$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jd2cEnBUGSjJb3wSnQKUReK-FxE.roa File: jd2cEnBUGSjJb3wSnQKUReK-FxE.roa (raw, json) Hash identifier: j18Zex9Gn5tIk2djhifsWnw6WSU1JDGRInBgcTy71zc= Subject key identifier: 8D:DD:9C:12:70:54:19:28:C9:6F:7C:12:9D:02:94:45:E2:BE:17:11 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 313A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jd2cEnBUGSjJb3wSnQKUReK-FxE.roa Signing time: Mon 26 Aug 2024 05:30:14 +0000 ROA not before: Mon 26 Aug 2024 05:30:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12602 (0x313a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8DDD9C1270541928C96F7C129D029445E2BE1711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:b8:4a:b9:a5:53:7b:6b:b9:ba:35:4a:f9: fd:7d:8e:5d:00:e6:d2:01:7e:79:d6:83:66:62:3b: 30:50:66:17:80:92:90:7c:12:a0:71:2e:d3:01:b6: 82:13:31:a7:d8:6d:32:fd:fa:3e:5f:0d:4e:f4:c0: 10:14:94:ab:42:8c:23:81:ac:e4:f2:79:be:2d:46: 89:03:a0:3f:ef:ef:11:47:49:dd:2f:5c:17:5d:69: 86:84:24:54:7d:d7:28:99:3d:56:2e:fc:af:c4:b5: 46:ae:c0:53:b4:05:45:0e:5f:10:c3:85:9a:f7:24: 09:7c:87:3b:f1:52:8f:8b:d4:a7:3d:78:28:d1:46: 97:29:9b:4b:3f:ed:ed:90:0f:36:38:d7:32:85:21: 7b:53:15:f2:0d:59:eb:7d:5e:2c:39:7f:f9:40:b9: af:cc:a1:71:f6:02:b4:c5:c6:61:6d:af:06:e0:02: 62:08:fb:c7:30:d3:5b:5e:3f:b0:aa:e1:be:18:21: 4a:33:fe:bb:8c:78:56:f8:9c:ce:c6:b7:73:b0:a5: 36:15:78:65:a0:6f:3a:e6:0e:33:8f:44:e8:67:77: 51:d0:c0:2f:54:b0:45:e6:2c:ae:bc:45:06:1d:4c: 2c:d2:b8:22:c3:20:9f:b0:4e:65:22:a5:c3:49:02: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DD:9C:12:70:54:19:28:C9:6F:7C:12:9D:02:94:45:E2:BE:17:11 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jd2cEnBUGSjJb3wSnQKUReK-FxE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.32.0/21 Signature Algorithm: sha256WithRSAEncryption 49:7e:db:14:e8:54:c1:b8:db:ea:a0:56:87:84:78:5b:29:83: 0a:db:39:2b:c2:28:9a:b5:98:a3:31:b5:a5:e7:2c:ea:c1:0c: db:d8:5c:e2:73:4b:62:74:c2:18:d3:64:fb:d4:61:a8:69:c4: 73:39:89:49:cc:a9:6a:1a:7e:6f:b1:ba:be:11:d3:a0:2e:64: 88:a3:8f:2e:c7:fd:88:9d:9c:02:9e:8f:19:85:dd:c1:4b:55: 7e:34:2a:b2:9c:0a:ab:d1:4c:a8:f2:02:fd:c9:68:60:fe:98: c8:51:4e:49:87:73:e6:2b:94:e7:0e:8d:8b:64:8d:88:f0:cb: 96:62:54:ba:a3:ca:33:48:f3:c4:ab:41:37:68:6e:d6:fb:a9: 9e:42:d3:78:7f:b1:8f:f0:6b:46:a3:52:d1:c8:cb:e0:4e:aa: 6a:1f:a3:a9:1d:14:28:3b:06:48:fc:d8:e6:d5:f7:52:67:44: ae:c9:59:0a:cf:f8:5a:ce:1b:27:62:df:bf:8c:e0:4d:44:8a: 58:24:16:c5:65:66:17:f2:92:cf:ed:83:cd:9a:d5:e2:8c:04: ae:2e:53:43:0c:36:04:13:b2:7a:53:9d:de:0c:ec:89:aa:0a: dd:5e:74:c1:4b:e4:5d:17:a1:a0:cf:0c:d0:5e:6c:f8:67:c3: cd:a4:d1:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhEREQ5QzEyNzA1NDE5 MjhDOTZGN0MxMjlEMDI5NDQ1RTJCRTE3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkQ7hKuaVTe2u5ujVK+f19jl0A5tIBfnnWg2ZiOzBQZheAkpB8 EqBxLtMBtoITMafYbTL9+j5fDU70wBAUlKtCjCOBrOTyeb4tRokDoD/v7xFHSd0v XBddaYaEJFR91yiZPVYu/K/EtUauwFO0BUUOXxDDhZr3JAl8hzvxUo+L1Kc9eCjR Rpcpm0s/7e2QDzY41zKFIXtTFfINWet9Xiw5f/lAua/MoXH2ArTFxmFtrwbgAmII +8cw01teP7Cq4b4YIUoz/ruMeFb4nM7Gt3OwpTYVeGWgbzrmDjOPROhnd1HQwC9U sEXmLK68RQYdTCzSuCLDIJ+wTmUipcNJAiYHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjd2cEnBUGSjJb3wSnQKUReK+FxEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pkMmNFbkJVR1NqSmIzd1Nu UUtVUmVLLUZ4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wyAwDQYJKoZIhvcNAQELBQADggEBAEl+2xToVMG42+qgVoeEeFspgwrbOSvCKJq1 mKMxtaXnLOrBDNvYXOJzS2J0whjTZPvUYahpxHM5iUnMqWoafm+xur4R06AuZIij jy7H/YidnAKejxmF3cFLVX40KrKcCqvRTKjyAv3JaGD+mMhRTkmHc+YrlOcOjYtk jYjwy5ZiVLqjyjNI88SrQTdobtb7qZ5C03h/sY/wa0ajUtHIy+BOqmofo6kdFCg7 Bkj82ObV91JnRK7JWQrP+FrOGydi37+M4E1EilgkFsVlZhfyks/tg82a1eKMBK4u U0MMNgQTsnpTnd4M7ImqCt1edMFL5F0XoaDPDNBebPhnw82k0Xg= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org