$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jPSWibdoHeJl-L1UsdWESsE52lU.roa File: jPSWibdoHeJl-L1UsdWESsE52lU.roa (raw, json) Hash identifier: FZ36NUbfVn7g+b6cpCmqo4aerZRHHGuXpIWkZSWUmgE= Subject key identifier: 8C:F4:96:89:B7:68:1D:E2:65:F8:BD:54:B1:D5:84:4A:C1:39:DA:55 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 318E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jPSWibdoHeJl-L1UsdWESsE52lU.roa Signing time: Mon 26 Aug 2024 05:30:34 +0000 ROA not before: Mon 26 Aug 2024 05:30:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12686 (0x318e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8CF49689B7681DE265F8BD54B1D5844AC139DA55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:4e:34:ec:e9:88:16:8a:d4:49:77:bb:9b: 85:29:87:c9:27:88:b6:13:fa:a6:e0:a8:04:56:3f: 7c:02:83:02:53:9c:29:ae:fb:ca:bd:60:66:30:a8: a4:7b:b4:27:4c:01:a4:ac:c9:82:a1:fc:48:a2:06: ca:e2:a5:8c:2a:c3:ba:f5:65:23:fb:d2:8f:c9:42: 50:77:2d:06:2e:41:22:84:e3:52:90:4c:9b:07:d8: bb:57:1e:92:67:0a:ab:77:1d:38:c9:1a:cb:16:d8: a4:d2:02:8b:f7:92:62:14:17:bd:b0:d7:bc:01:50: 1b:d6:20:ec:83:bb:4a:76:c7:28:bd:a9:36:da:c2: c7:ce:85:ab:62:2b:3c:36:e2:35:56:3d:0c:fb:c0: 04:8c:77:23:d2:aa:30:39:2c:d5:76:17:1b:93:34: ce:cb:8e:bd:a0:6c:d1:18:f3:66:31:33:de:2f:1a: d1:68:48:f6:13:b3:00:78:4c:af:d2:b3:b4:02:ca: 4c:c6:e1:22:a5:33:88:40:54:20:0e:e8:20:96:7f: ee:94:86:e3:15:b2:35:eb:b3:16:c8:e1:eb:c0:5d: 4f:5d:05:80:a0:b9:11:b3:b3:74:13:82:08:38:f2: 34:b3:f4:bb:a2:a4:b8:b8:e4:41:d4:9a:36:98:27: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:96:89:B7:68:1D:E2:65:F8:BD:54:B1:D5:84:4A:C1:39:DA:55 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jPSWibdoHeJl-L1UsdWESsE52lU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.232.0/21 Signature Algorithm: sha256WithRSAEncryption b9:36:72:fd:21:ca:b7:ba:1c:91:49:6c:92:cc:8f:ed:ca:5a: a5:44:64:15:78:ca:4c:5a:5d:d2:34:b7:b5:e3:d8:96:bf:80: 68:e0:91:5f:42:c2:d9:3e:13:ab:5f:70:aa:b2:8c:36:92:ee: 99:36:a7:60:70:08:5e:85:36:0a:8d:00:fc:c9:6a:92:68:b4: fd:51:55:3a:b9:6c:3b:c5:15:8b:19:43:d1:ef:7f:6a:66:68: e3:ce:6e:ef:83:31:f1:ca:54:57:4f:66:02:fc:bc:e3:27:e3: 17:24:fe:6e:92:cf:c2:c9:56:d2:20:fd:d9:c9:0e:7d:31:43: 0b:7f:1b:dd:1d:b6:d6:31:69:fe:f5:5f:c2:8b:28:30:9a:0e: db:78:e5:6f:ac:5e:e4:b8:87:03:18:aa:69:f0:45:a4:4d:b3: 40:67:a9:3a:88:c5:8b:c7:db:b9:fb:da:e6:ac:35:ff:e8:b9: 1f:2e:69:96:03:2b:15:ec:f3:51:d3:74:9e:f6:26:c9:2b:2f: e0:31:d2:be:04:1c:ef:e0:d1:25:4b:6f:f2:e3:a0:8f:e4:95: 29:17:d7:8c:3c:2d:6b:a8:45:7d:c2:9e:f9:29:b9:40:3b:be: b5:ed:1c:81:f2:93:0f:f8:78:be:f7:c0:16:88:e7:e2:54:38: c5:1b:c8:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDRjQ5Njg5Qjc2ODFE RTI2NUY4QkQ1NEIxRDU4NDRBQzEzOURBNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLlE407OmIForUSXe7m4Uph8kniLYT+qbgqARWP3wCgwJTnCmu +8q9YGYwqKR7tCdMAaSsyYKh/EiiBsripYwqw7r1ZSP70o/JQlB3LQYuQSKE41KQ TJsH2LtXHpJnCqt3HTjJGssW2KTSAov3kmIUF72w17wBUBvWIOyDu0p2xyi9qTba wsfOhatiKzw24jVWPQz7wASMdyPSqjA5LNV2FxuTNM7Ljr2gbNEY82YxM94vGtFo SPYTswB4TK/Ss7QCykzG4SKlM4hAVCAO6CCWf+6UhuMVsjXrsxbI4evAXU9dBYCg uRGzs3QTggg48jSz9LuipLi45EHUmjaYJxI3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjPSWibdoHeJl+L1UsdWESsE52lUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pQU1dpYmRvSGVKbC1MMVVz ZFdFU3NFNTJsVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wegwDQYJKoZIhvcNAQELBQADggEBALk2cv0hyre6HJFJbJLMj+3KWqVEZBV4ykxa XdI0t7Xj2Ja/gGjgkV9Cwtk+E6tfcKqyjDaS7pk2p2BwCF6FNgqNAPzJapJotP1R VTq5bDvFFYsZQ9Hvf2pmaOPObu+DMfHKVFdPZgL8vOMn4xck/m6Sz8LJVtIg/dnJ Dn0xQwt/G90dttYxaf71X8KLKDCaDtt45W+sXuS4hwMYqmnwRaRNs0BnqTqIxYvH 27n72uasNf/ouR8uaZYDKxXs81HTdJ72JskrL+Ax0r4EHO/g0SVLb/LjoI/klSkX 14w8LWuoRX3CnvkpuUA7vrXtHIHykw/4eL73wBaI5+JUOMUbyEw= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org