$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/juwVLgQFbiigr2swzMmaAE3bKbw.roa File: juwVLgQFbiigr2swzMmaAE3bKbw.roa (raw, json) Hash identifier: Xh69+3Iag93RB4ZLRsmB3C/Mvx0kiNF7eJE8fGzqgEw= Subject key identifier: 8E:EC:15:2E:04:05:6E:28:A0:AF:6B:30:CC:C9:9A:00:4D:DB:29:BC Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32F3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/juwVLgQFbiigr2swzMmaAE3bKbw.roa Signing time: Mon 26 Aug 2024 05:32:10 +0000 ROA not before: Mon 26 Aug 2024 05:32:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13043 (0x32f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8EEC152E04056E28A0AF6B30CCC99A004DDB29BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:d7:cd:13:80:2a:da:df:d1:c0:cb:62:8a: d1:84:12:65:f4:07:6a:82:9f:06:d4:fc:48:cd:b3: 3e:08:fe:82:02:8d:76:4f:53:83:ee:f3:6e:ba:fc: cd:4f:9d:8a:18:72:fa:cf:25:4f:f3:87:4f:f8:8c: c3:15:8a:c2:4a:c4:f8:c0:7f:a2:4e:b3:88:a9:d0: 00:91:18:11:7b:49:2e:6c:e1:2f:ec:83:b8:12:87: 99:fe:28:dc:4a:ca:4b:45:01:2e:91:4b:96:53:bf: 04:93:d1:0d:fe:97:86:c0:fb:4b:f9:6a:86:18:b7: 8e:b9:29:b9:60:71:0d:83:01:01:64:13:b7:e6:a3: c1:74:8b:76:cb:2b:a2:26:f6:d7:96:7e:f9:14:06: 7e:7e:59:e2:db:dd:a4:d0:73:f2:20:e9:9f:47:31: cc:d3:dc:ed:4d:a3:48:f9:b7:3e:0f:06:58:77:e6: d2:4f:d2:82:20:d7:ed:62:30:3b:58:95:32:6a:3d: d0:26:9d:c6:81:18:c3:ec:07:af:24:38:7b:b4:ea: fa:f9:15:4a:6b:fb:3f:32:5a:c1:f4:ca:13:ec:01: c3:8e:a3:28:53:96:a7:9a:db:0d:d2:59:b8:13:c0: 47:4b:9d:7e:5d:81:23:01:27:f9:03:db:d8:c0:85: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:15:2E:04:05:6E:28:A0:AF:6B:30:CC:C9:9A:00:4D:DB:29:BC X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/juwVLgQFbiigr2swzMmaAE3bKbw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.40.0/22 Signature Algorithm: sha256WithRSAEncryption 81:7c:43:4e:5a:9a:51:3a:44:d8:e8:d6:fa:b0:cd:78:f0:d7: 1c:e1:77:06:4a:0a:88:75:2d:6a:21:c3:49:81:a0:d5:0e:d8: dd:b7:94:55:c1:03:8d:28:b7:9e:1b:e7:ff:ae:4a:67:38:d2: 0b:64:be:13:29:c1:d3:e7:19:5a:c2:2a:be:6c:7b:16:89:e8: 36:eb:bd:aa:de:43:a9:b7:13:f0:ee:10:72:e7:65:23:21:4d: e5:91:6a:fa:d7:99:2f:c5:56:6d:4b:05:f0:82:de:e1:40:1d: b6:81:ec:f2:c3:68:9a:24:c7:c9:a7:ae:85:74:a0:95:18:d2: 21:70:ad:38:83:0e:73:c7:ad:72:69:fb:cd:c6:59:a9:41:96: 77:a7:35:87:63:c0:85:24:c0:db:4d:ab:02:c8:11:67:3a:a3: 21:68:3a:92:95:b8:eb:b2:ec:1d:f8:f2:73:d4:4c:0a:e1:06: 74:c3:61:2f:64:3e:3c:c1:8b:74:26:17:b9:fd:d7:b2:e7:b2: 8f:24:7d:2a:90:2b:37:09:9a:34:2e:e6:4e:9d:33:d7:e3:d9: 4b:cd:0e:97:3d:fc:e5:74:c2:3b:11:fc:90:37:93:30:9b:ca: 0f:b5:11:51:db:6d:b1:85:e2:c2:ee:c9:0f:e9:8e:ca:72:0b: 34:7e:39:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhFRUMxNTJFMDQwNTZF MjhBMEFGNkIzMENDQzk5QTAwNEREQjI5QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5O9fNE4Aq2t/RwMtiitGEEmX0B2qCnwbU/EjNsz4I/oICjXZP U4Pu8266/M1PnYoYcvrPJU/zh0/4jMMVisJKxPjAf6JOs4ip0ACRGBF7SS5s4S/s g7gSh5n+KNxKyktFAS6RS5ZTvwST0Q3+l4bA+0v5aoYYt465KblgcQ2DAQFkE7fm o8F0i3bLK6Im9teWfvkUBn5+WeLb3aTQc/Ig6Z9HMczT3O1No0j5tz4PBlh35tJP 0oIg1+1iMDtYlTJqPdAmncaBGMPsB68kOHu06vr5FUpr+z8yWsH0yhPsAcOOoyhT lqea2w3SWbgTwEdLnX5dgSMBJ/kD29jAhTMHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjuwVLgQFbiigr2swzMmaAE3bKbwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2p1d1ZMZ1FGYmlpZ3Iyc3d6 TW1hQUUzYktidy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6CgwDQYJKoZIhvcNAQELBQADggEBAIF8Q05amlE6RNjo1vqwzXjw1xzhdwZKCoh1 LWohw0mBoNUO2N23lFXBA40ot54b5/+uSmc40gtkvhMpwdPnGVrCKr5sexaJ6Dbr vareQ6m3E/DuEHLnZSMhTeWRavrXmS/FVm1LBfCC3uFAHbaB7PLDaJokx8mnroV0 oJUY0iFwrTiDDnPHrXJp+83GWalBlnenNYdjwIUkwNtNqwLIEWc6oyFoOpKVuOuy 7B348nPUTArhBnTDYS9kPjzBi3QmF7n917Lnso8kfSqQKzcJmjQu5k6dM9fj2UvN Dpc9/OV0wjsR/JA3kzCbyg+1EVHbbbGF4sLuyQ/pjspyCzR+OdA= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org