$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa File: kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa (raw, json) Hash identifier: pT1DSWEX9+1y390jV4xlFajlrEPpPtZbOAyDGtg9GNk= Subject key identifier: 90:8C:B6:81:8E:37:4D:96:B9:B5:55:3A:38:CB:01:E9:39:A5:4A:64 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3078 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa Signing time: Mon 26 Aug 2024 05:29:29 +0000 ROA not before: Mon 26 Aug 2024 05:29:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12408 (0x3078) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=908CB6818E374D96B9B5553A38CB01E939A54A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:c4:ef:35:a2:17:56:46:e9:ac:d9:92:58: ce:26:fe:ba:af:78:9f:37:85:55:7e:9f:91:08:32: ab:d8:d1:61:6e:2d:d0:e0:7d:23:fe:09:2a:71:36: a7:da:22:4f:50:2c:a6:7f:8b:84:f8:1a:92:80:2b: a8:a0:a7:56:55:60:76:b5:93:0d:b7:15:57:cd:10: dc:76:8e:bd:1a:c3:38:71:8e:ac:18:27:3e:f9:8d: 2a:40:4c:97:0f:ca:53:c8:28:a7:c7:01:c7:b2:e3: 01:ce:5e:bd:86:ef:f9:80:3d:ba:50:82:4c:73:bd: 6c:21:c4:c0:43:b9:ac:14:07:32:84:b6:ec:a0:47: c3:18:ba:82:cf:45:12:4b:98:77:3e:60:d1:6d:b2: ee:d9:f8:e4:03:1b:9e:f5:8d:2a:29:4a:99:d9:01: cc:37:2a:97:ee:dd:fe:d4:e3:9e:fb:8d:fb:ad:0b: 92:b8:ca:a2:3c:c6:cc:c6:84:36:f7:08:ec:fd:df: 27:b8:14:90:8e:10:14:16:66:7c:2c:d1:05:44:df: 4a:aa:92:0e:9a:8b:f8:e8:4a:24:fa:1b:c9:6d:6a: 4a:c7:f2:28:a4:2d:07:52:00:72:da:85:63:5a:6d: 80:e0:50:aa:59:da:dc:4c:e8:47:e9:45:a2:a8:93: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:B6:81:8E:37:4D:96:B9:B5:55:3A:38:CB:01:E9:39:A5:4A:64 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIy2gY43TZa5tVU6OMsB6TmlSmQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.32.0/20 Signature Algorithm: sha256WithRSAEncryption 18:1d:8c:dc:71:67:98:b6:13:32:73:43:8b:2e:60:8b:bf:e2: 40:cd:bf:c9:60:a9:b9:66:48:87:b2:6d:93:90:20:df:09:83: df:aa:80:50:4f:b9:cd:f4:98:48:ae:25:a9:d7:f7:95:36:75: 7f:5c:34:43:88:8d:5d:0a:fc:db:ac:1d:fe:e0:43:f9:47:84: 37:72:01:ee:bc:35:98:b0:7f:08:0a:51:df:17:93:e1:6a:f0: f2:28:88:54:96:a1:ff:bc:ec:2e:5d:aa:88:75:42:b4:64:17: b2:80:21:85:cd:a8:37:c1:e1:d5:8e:8b:51:5d:0c:36:95:a5: 3d:b2:d6:d4:91:6a:5d:92:49:5c:28:2b:a6:22:74:30:ee:a7: e3:05:1e:32:28:0f:aa:82:d2:d3:98:5e:b0:e9:35:3a:bb:ce: 7a:56:ff:e6:b0:01:a3:2c:7e:6d:13:b5:e9:71:5b:a1:83:d2: 46:12:e8:1c:5b:6f:ce:a3:d0:f1:1c:4b:fc:d7:52:ee:f8:cb: 5f:d4:d9:ef:0c:12:cb:73:7e:03:7b:06:79:97:ac:fa:9b:75: 44:2d:13:a3:ab:15:96:23:46:b8:b7:eb:b7:24:e4:d6:40:7f: 53:73:f2:a4:e8:07:dd:0d:dd:43:41:01:29:8f:99:50:67:d4: 38:f9:7b:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwOENCNjgxOEUzNzRE OTZCOUI1NTUzQTM4Q0IwMUU5MzlBNTRBNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKRsTvNaIXVkbprNmSWM4m/rqveJ83hVV+n5EIMqvY0WFuLdDg fSP+CSpxNqfaIk9QLKZ/i4T4GpKAK6igp1ZVYHa1kw23FVfNENx2jr0awzhxjqwY Jz75jSpATJcPylPIKKfHAcey4wHOXr2G7/mAPbpQgkxzvWwhxMBDuawUBzKEtuyg R8MYuoLPRRJLmHc+YNFtsu7Z+OQDG571jSopSpnZAcw3Kpfu3f7U4577jfutC5K4 yqI8xszGhDb3COz93ye4FJCOEBQWZnws0QVE30qqkg6ai/joSiT6G8ltakrH8iik LQdSAHLahWNabYDgUKpZ2txM6EfpRaKokybPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkIy2gY43TZa5tVU6OMsB6TmlSmQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tJeTJnWTQzVFphNXRWVTZP TXNCNlRtbFNtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wSAwDQYJKoZIhvcNAQELBQADggEBABgdjNxxZ5i2EzJzQ4suYIu/4kDNv8lgqblm SIeybZOQIN8Jg9+qgFBPuc30mEiuJanX95U2dX9cNEOIjV0K/NusHf7gQ/lHhDdy Ae68NZiwfwgKUd8Xk+Fq8PIoiFSWof+87C5dqoh1QrRkF7KAIYXNqDfB4dWOi1Fd DDaVpT2y1tSRal2SSVwoK6YidDDup+MFHjIoD6qC0tOYXrDpNTq7znpW/+awAaMs fm0TtelxW6GD0kYS6Bxbb86j0PEcS/zXUu74y1/U2e8MEstzfgN7BnmXrPqbdUQt E6OrFZYjRri367ck5NZAf1Nz8qToB90N3UNBASmPmVBn1Dj5ewI= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org