$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jVkyjfDMA2PAYZGE-JHR_TGcv8Y.roa File: jVkyjfDMA2PAYZGE-JHR_TGcv8Y.roa (raw, json) Hash identifier: Vu/nwmeRvl+UjUinS6hahPyhmmFF3yD4XiMbFP7lakU= Subject key identifier: 8D:59:32:8D:F0:CC:03:63:C0:61:91:84:F8:91:D1:FD:31:9C:BF:C6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3161 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jVkyjfDMA2PAYZGE-JHR_TGcv8Y.roa Signing time: Mon 26 Aug 2024 05:30:24 +0000 ROA not before: Mon 26 Aug 2024 05:30:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12641 (0x3161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8D59328DF0CC0363C0619184F891D1FD319CBFC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:8e:b6:55:39:1d:d5:01:26:14:86:13:58: 7f:f5:89:a6:74:f5:84:8d:93:13:61:43:f6:96:c4: 56:d9:31:00:b7:3a:ab:5a:f9:0d:ce:29:88:6a:94: 39:e0:1d:93:22:14:e7:ae:ce:08:07:62:39:5f:fc: df:54:fe:0b:44:b7:57:9c:25:3c:67:47:15:f8:a9: bb:c5:04:de:c0:2d:d0:b6:24:59:9b:f1:15:1d:7b: 33:20:f2:01:31:f0:26:5d:08:74:30:df:be:e8:8b: 49:90:44:bc:e5:4a:62:d5:52:59:d9:60:58:03:a7: fd:89:a9:3f:d6:e2:12:37:00:98:be:a6:b8:5d:3a: bd:28:38:ab:1e:84:e5:21:92:d6:aa:59:5d:94:f8: 5a:7e:88:3f:47:4d:83:30:9c:37:c8:85:2a:96:d2: 8f:2a:78:1a:07:04:f0:84:33:8e:15:26:b8:5d:c3: c4:82:f2:da:5d:c5:97:b3:8d:8b:10:96:1b:88:21: 01:46:1e:1c:1b:d8:7d:98:56:fa:8f:c1:db:24:27: 32:b3:9f:ac:6b:1d:d3:4a:f8:16:05:9c:58:b0:99: 90:ee:57:d9:a2:96:2a:55:eb:f1:f8:93:d9:18:5b: d6:b4:40:14:ba:7b:3d:9f:2d:50:94:6e:7c:35:8d: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:32:8D:F0:CC:03:63:C0:61:91:84:F8:91:D1:FD:31:9C:BF:C6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jVkyjfDMA2PAYZGE-JHR_TGcv8Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.78.0/24 Signature Algorithm: sha256WithRSAEncryption 47:7a:05:3c:1f:e5:d2:20:25:21:97:eb:34:78:f0:28:99:93: ca:4c:73:fc:82:9e:d5:30:95:f2:5e:3c:d4:f7:10:fd:aa:da: a5:bd:4c:3f:cd:3c:e3:74:1d:4f:95:55:d0:3c:90:3f:1e:5a: af:8c:cc:d9:cf:55:ac:8b:06:75:ee:fe:2d:44:ac:a0:a4:3e: de:fc:d8:57:67:9d:f1:02:1e:2e:6e:47:85:c7:a0:28:27:36: 19:98:90:22:7f:d3:06:46:43:39:43:e6:81:17:28:59:c4:39: 43:5a:c0:48:52:98:ea:f8:b2:00:78:67:2c:ea:6a:70:4e:88: 7c:6a:e4:de:1e:ac:72:19:d9:56:84:eb:df:61:98:cc:06:65: 92:ef:b6:62:a2:a5:40:6a:90:59:89:b8:a9:f8:e5:c9:4d:23: 15:52:ff:fc:29:ed:89:77:0e:83:ea:9a:c6:55:31:68:ce:fe: f5:87:0e:9f:df:7c:3b:99:b9:a4:fa:a3:d5:f5:e0:4f:96:98: 13:80:3f:29:95:2c:76:de:da:69:91:e2:f6:9b:3b:00:e6:5d: 39:57:63:56:f0:58:b4:5e:c1:1d:26:09:94:6b:f1:9f:0f:94: 53:2b:27:87:80:f5:0b:0e:42:50:39:08:89:04:01:ed:8d:be: 17:8d:c9:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhENTkzMjhERjBDQzAz NjNDMDYxOTE4NEY4OTFEMUZEMzE5Q0JGQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk9462VTkd1QEmFIYTWH/1iaZ09YSNkxNhQ/aWxFbZMQC3Oqta +Q3OKYhqlDngHZMiFOeuzggHYjlf/N9U/gtEt1ecJTxnRxX4qbvFBN7ALdC2JFmb 8RUdezMg8gEx8CZdCHQw377oi0mQRLzlSmLVUlnZYFgDp/2JqT/W4hI3AJi+prhd Or0oOKsehOUhktaqWV2U+Fp+iD9HTYMwnDfIhSqW0o8qeBoHBPCEM44VJrhdw8SC 8tpdxZezjYsQlhuIIQFGHhwb2H2YVvqPwdskJzKzn6xrHdNK+BYFnFiwmZDuV9mi lipV6/H4k9kYW9a0QBS6ez2fLVCUbnw1jVG/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjVkyjfDMA2PAYZGE+JHR/TGcv8YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pWa3lqZkRNQTJQQVlaR0Ut SkhSX1RHY3Y4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6E4wDQYJKoZIhvcNAQELBQADggEBAEd6BTwf5dIgJSGX6zR48CiZk8pMc/yCntUw lfJePNT3EP2q2qW9TD/NPON0HU+VVdA8kD8eWq+MzNnPVayLBnXu/i1ErKCkPt78 2FdnnfECHi5uR4XHoCgnNhmYkCJ/0wZGQzlD5oEXKFnEOUNawEhSmOr4sgB4Zyzq anBOiHxq5N4erHIZ2VaE699hmMwGZZLvtmKipUBqkFmJuKn45clNIxVS//wp7Yl3 DoPqmsZVMWjO/vWHDp/ffDuZuaT6o9X14E+WmBOAPymVLHbe2mmR4vabOwDmXTlX Y1bwWLRewR0mCZRr8Z8PlFMrJ4eA9QsOQlA5CIkEAe2NvheNyaw= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org