$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kA3gPm19XIv4MNSZXH6WPJRCNzc.roa File: kA3gPm19XIv4MNSZXH6WPJRCNzc.roa (raw, json) Hash identifier: wJAZ/md+e/Q2U2+1QmahwHNuHNSQfWT5EhYmiHFLPRo= Subject key identifier: 90:0D:E0:3E:6D:7D:5C:8B:F8:30:D4:99:5C:7E:96:3C:94:42:37:37 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2F9D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kA3gPm19XIv4MNSZXH6WPJRCNzc.roa Signing time: Mon 26 Aug 2024 05:28:40 +0000 ROA not before: Mon 26 Aug 2024 05:28:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.237.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Nov 2024 22:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12189 (0x2f9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=900DE03E6D7D5C8BF830D4995C7E963C94423737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:ef:65:d8:72:e1:7a:67:22:82:a8:5f:38: fb:c1:13:fe:c1:31:0e:3d:44:0f:92:0f:15:29:17: de:ae:9f:e3:b4:bf:66:d6:24:18:0d:7c:15:f4:fe: 1f:e1:08:ae:cd:15:02:39:6d:9d:93:64:92:0c:99: d2:ec:7a:f3:94:c1:53:fd:76:d9:07:08:4a:54:3a: f9:59:ca:0b:2e:1d:f2:21:91:cf:40:f9:80:2b:e8: 17:83:bf:b5:77:2d:e2:ef:2d:14:d8:0c:a3:af:c9: e3:eb:90:6a:99:42:2c:6d:26:a9:9a:be:ec:1d:db: 8b:ac:47:d1:2f:3a:f1:82:30:7f:60:f3:e4:d8:04: d9:81:2d:77:b2:0d:ef:3f:01:db:c4:a5:43:b2:75: 52:97:01:5b:e3:d2:a7:9b:ed:f0:90:20:d3:ac:69: a9:b3:17:c7:20:64:2a:50:f5:9e:5e:f4:e6:34:53: 59:13:36:96:4f:09:87:9f:68:d1:23:ba:8d:3d:ac: a8:93:a5:eb:6a:b1:60:83:ab:26:fc:7c:05:03:fd: 68:cc:b1:c6:d4:21:94:42:d0:30:8e:2a:47:39:34: 2c:33:cb:d0:d0:29:73:82:d3:3b:5b:9d:c0:a9:3a: d2:ee:bd:82:95:e3:38:c1:9c:00:27:a6:76:cd:df: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0D:E0:3E:6D:7D:5C:8B:F8:30:D4:99:5C:7E:96:3C:94:42:37:37 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kA3gPm19XIv4MNSZXH6WPJRCNzc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.237.0/25 Signature Algorithm: sha256WithRSAEncryption 96:d9:da:51:11:92:0c:16:bc:6d:44:d6:f7:da:b7:cc:2a:87: 27:74:9d:5c:e3:78:af:fb:98:a7:14:8d:6e:1c:53:d5:86:88: 01:8f:d5:f1:02:04:11:8c:bf:d6:3a:6c:b5:3e:ca:c3:46:7c: fe:f7:db:95:ba:76:d9:8d:a5:36:15:e7:81:2c:09:11:4d:e1: 88:50:92:25:b9:74:9d:32:3f:f1:f1:40:82:5f:33:86:a6:b8: ff:6c:a5:3c:5c:b1:28:8c:da:bc:2a:51:09:1b:2e:d1:52:7c: d4:68:b1:ec:bf:62:7f:8b:7e:2a:a3:16:b8:d6:0f:be:a8:15: e8:04:03:86:85:8e:0f:4c:98:4b:4a:f2:27:4b:1d:42:ad:17: 1c:c2:7a:63:69:4b:41:a6:2e:dd:3e:29:5a:9b:8b:c6:b0:ee: 09:5c:a5:df:a4:b8:c1:c1:91:c9:02:8d:45:f2:4c:21:8c:01: 12:e9:fd:a4:42:0d:12:79:8f:ff:b7:5f:b3:0c:1e:14:23:99: 88:d4:cf:17:a1:a2:70:e4:f0:6c:3f:52:d6:79:75:62:99:7b: a6:fc:b4:62:03:2f:d6:d0:6d:97:16:8c:a2:01:75:5e:19:2d: 82:e6:f0:27:b9:41:bd:c3:e4:13:8c:fa:2b:ec:56:9b:7a:df: 0b:3f:95:bd -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICL50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwMERFMDNFNkQ3RDVD OEJGODMwRDQ5OTVDN0U5NjNDOTQ0MjM3MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmiO9l2HLhemcigqhfOPvBE/7BMQ49RA+SDxUpF96un+O0v2bW JBgNfBX0/h/hCK7NFQI5bZ2TZJIMmdLsevOUwVP9dtkHCEpUOvlZygsuHfIhkc9A +YAr6BeDv7V3LeLvLRTYDKOvyePrkGqZQixtJqmavuwd24usR9EvOvGCMH9g8+TY BNmBLXeyDe8/AdvEpUOydVKXAVvj0qeb7fCQINOsaamzF8cgZCpQ9Z5e9OY0U1kT NpZPCYefaNEjuo09rKiTpetqsWCDqyb8fAUD/WjMscbUIZRC0DCOKkc5NCwzy9DQ KXOC0ztbncCpOtLuvYKV4zjBnAAnpnbN39nHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUkA3gPm19XIv4MNSZXH6WPJRCNzcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tBM2dQbTE5WEl2NE1OU1pY SDZXUEpSQ056Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+0AMA0GCSqGSIb3DQEBCwUAA4IBAQCW2dpREZIMFrxtRNb32rfMKocndJ1c43iv +5inFI1uHFPVhogBj9XxAgQRjL/WOmy1PsrDRnz+99uVunbZjaU2FeeBLAkRTeGI UJIluXSdMj/x8UCCXzOGprj/bKU8XLEojNq8KlEJGy7RUnzUaLHsv2J/i34qoxa4 1g++qBXoBAOGhY4PTJhLSvInSx1CrRccwnpjaUtBpi7dPilam4vGsO4JXKXfpLjB wZHJAo1F8kwhjAES6f2kQg0SeY//t1+zDB4UI5mI1M8XoaJw5PBsP1LWeXVimXum /LRiAy/W0G2XFoyiAXVeGS2C5vAnuUG9w+QTjPor7Fabet8LP5W9 -----END CERTIFICATE-----Generated at Sun Nov 10 19:35:58 2024 by rpki-client on console-ams.rpki-client.org