$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjRgLCsxaFG8rKRwzumgA0len6A.roa File: kjRgLCsxaFG8rKRwzumgA0len6A.roa (raw, json) Hash identifier: 2fdUxjzOj9B6I47aed7+dZbYNogAlmM+iybHcdGMm6I= Subject key identifier: 92:34:60:2C:2B:31:68:51:BC:AC:A4:70:CE:E9:A0:03:49:5E:9F:A0 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3298 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjRgLCsxaFG8rKRwzumgA0len6A.roa Signing time: Mon 26 Aug 2024 05:31:48 +0000 ROA not before: Mon 26 Aug 2024 05:31:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.194.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12952 (0x3298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9234602C2B316851BCACA470CEE9A003495E9FA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:a1:50:ec:b3:c4:58:e0:93:18:57:96:6e: 85:34:0a:11:65:42:6d:7a:fc:d3:f2:16:2f:7e:bd: 3d:f3:43:81:07:53:be:82:05:8e:8c:6a:36:97:60: f1:c3:ef:f2:67:35:4c:be:1a:f9:8e:85:5f:14:4a: 05:7c:4f:0a:6d:53:11:4a:53:1d:6d:18:25:0c:fa: 13:8f:90:8b:86:24:6c:c6:3b:b1:1b:93:88:42:ed: 22:31:63:1e:8b:8b:ca:42:67:d2:59:40:33:f4:eb: 1f:4c:cb:c2:b2:32:f1:5d:d1:9b:14:ce:a8:70:80: 1d:e2:60:29:b1:77:53:13:c7:dd:f5:50:33:c3:9d: da:a1:09:48:83:e3:7f:a6:bc:ad:df:6f:73:5c:09: eb:39:fe:9c:e3:58:18:8d:c3:b0:ee:35:45:ce:bb: f1:8f:42:64:25:c8:f9:28:ea:5e:18:0d:f9:ff:89: b8:ef:d6:36:0b:9b:24:83:11:1b:19:45:b0:c6:15: 76:37:4c:87:77:af:53:51:df:01:91:1e:59:ee:01: cd:fb:aa:b5:e1:40:9a:39:a8:03:21:eb:14:8c:65: 1e:1f:ec:18:87:c4:48:8c:b9:a6:22:4f:76:19:1e: b2:07:ce:10:e9:32:e9:1a:e8:e3:80:4d:15:15:6a: 1b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:34:60:2C:2B:31:68:51:BC:AC:A4:70:CE:E9:A0:03:49:5E:9F:A0 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjRgLCsxaFG8rKRwzumgA0len6A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.253.0/24 Signature Algorithm: sha256WithRSAEncryption 27:5a:c7:07:5d:fe:74:c3:f1:7c:39:47:a7:0a:d4:93:f3:5b: bb:99:7b:77:11:5b:31:14:0d:80:4a:54:4d:5d:82:60:5b:bf: ee:84:fb:92:37:34:65:51:c7:ba:66:c6:5d:eb:45:8c:06:a0: cc:1c:3b:1c:6d:f2:94:46:3b:b2:f8:a2:57:c9:1f:a8:d9:86: f9:9d:31:09:04:57:d1:65:ae:05:d0:a6:aa:4b:db:da:81:08: a0:7c:fd:69:77:95:0f:f0:ee:0a:72:09:53:10:39:5e:0d:41: cb:b6:02:9b:ed:15:2f:d8:ef:88:29:da:a3:4e:ec:57:f3:e8: 10:b7:6b:13:3e:33:1f:c1:27:63:f8:ec:0b:56:29:85:3f:c7: df:3b:d7:e7:b1:82:a3:b2:aa:65:9e:e0:9c:15:9e:bd:47:81: 22:70:e4:0a:1e:09:de:dc:ce:8c:dd:9f:7f:f5:00:c1:30:7b: 9a:9f:66:56:ff:11:6a:83:4f:66:69:c2:e9:4c:47:21:b0:d6: cb:73:40:a5:e5:06:26:57:37:b2:a5:3e:99:cb:6f:6f:c4:50: dc:51:93:14:78:6b:33:e9:0f:93:65:98:f2:a8:33:34:67:12: 2e:63:57:ba:b5:68:37:7a:c4:67:d3:27:9e:07:13:06:2d:5f: 50:df:88:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkyMzQ2MDJDMkIzMTY4 NTFCQ0FDQTQ3MENFRTlBMDAzNDk1RTlGQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7VqFQ7LPEWOCTGFeWboU0ChFlQm16/NPyFi9+vT3zQ4EHU76C BY6MajaXYPHD7/JnNUy+GvmOhV8USgV8TwptUxFKUx1tGCUM+hOPkIuGJGzGO7Eb k4hC7SIxYx6Li8pCZ9JZQDP06x9My8KyMvFd0ZsUzqhwgB3iYCmxd1MTx931UDPD ndqhCUiD43+mvK3fb3NcCes5/pzjWBiNw7DuNUXOu/GPQmQlyPko6l4YDfn/ibjv 1jYLmySDERsZRbDGFXY3TId3r1NR3wGRHlnuAc37qrXhQJo5qAMh6xSMZR4f7BiH xEiMuaYiT3YZHrIHzhDpMuka6OOATRUVaht1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUkjRgLCsxaFG8rKRwzumgA0len6AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tqUmdMQ3N4YUZHOHJLUnd6 dW1nQTBsZW42QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wv0wDQYJKoZIhvcNAQELBQADggEBACdaxwdd/nTD8Xw5R6cK1JPzW7uZe3cRWzEU DYBKVE1dgmBbv+6E+5I3NGVRx7pmxl3rRYwGoMwcOxxt8pRGO7L4olfJH6jZhvmd MQkEV9FlrgXQpqpL29qBCKB8/Wl3lQ/w7gpyCVMQOV4NQcu2ApvtFS/Y74gp2qNO 7Ffz6BC3axM+Mx/BJ2P47AtWKYU/x9871+exgqOyqmWe4JwVnr1HgSJw5AoeCd7c zozdn3/1AMEwe5qfZlb/EWqDT2ZpwulMRyGw1stzQKXlBiZXN7KlPpnLb2/EUNxR kxR4azPpD5NlmPKoMzRnEi5jV7q1aDd6xGfTJ54HEwYtX1DfiOw= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:22 2024 by rpki-client on console-ams.rpki-client.org