$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGxanQQPB3UmFX0PNUeV4XaS4k8.roa File: kGxanQQPB3UmFX0PNUeV4XaS4k8.roa (raw, json) Hash identifier: g/tJbVxoCMkIAweGDWfVsfyfnETerW/MjiVSjVqqkCU= Subject key identifier: 90:6C:5A:9D:04:0F:07:75:26:15:7D:0F:35:47:95:E1:76:92:E2:4F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30FC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGxanQQPB3UmFX0PNUeV4XaS4k8.roa Signing time: Mon 26 Aug 2024 05:30:00 +0000 ROA not before: Mon 26 Aug 2024 05:30:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.200.0/21 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12540 (0x30fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=906C5A9D040F077526157D0F354795E17692E24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:d8:4f:f5:66:db:d4:43:cd:84:58:0b:4a: c7:b8:77:84:3c:05:ee:b8:c7:2f:bd:f0:33:48:bd: be:41:d6:27:39:5f:93:05:64:e4:28:59:c1:0b:6d: cd:68:69:7e:3a:24:90:23:31:45:37:af:3f:42:2e: bc:e0:ea:1f:ed:ef:09:cd:44:e0:6f:44:39:41:b3: 34:2e:3e:ec:59:0e:93:7f:aa:dd:bf:b4:c1:3d:a7: 1e:f3:4b:e7:f9:73:9e:8f:48:a6:a5:94:76:15:34: 93:1d:70:4f:59:09:7b:73:a4:49:90:38:46:7c:14: 6d:9a:fb:52:2b:27:c9:45:54:7b:af:ea:8c:22:38: 72:4c:c4:81:3b:dc:7a:15:1b:05:67:a7:65:c1:f2: 0c:18:20:e0:63:11:6c:1b:35:8a:7b:5d:92:ac:24: 5c:87:43:57:38:53:e7:a0:7f:58:b0:b6:71:d6:b2: c0:ce:f7:74:07:02:b2:34:b3:eb:8f:b1:40:f4:5a: f1:96:12:f9:ae:ef:71:a5:e3:19:c0:6e:42:af:d1: 33:1f:1f:f4:c9:72:98:a7:f3:b0:e5:da:91:e4:fd: 43:95:48:3c:99:ed:b5:b8:fa:1b:66:87:8d:ba:2e: b9:30:e9:f8:df:fc:57:7c:4b:cd:dc:b4:57:ac:62: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6C:5A:9D:04:0F:07:75:26:15:7D:0F:35:47:95:E1:76:92:E2:4F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGxanQQPB3UmFX0PNUeV4XaS4k8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.200.0/21 Signature Algorithm: sha256WithRSAEncryption 09:27:7f:0b:7e:42:49:b3:80:58:bb:00:f5:97:7f:34:7f:91: 6c:ed:f6:ac:6c:cc:b2:62:0e:15:e7:ef:9f:2b:86:39:e8:b4: 0b:03:51:bc:e5:b0:35:dd:52:08:4d:16:c6:c0:82:4b:cc:36: c9:c7:29:d4:94:4a:f4:1a:bb:bb:7c:48:10:b8:92:d5:e6:37: 9b:ab:27:ff:02:16:f6:93:86:f5:79:bf:64:22:a3:2e:58:46: 5a:ea:4a:4a:70:b1:6a:92:16:97:03:67:bd:c1:54:a2:84:0f: 1b:97:81:fc:50:bd:4a:33:79:38:78:5e:9d:69:3d:a3:08:4e: 91:ed:9f:07:07:63:9e:20:1d:b9:ae:db:ca:6c:93:86:f9:ce: 92:59:88:a1:b3:ef:4b:00:0c:14:e5:f6:37:fb:52:3f:37:61: b6:b6:56:30:49:94:6c:9c:c2:99:1d:35:4f:89:15:bb:cb:ec: 00:1c:cb:a4:36:8f:6b:0c:81:94:7b:7b:33:35:a0:60:12:3f: 7a:ec:e8:57:15:59:ec:2c:10:dc:21:cd:ff:0d:e9:cc:b6:5c: 24:6b:d9:2e:04:a8:37:23:16:2e:b1:38:bb:c3:be:e8:81:44: 23:53:09:51:d6:09:9f:26:ce:6e:f4:a0:c9:41:fb:6b:58:03: 63:86:2f:17 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwNkM1QTlEMDQwRjA3 NzUyNjE1N0QwRjM1NDc5NUUxNzY5MkUyNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9x9hP9Wbb1EPNhFgLSse4d4Q8Be64xy+98DNIvb5B1ic5X5MF ZOQoWcELbc1oaX46JJAjMUU3rz9CLrzg6h/t7wnNROBvRDlBszQuPuxZDpN/qt2/ tME9px7zS+f5c56PSKallHYVNJMdcE9ZCXtzpEmQOEZ8FG2a+1IrJ8lFVHuv6owi OHJMxIE73HoVGwVnp2XB8gwYIOBjEWwbNYp7XZKsJFyHQ1c4U+egf1iwtnHWssDO 93QHArI0s+uPsUD0WvGWEvmu73Gl4xnAbkKv0TMfH/TJcpin87Dl2pHk/UOVSDyZ 7bW4+htmh426Lrkw6fjf/Fd8S83ctFesYgJjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkGxanQQPB3UmFX0PNUeV4XaS4k8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tHeGFuUVFQQjNVbUZYMFBO VWVWNFhhUzRrOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6MgwDQYJKoZIhvcNAQELBQADggEBAAknfwt+QkmzgFi7APWXfzR/kWzt9qxszLJi DhXn758rhjnotAsDUbzlsDXdUghNFsbAgkvMNsnHKdSUSvQau7t8SBC4ktXmN5ur J/8CFvaThvV5v2Qioy5YRlrqSkpwsWqSFpcDZ73BVKKEDxuXgfxQvUozeTh4Xp1p PaMITpHtnwcHY54gHbmu28psk4b5zpJZiKGz70sADBTl9jf7Uj83Yba2VjBJlGyc wpkdNU+JFbvL7AAcy6Q2j2sMgZR7ezM1oGASP3rs6FcVWewsENwhzf8N6cy2XCRr 2S4EqDcjFi6xOLvDvuiBRCNTCVHWCZ8mzm70oMlB+2tYA2OGLxc= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org