$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/klRtIDDo9IRB8fPJOEklXsJeH80.roa File: klRtIDDo9IRB8fPJOEklXsJeH80.roa (raw, json) Hash identifier: U99laI2j2myBHoFkYUSaCOGeogTkX3DyHrq+KIhNvG4= Subject key identifier: 92:54:6D:20:30:E8:F4:84:41:F1:F3:C9:38:49:25:5E:C2:5E:1F:CD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3131 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/klRtIDDo9IRB8fPJOEklXsJeH80.roa Signing time: Mon 26 Aug 2024 05:30:13 +0000 ROA not before: Mon 26 Aug 2024 05:30:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12593 (0x3131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=92546D2030E8F48441F1F3C93849255EC25E1FCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:d8:de:ad:cc:c9:a7:cb:d6:3d:4c:44:9c: 92:cc:92:95:4b:0b:f0:54:26:17:8c:41:af:ba:e2: 51:c9:0c:86:d7:22:b3:88:6b:1f:d4:5f:5d:74:eb: 3f:af:65:b9:7b:17:0a:ff:8d:91:c3:f5:d8:d6:cb: 24:1c:ed:b2:a4:3d:61:ea:a8:75:a9:bf:1b:3d:c6: a2:70:3c:a1:24:61:d9:b1:b1:b0:d0:23:b5:1e:bd: c2:10:ce:63:1b:fb:e6:7d:e4:35:e5:1e:a3:d1:f0: fc:31:1f:35:20:de:1e:8b:75:7e:49:24:6f:1b:ce: e3:50:a4:5e:a9:20:ca:64:e6:a2:d9:41:97:d3:09: da:fa:52:13:33:83:db:5b:69:88:05:85:91:cb:10: 64:c8:07:83:86:9b:ca:32:3a:87:b9:69:93:6b:bc: 4b:69:e6:2a:ac:95:66:a1:b7:b0:62:df:84:5d:67: 53:e3:4d:24:d2:f6:ce:fe:39:35:6a:87:64:0e:ac: 69:46:59:c7:14:04:d9:3a:b3:cc:37:ef:b7:ce:0c: 2f:57:d9:dc:af:bd:e9:b1:ba:37:4e:95:1c:fe:70: 09:fe:3b:a5:b8:68:9a:8e:bc:3f:9f:38:42:c3:39: 9b:91:1d:83:43:2a:01:ae:b7:dd:95:d6:78:43:5a: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:54:6D:20:30:E8:F4:84:41:F1:F3:C9:38:49:25:5E:C2:5E:1F:CD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/klRtIDDo9IRB8fPJOEklXsJeH80.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.88.0/21 Signature Algorithm: sha256WithRSAEncryption 58:c7:95:92:a6:e7:01:71:75:68:6b:5e:76:c0:3f:eb:1e:3b: 6c:c5:ee:68:21:d4:8d:6e:db:56:4c:2b:83:7f:06:73:8a:67: 8c:21:3d:81:66:1a:20:7e:db:bd:11:c7:d2:04:4c:23:5c:47: 97:33:4b:17:13:c8:3b:55:2b:27:13:3c:bd:00:45:2e:3a:3b: 99:82:2c:8a:c1:b4:e3:6c:87:91:fc:1a:69:14:f0:8f:47:c9: 55:65:79:86:58:f5:ed:03:b6:a5:03:1f:70:d7:43:e4:e7:ec: 9c:a7:bc:a8:79:a7:d2:ff:92:34:9c:f1:b3:b6:16:66:8f:98: dc:60:e8:24:c6:54:12:83:ab:ee:8d:5f:18:c7:8f:68:20:e7: 21:5a:5d:eb:13:71:8d:30:57:0f:b0:9d:56:7a:0a:63:f0:5a: ce:06:99:3d:25:82:a4:e8:36:6e:df:01:6e:75:c5:56:c7:5b: e0:88:e9:24:55:c2:8e:81:ba:4a:65:03:a6:a0:5f:e2:c5:ad: 3e:fd:19:23:e7:d1:99:20:70:95:db:ac:36:89:4d:01:02:1b: 20:a7:5a:ea:aa:45:9c:96:99:36:c7:b4:6f:70:e7:f3:d7:79: 36:6b:a1:00:e8:be:00:5b:13:8d:b6:fc:fd:ee:c9:85:16:74: 2f:88:6e:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkyNTQ2RDIwMzBFOEY0 ODQ0MUYxRjNDOTM4NDkyNTVFQzI1RTFGQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYX9jerczJp8vWPUxEnJLMkpVLC/BUJheMQa+64lHJDIbXIrOI ax/UX1106z+vZbl7Fwr/jZHD9djWyyQc7bKkPWHqqHWpvxs9xqJwPKEkYdmxsbDQ I7UevcIQzmMb++Z95DXlHqPR8PwxHzUg3h6LdX5JJG8bzuNQpF6pIMpk5qLZQZfT Cdr6UhMzg9tbaYgFhZHLEGTIB4OGm8oyOoe5aZNrvEtp5iqslWaht7Bi34RdZ1Pj TSTS9s7+OTVqh2QOrGlGWccUBNk6s8w377fODC9X2dyvvemxujdOlRz+cAn+O6W4 aJqOvD+fOELDOZuRHYNDKgGut92V1nhDWk8xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUklRtIDDo9IRB8fPJOEklXsJeH80wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tsUnRJRERvOUlSQjhmUEpP RWtsWHNKZUg4MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wlgwDQYJKoZIhvcNAQELBQADggEBAFjHlZKm5wFxdWhrXnbAP+seO2zF7mgh1I1u 21ZMK4N/BnOKZ4whPYFmGiB+270Rx9IETCNcR5czSxcTyDtVKycTPL0ARS46O5mC LIrBtONsh5H8GmkU8I9HyVVleYZY9e0DtqUDH3DXQ+Tn7JynvKh5p9L/kjSc8bO2 FmaPmNxg6CTGVBKDq+6NXxjHj2gg5yFaXesTcY0wVw+wnVZ6CmPwWs4GmT0lgqTo Nm7fAW51xVbHW+CI6SRVwo6BukplA6agX+LFrT79GSPn0ZkgcJXbrDaJTQECGyCn WuqqRZyWmTbHtG9w5/PXeTZroQDovgBbE422/P3uyYUWdC+Ibs8= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org