$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j1RWQVK9sMxJzSnrOOyWkTnyTUk.roa File: j1RWQVK9sMxJzSnrOOyWkTnyTUk.roa (raw, json) Hash identifier: OBfh6B/MV4w3AQSwy6h+9LHN5kWN5jn2u9a4ODeBQLo= Subject key identifier: 8F:54:56:41:52:BD:B0:CC:49:CD:29:EB:38:EC:96:91:39:F2:4D:49 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30D9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j1RWQVK9sMxJzSnrOOyWkTnyTUk.roa Signing time: Mon 26 Aug 2024 05:29:52 +0000 ROA not before: Mon 26 Aug 2024 05:29:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12505 (0x30d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8F54564152BDB0CC49CD29EB38EC969139F24D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:0b:b4:4f:4d:a1:50:d2:63:b3:e2:48:58: a9:8f:bc:e4:38:de:26:e5:48:9a:4c:f6:ac:8a:7c: 14:42:fe:8c:c1:a4:1b:74:da:6a:5c:b9:83:04:df: 1f:ee:0d:c9:c8:54:9c:77:88:20:ef:f3:34:3a:98: 7a:22:a4:96:d6:01:12:13:1c:a9:9c:c5:df:f1:0c: 75:ca:77:f5:25:cc:a4:d8:83:d4:98:17:c7:3f:ad: c0:b8:59:ed:a1:28:11:72:5c:83:ab:ed:f4:65:93: d4:76:de:4f:0c:b4:ee:e6:45:4b:03:bb:6c:d7:d9: 6a:bb:82:c9:43:84:ee:c1:35:f5:e1:6b:b0:7a:9c: e3:50:cf:3a:8c:d2:9b:9c:6f:ab:e7:51:33:b4:5f: 7f:50:b6:67:29:ab:52:66:54:e0:09:e1:04:7e:fe: ab:39:75:70:15:cf:a0:c2:f3:00:18:6a:bd:35:52: bc:1d:5b:d7:7a:de:14:3e:7c:95:91:ff:51:93:c4: 0b:96:69:a5:fd:b0:75:8f:0d:54:d6:18:98:b6:19: a7:2f:be:a5:49:25:94:88:c0:47:c2:7f:16:2c:ba: d1:63:de:87:92:a5:85:ce:23:8f:89:6f:a2:63:32: d6:b1:f8:0a:41:69:b1:7b:c4:c6:e7:fe:a7:4c:b2: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:54:56:41:52:BD:B0:CC:49:CD:29:EB:38:EC:96:91:39:F2:4D:49 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j1RWQVK9sMxJzSnrOOyWkTnyTUk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:7f:b9:5f:c1:88:aa:1b:b5:19:c1:e5:f8:29:1e:d7:91:bf: 83:2b:b0:6a:b0:14:5c:95:5d:2b:c1:99:25:bb:88:27:4e:f1: 5f:9b:52:ea:2e:ed:3a:6f:11:bf:67:a3:e5:72:1f:7b:c7:11: fe:16:2c:31:2e:4e:2b:94:d3:0d:a9:f6:ae:8d:09:b9:d9:ae: 63:92:36:86:96:f2:92:e2:30:f3:05:c8:f9:25:d6:ed:45:dc: df:3e:bc:47:9b:27:80:50:db:5c:21:11:40:bd:eb:18:54:60: de:f6:ec:89:c5:d8:20:b5:96:fe:ff:86:5b:95:bf:71:cd:d4: c8:cd:2a:1a:5f:ed:f3:06:9a:bf:17:b6:9d:8a:b9:3b:f8:88: d5:07:12:25:58:c6:7a:e0:1a:82:4f:93:e3:7f:61:3e:9c:94: af:51:5d:0a:98:ce:cc:77:53:10:45:e0:a8:ad:cd:fc:13:de: 38:28:ed:b2:42:67:5a:ca:b5:09:35:76:39:20:0e:ad:78:87: 1a:9d:64:a7:75:56:a1:07:5f:5a:97:45:5d:f0:5b:8e:4a:63: 45:ed:90:46:90:7f:41:19:31:9e:62:d6:57:09:4e:07:66:20: 5a:9a:93:f4:84:be:73:06:77:b7:07:ba:50:f5:4d:0a:35:4c: 5e:de:c3:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGNTQ1NjQxNTJCREIw Q0M0OUNEMjlFQjM4RUM5NjkxMzlGMjRENDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHOQu0T02hUNJjs+JIWKmPvOQ43iblSJpM9qyKfBRC/ozBpBt0 2mpcuYME3x/uDcnIVJx3iCDv8zQ6mHoipJbWARITHKmcxd/xDHXKd/UlzKTYg9SY F8c/rcC4We2hKBFyXIOr7fRlk9R23k8MtO7mRUsDu2zX2Wq7gslDhO7BNfXha7B6 nONQzzqM0pucb6vnUTO0X39Qtmcpq1JmVOAJ4QR+/qs5dXAVz6DC8wAYar01Urwd W9d63hQ+fJWR/1GTxAuWaaX9sHWPDVTWGJi2GacvvqVJJZSIwEfCfxYsutFj3oeS pYXOI4+Jb6JjMtax+ApBabF7xMbn/qdMsjk1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUj1RWQVK9sMxJzSnrOOyWkTnyTUkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2oxUldRVks5c014SnpTbnJP T3lXa1RueVRVay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wAAwDQYJKoZIhvcNAQELBQADggEBAJ5/uV/BiKobtRnB5fgpHteRv4MrsGqwFFyV XSvBmSW7iCdO8V+bUuou7TpvEb9no+VyH3vHEf4WLDEuTiuU0w2p9q6NCbnZrmOS NoaW8pLiMPMFyPkl1u1F3N8+vEebJ4BQ21whEUC96xhUYN727InF2CC1lv7/hluV v3HN1MjNKhpf7fMGmr8Xtp2KuTv4iNUHEiVYxnrgGoJPk+N/YT6clK9RXQqYzsx3 UxBF4KitzfwT3jgo7bJCZ1rKtQk1djkgDq14hxqdZKd1VqEHX1qXRV3wW45KY0Xt kEaQf0EZMZ5i1lcJTgdmIFqak/SEvnMGd7cHulD1TQo1TF7ew8A= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:40 2024 by rpki-client on console-fra.rpki-client.org