$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ilfvH-U31TU0x4FyFK1JnhuYstk.roa File: ilfvH-U31TU0x4FyFK1JnhuYstk.roa (raw, json) Hash identifier: sAhVuPbEjFZWpO//4LQnHS7ljx9ePiW8/pVUAEbDEjA= Subject key identifier: 8A:57:EF:1F:E5:37:D5:35:34:C7:81:72:14:AD:49:9E:1B:98:B2:D9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FB3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ilfvH-U31TU0x4FyFK1JnhuYstk.roa Signing time: Mon 26 Aug 2024 05:28:46 +0000 ROA not before: Mon 26 Aug 2024 05:28:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.76.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12211 (0x2fb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8A57EF1FE537D53534C7817214AD499E1B98B2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:5a:43:58:ff:42:a5:5d:7d:eb:29:ef:2b: ae:21:a0:74:4d:02:5a:a9:fe:42:c8:8c:27:17:f6: 99:d3:34:76:c6:03:15:47:f8:f7:d2:2c:2a:d1:3d: 4c:da:1e:50:57:1d:7c:e0:c5:7e:be:63:a1:0e:91: 93:3f:16:70:ed:fd:d5:24:6e:e9:7e:46:58:3c:63: 59:19:36:5a:11:7b:a4:9b:42:76:c0:86:c4:26:ca: 24:33:d0:ce:2e:41:75:09:dc:34:d2:52:53:ed:bf: cd:31:98:32:b7:ff:6b:fb:ce:36:09:64:03:53:cf: b3:b6:00:fc:09:ea:df:56:42:88:4d:af:17:ae:67: 29:ee:97:ee:6c:7e:a6:b1:54:11:b1:19:a7:25:68: 90:6a:c3:80:69:29:25:50:a0:f1:22:02:f4:e5:50: 6c:f7:45:d8:d6:05:28:90:00:e9:82:85:b6:df:cb: 78:a8:0c:5d:73:be:06:f0:f6:6c:e1:0c:18:ec:c1: 69:67:b4:b0:86:e9:dc:ee:8f:21:3f:1f:92:45:64: 56:8c:53:cb:de:09:d7:dc:0e:7e:7c:81:f4:b6:6a: 7a:cc:d8:80:36:c0:f6:45:20:16:e1:c7:b4:9d:1a: 25:92:23:7d:92:31:a5:40:e6:d3:0a:fc:1d:d1:38: 25:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:EF:1F:E5:37:D5:35:34:C7:81:72:14:AD:49:9E:1B:98:B2:D9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ilfvH-U31TU0x4FyFK1JnhuYstk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.113.0/24 Signature Algorithm: sha256WithRSAEncryption 49:28:19:8f:f9:cc:00:bc:52:6d:fe:c2:ad:ab:b9:b2:e8:a2: 29:a0:f4:10:25:56:bb:1e:e8:8a:a4:d5:83:07:57:79:51:2b: 6f:22:42:ab:f9:89:26:e2:04:c9:70:65:14:e1:75:08:6c:c3: 93:dc:99:43:af:fa:53:0e:98:4c:73:26:5b:4e:09:b2:71:d2: 51:09:a9:34:de:64:f6:79:6f:80:66:24:6f:0c:e7:8f:30:18: 98:a3:46:38:58:9d:b8:85:7d:90:26:65:7b:80:1c:9f:34:fa: 01:18:e1:63:ae:94:bb:c4:33:a7:eb:3f:17:90:18:4d:e0:f3: f8:29:73:a9:c4:ea:31:e2:37:07:17:81:cf:61:ee:9b:82:71: 7f:e4:e8:18:b1:69:96:b0:a7:c8:d7:f9:59:46:81:21:0a:9d: 66:51:f1:5c:33:ef:c2:c6:2c:7c:22:ad:3a:40:30:b9:84:4a: 7e:7f:5c:91:10:09:62:76:d2:16:16:5b:ef:5e:93:bb:3f:77: f4:7e:13:1d:ea:1d:c4:1d:b2:99:b3:63:ca:4b:27:25:d1:e5: 4b:5b:ed:02:46:c4:97:7b:14:83:27:21:dc:92:f3:56:13:71: d8:c2:32:8a:b9:66:d4:5d:b9:15:cd:04:28:63:23:ad:d3:47: 4f:59:af:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhBNTdFRjFGRTUzN0Q1 MzUzNEM3ODE3MjE0QUQ0OTlFMUI5OEIyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCRllpDWP9CpV196ynvK64hoHRNAlqp/kLIjCcX9pnTNHbGAxVH +PfSLCrRPUzaHlBXHXzgxX6+Y6EOkZM/FnDt/dUkbul+Rlg8Y1kZNloRe6SbQnbA hsQmyiQz0M4uQXUJ3DTSUlPtv80xmDK3/2v7zjYJZANTz7O2APwJ6t9WQohNrxeu Zynul+5sfqaxVBGxGaclaJBqw4BpKSVQoPEiAvTlUGz3RdjWBSiQAOmChbbfy3io DF1zvgbw9mzhDBjswWlntLCG6dzujyE/H5JFZFaMU8veCdfcDn58gfS2anrM2IA2 wPZFIBbhx7SdGiWSI32SMaVA5tMK/B3ROCXtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUilfvH+U31TU0x4FyFK1JnhuYstkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lsZnZILVUzMVRVMHg0RnlG SzFKbmh1WXN0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THEwDQYJKoZIhvcNAQELBQADggEBAEkoGY/5zAC8Um3+wq2rubLooimg9BAlVrse 6Iqk1YMHV3lRK28iQqv5iSbiBMlwZRThdQhsw5PcmUOv+lMOmExzJltOCbJx0lEJ qTTeZPZ5b4BmJG8M548wGJijRjhYnbiFfZAmZXuAHJ80+gEY4WOulLvEM6frPxeQ GE3g8/gpc6nE6jHiNwcXgc9h7puCcX/k6BixaZawp8jX+VlGgSEKnWZR8Vwz78LG LHwirTpAMLmESn5/XJEQCWJ20hYWW+9ek7s/d/R+Ex3qHcQdspmzY8pLJyXR5Utb 7QJGxJd7FIMnIdyS81YTcdjCMoq5ZtRduRXNBChjI63TR09Zr24= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:51 2024 by rpki-client on console-fra.rpki-client.org