$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1fg7IYsUr2noqJf-aOXwi8VPFo.roa File: i1fg7IYsUr2noqJf-aOXwi8VPFo.roa (raw, json) Hash identifier: 5EwXfjYLOQKGO7yJC98ZgTHihldDJaCkECasJCOg+lo= Subject key identifier: 8B:57:E0:EC:86:2C:52:BD:A7:A2:A2:5F:F9:A3:97:C2:2F:15:3C:5A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FE7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1fg7IYsUr2noqJf-aOXwi8VPFo.roa Signing time: Mon 26 Aug 2024 05:28:58 +0000 ROA not before: Mon 26 Aug 2024 05:28:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12263 (0x2fe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8B57E0EC862C52BDA7A2A25FF9A397C22F153C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:82:fd:39:75:4a:cc:f6:12:79:c3:34:7d: 21:7b:fd:80:3c:d5:aa:f4:37:37:a8:a1:09:34:3a: d6:16:fe:8e:27:f7:93:e3:a9:14:f2:36:c7:1f:0e: 2b:02:f0:f5:50:ca:e7:78:48:a3:49:5b:65:29:cc: 27:64:be:d1:40:c1:ca:c8:19:4a:4d:30:91:13:88: 73:56:13:d5:f5:47:d2:f0:21:a6:78:0b:96:95:ac: 79:78:3b:53:48:f3:a0:61:78:6b:23:c7:99:3c:a8: c2:79:13:fe:0c:0e:98:19:04:8d:3f:d1:23:f2:82: 33:e7:e9:e3:84:20:79:e9:fc:1c:34:29:43:3d:69: 40:aa:b2:b4:09:a5:f4:0c:4e:ec:91:12:0f:87:5c: 5b:a9:e6:18:5d:53:6c:ed:b4:bc:1b:a3:21:25:c6: ed:8a:86:59:be:4b:83:89:84:13:a2:6e:07:56:22: 16:ce:ab:a4:50:41:04:06:2c:cf:c2:40:af:c7:15: fc:b8:fb:79:37:e3:3b:b6:43:b3:87:08:90:ae:cb: d0:02:aa:bd:1b:ed:f8:b3:2f:04:13:c3:cc:ba:5c: 5c:95:0d:39:e8:07:fc:e1:e6:95:5f:a6:21:37:93: d0:0e:ae:04:77:a9:02:83:6e:d9:51:f5:f1:98:e9: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:57:E0:EC:86:2C:52:BD:A7:A2:A2:5F:F9:A3:97:C2:2F:15:3C:5A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1fg7IYsUr2noqJf-aOXwi8VPFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.176.0/23 Signature Algorithm: sha256WithRSAEncryption a1:ff:0a:b0:c9:f0:6b:30:fb:9e:74:14:19:74:00:73:53:cd: 4b:98:c4:f2:84:0b:5f:c4:32:6f:57:30:ca:fe:79:35:04:86: 03:7c:9c:c8:a7:95:35:69:bd:e0:47:38:bf:00:0f:70:de:c6: 3b:b5:9c:1c:22:84:96:98:50:6b:2a:2d:ba:3a:77:9f:3b:00: 12:f1:5d:06:b3:ef:c1:66:bf:4a:2a:3c:0d:fe:d8:05:fa:1a: 3d:b1:62:41:b9:01:db:46:51:a6:22:0e:dd:c1:3d:6b:9c:aa: fb:71:c9:6c:33:fa:37:6e:4e:f7:ee:23:aa:bc:95:32:14:bd: 13:e3:5e:45:d7:2f:24:fd:44:b2:8f:48:37:6a:c7:ca:ef:89: 09:c6:b7:b5:3b:43:2b:03:ed:e9:7f:49:36:11:f5:eb:d8:45: 67:2f:6a:b6:4e:a4:e0:39:e2:82:64:bc:3a:32:b8:05:21:bf: 19:6a:37:6d:46:83:24:2c:6b:4b:ac:ac:8a:4f:b3:14:46:ab: 2e:ba:e0:e4:2c:c2:96:80:2d:c0:9e:f2:f7:06:72:25:58:66: 8f:a4:72:9d:c0:e9:69:b0:29:20:06:7e:7c:88:a6:fa:d4:08: 11:57:ee:0f:f5:a6:79:0f:c3:a0:95:93:ce:19:6f:5d:1c:e6: d1:16:d0:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCNTdFMEVDODYyQzUy QkRBN0EyQTI1RkY5QTM5N0MyMkYxNTNDNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/HoL9OXVKzPYSecM0fSF7/YA81ar0NzeooQk0OtYW/o4n95Pj qRTyNscfDisC8PVQyud4SKNJW2UpzCdkvtFAwcrIGUpNMJETiHNWE9X1R9LwIaZ4 C5aVrHl4O1NI86BheGsjx5k8qMJ5E/4MDpgZBI0/0SPygjPn6eOEIHnp/Bw0KUM9 aUCqsrQJpfQMTuyREg+HXFup5hhdU2zttLwboyElxu2Khlm+S4OJhBOibgdWIhbO q6RQQQQGLM/CQK/HFfy4+3k34zu2Q7OHCJCuy9ACqr0b7fizLwQTw8y6XFyVDTno B/zh5pVfpiE3k9AOrgR3qQKDbtlR9fGY6V/xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUi1fg7IYsUr2noqJf+aOXwi8VPFowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2kxZmc3SVlzVXIybm9xSmYt YU9Yd2k4VlBGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6bAwDQYJKoZIhvcNAQELBQADggEBAKH/CrDJ8Gsw+550FBl0AHNTzUuYxPKEC1/E Mm9XMMr+eTUEhgN8nMinlTVpveBHOL8AD3Dexju1nBwihJaYUGsqLbo6d587ABLx XQaz78Fmv0oqPA3+2AX6Gj2xYkG5AdtGUaYiDt3BPWucqvtxyWwz+jduTvfuI6q8 lTIUvRPjXkXXLyT9RLKPSDdqx8rviQnGt7U7QysD7el/STYR9evYRWcvarZOpOA5 4oJkvDoyuAUhvxlqN21GgyQsa0usrIpPsxRGqy664OQswpaALcCe8vcGciVYZo+k cp3A6WmwKSAGfnyIpvrUCBFX7g/1pnkPw6CVk84Zb10c5tEW0Ok= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org