$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa File: kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa (raw, json) Hash identifier: Bsr91Os4/LSTvbuM2F89vGDTwwYz8RkjYN3aG9k9dKU= Subject key identifier: 90:38:70:83:16:4D:FF:62:1C:21:C7:E3:A1:A5:2D:A4:32:92:F4:3C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 320C Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa Signing time: Mon 26 Aug 2024 05:31:12 +0000 ROA not before: Mon 26 Aug 2024 05:31:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12812 (0x320c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=90387083164DFF621C21C7E3A1A52DA43292F43C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:54:8e:9a:2e:c1:15:e9:b6:94:26:28:bf: ca:01:23:fe:ac:e0:23:8d:0e:21:18:b3:91:ea:55: 11:aa:f5:cf:31:d4:31:86:80:70:11:66:7c:4b:9c: d0:6f:25:56:7c:4e:2d:da:5c:e8:a5:dd:82:bd:52: 02:bc:0d:1d:c1:a7:81:74:4c:25:08:84:f7:6e:c1: 3a:d7:1c:87:fe:cd:75:4d:a1:48:7a:a3:24:7d:d3: 90:f4:ac:d2:e5:c1:10:83:e7:5c:59:bc:f0:81:e7: e2:ec:8d:ed:2e:5d:40:71:78:9b:f6:af:ba:88:30: 15:67:6c:0e:e6:40:33:bf:bc:30:09:5e:1e:a0:c2: c4:d4:04:84:0e:ce:0e:ce:2e:3b:52:bc:b8:80:68: 14:ba:92:9b:70:52:7d:a1:63:f5:c7:a7:5f:28:c2: 59:8e:7a:e9:86:0e:15:4d:f1:01:6f:ef:b0:77:4f: f1:d4:bf:9f:1b:95:f9:89:47:58:d4:98:f3:e0:c0: 4d:90:2e:ac:1f:99:d2:b3:38:db:e7:d8:80:2d:0f: 54:5f:36:f5:84:85:43:c2:e3:7f:52:f0:6c:4f:49: 9d:c6:2b:68:17:cf:40:57:96:07:44:9f:7d:c4:d7: 8b:fd:fd:23:99:34:2f:7e:15:67:28:4a:69:68:fe: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:38:70:83:16:4D:FF:62:1C:21:C7:E3:A1:A5:2D:A4:32:92:F4:3C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.0.0/21 Signature Algorithm: sha256WithRSAEncryption 70:f0:e6:9a:70:91:00:e8:07:4e:54:f1:02:14:eb:58:ce:e5: e6:d2:7a:6b:c4:6d:5f:a7:bf:00:56:c6:6b:df:ab:22:bc:32: 1b:b2:f9:93:62:ed:fd:74:01:28:d5:5a:24:a2:0e:8d:1d:6f: 21:39:12:4b:81:ce:77:a7:c2:ae:4e:cf:aa:cd:00:84:d1:94: 70:85:79:fc:f6:44:d9:29:f1:e6:e8:bc:60:d4:ad:39:95:6e: 22:3f:32:4a:22:c0:7b:b7:7b:27:81:85:f8:2b:16:c2:74:08: 05:88:9a:50:8c:f1:56:81:83:77:8e:15:86:3f:e5:59:5a:a3: 7b:63:62:75:a6:71:9d:d3:fb:22:36:62:0c:6d:bb:11:3c:ce: 40:db:3d:a8:aa:fb:39:8a:26:18:9e:d4:7b:b1:80:87:7c:64: 97:89:91:23:e5:08:dd:94:57:b7:b6:b3:d4:47:60:d8:af:6e: a0:b7:33:16:d7:75:7a:b0:41:03:73:b9:ec:98:38:b8:75:94: 8c:0b:b2:23:d0:e2:d2:bf:51:79:ea:45:fd:90:0a:7d:d8:c9: 97:34:51:b7:ad:75:29:6d:7d:4a:43:2c:8a:45:5e:a6:df:31: 11:19:5a:93:96:71:90:d3:a5:e6:75:84:47:52:a5:39:12:cc: 6d:0e:ce:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwMzg3MDgzMTY0REZG NjIxQzIxQzdFM0ExQTUyREE0MzI5MkY0M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwH1SOmi7BFem2lCYov8oBI/6s4CONDiEYs5HqVRGq9c8x1DGG gHARZnxLnNBvJVZ8Ti3aXOil3YK9UgK8DR3Bp4F0TCUIhPduwTrXHIf+zXVNoUh6 oyR905D0rNLlwRCD51xZvPCB5+Lsje0uXUBxeJv2r7qIMBVnbA7mQDO/vDAJXh6g wsTUBIQOzg7OLjtSvLiAaBS6kptwUn2hY/XHp18owlmOeumGDhVN8QFv77B3T/HU v58blfmJR1jUmPPgwE2QLqwfmdKzONvn2IAtD1RfNvWEhUPC439S8GxPSZ3GK2gX z0BXlgdEn33E14v9/SOZNC9+FWcoSmlo/p/ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkDhwgxZN/2IcIcfjoaUtpDKS9DwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tEaHdneFpOXzJJY0ljZmpv YVV0cERLUzlEdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wwAwDQYJKoZIhvcNAQELBQADggEBAHDw5ppwkQDoB05U8QIU61jO5ebSemvEbV+n vwBWxmvfqyK8Mhuy+ZNi7f10ASjVWiSiDo0dbyE5EkuBznenwq5Oz6rNAITRlHCF efz2RNkp8ebovGDUrTmVbiI/MkoiwHu3eyeBhfgrFsJ0CAWImlCM8VaBg3eOFYY/ 5Vlao3tjYnWmcZ3T+yI2YgxtuxE8zkDbPaiq+zmKJhie1HuxgId8ZJeJkSPlCN2U V7e2s9RHYNivbqC3MxbXdXqwQQNzueyYOLh1lIwLsiPQ4tK/UXnqRf2QCn3YyZc0 UbetdSltfUpDLIpFXqbfMREZWpOWcZDTpeZ1hEdSpTkSzG0OzjI= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org