:24:2f:79:b7:7c:65:4b:f4:ea:a1:83:bf:3e:71: 43:fb:9d:2a:c6:2a:e7:b6:f5:63:32:aa:44:2a:fe: 1d:19:08:9e:f7:dd:21:78:53:c9:77:4a:67:69:d9: 2d:26:0c:65:54:b6:8d:3e:d8:56:b5:29:5e:76:a9: 64:f4:5b:43:fc:58:22:50:0f:15:09:74:31:2d:0b: d1:36:1d:10:e7:6f:15:fd:4a:d1:b9:48:0a:56:af: 58:2b:74:b5:5a:ee:21:fb:54:29:d2:0d:b8:f4:ff: 94:ac:60:01:5c:de:79:06:11:3c:a8:44:cc:de:ba: e3:ca:01:00:b5:e8:db:a8:e5:9f:8d:22:b1:4d:84: 96:c7:34:c6:a1:8c:74:c6:0b:c0:0a:31:02:50:74: 3c:02:47:0e:49:f7:73:0a:06:8e:cd:94:e7:9f:12: 0d:76:1d:de:b0:b6:15:20:9f:4f:6b:13:3e:c4:ee: 92:e1:82:39:18:27:1a:c8:00:98:4e:85:3c:6b:4f: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AE:DD:48:51:EC:AA:1A:43:85:0A:43:6D:87:FD:CE:3D:EE:0D:E9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hq7dSFHsqhpDhQpDbYf9zj3uDek.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.140.0/22 Signature Algorithm: sha256WithRSAEncryption 25:e8:82:56:36:3c:66:e8:a0:5d:61:2a:38:06:77:1b:6f:27: 44:65:71:d4:c4:69:b6:e1:6d:3d:65:10:10:92:a3:d0:0d:45: 1e:74:99:ff:e4:62:91:99:a1:9e:04:40:05:bc:56:3e:ee:dd: a0:68:db:df:71:cf:d8:b4:d6:f8:33:e5:b7:2e:8a:1d:b9:59: 2b:fa:be:dc:a3:44:b7:46:e7:e3:6c:a4:76:a5:bb:10:d5:7d: ee:4e:63:86:77:bb:73:ff:e6:46:ff:ea:49:b0:65:b2:4b:c3: 8a:b4:68:dd:a1:0d:3f:ba:27:c5:77:29:b0:c4:ef:18:6f:c7: 4e:ee:84:fd:f3:f5:a9:0a:5c:e4:01:cf:e4:d9:99:6c:92:4e: 7a:c5:05:a1:4d:46:74:9e:ea:d4:8c:f4:46:46:13:d1:d3:f8: 76:74:6d:f2:e9:af:73:44:62:87:e9:90:6b:b9:b3:4c:43:11: 32:e5:95:24:1b:7e:dc:0b:70:6e:c3:c5:fc:22:ae:cf:16:db: 05:ac:02:f0:6e:7e:7c:0b:27:bb:2e:eb:71:72:34:de:98:b3: 9b:24:d9:44:df:9f:00:4c:6d:40:3f:fb:16:f8:c0:be:a3:ab: 3e:c7:f7:ae:a2:fd:3f:ea:de:95:f8:f9:e8:d4:17:20:86:5f: a1:a1:2b:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg2QUVERDQ4NTFFQ0FB MUE0Mzg1MEE0MzZEODdGRENFM0RFRTBERTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+xm5RcACjytinrM1hfocCNr6uaC9O/ZTuehRJCKQfKAffKRNk GoVqr4BULgLAwm8BRQ5/wGsWpF2Ja/EkL3m3fGVL9Oqhg78+cUP7nSrGKue29WMy qkQq/h0ZCJ733SF4U8l3Smdp2S0mDGVUto0+2Fa1KV52qWT0W0P8WCJQDxUJdDEt C9E2HRDnbxX9StG5SApWr1grdLVa7iH7VCnSDbj0/5SsYAFc3nkGETyoRMzeuuPK AQC16Nuo5Z+NIrFNhJbHNMahjHTGC8AKMQJQdDwCRw5J93MKBo7NlOefEg12Hd6w thUgn09rEz7E7pLhgjkYJxrIAJhOhTxrT8o/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhq7dSFHsqhpDhQpDbYf9zj3uDekwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hxN2RTRkhzcWhwRGhRcERi WWY5emozdURlay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq AYwwDQYJKoZIhvcNAQELBQADggEBACXoglY2PGbooF1hKjgGdxtvJ0RlcdTEabbh bT1lEBCSo9ANRR50mf/kYpGZoZ4EQAW8Vj7u3aBo299xz9i01vgz5bcuih25WSv6 vtyjRLdG5+NspHaluxDVfe5OY4Z3u3P/5kb/6kmwZbJLw4q0aN2hDT+6J8V3KbDE 7xhvx07uhP3z9akKXOQBz+TZmWySTnrFBaFNRnSe6tSM9EZGE9HT+HZ0bfLpr3NE YofpkGu5s0xDETLllSQbftwLcG7Dxfwirs8W2wWsAvBufnwLJ7su63FyNN6Ys5sk 2UTfnwBMbUA/+xb4wL6jqz7H966i/T/q3pX4+ejUFyCGX6GhK0I= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org