$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ktaQQ0wr57QWoqGqnXg0qR6h6FY.roa File: ktaQQ0wr57QWoqGqnXg0qR6h6FY.roa (raw, json) Hash identifier: jfx8by4qkE8SCBWeaF1Gs+nm2tW0ohR16bwfUEzHvf4= Subject key identifier: 92:D6:90:43:4C:2B:E7:B4:16:A2:A1:AA:9D:78:34:A9:1E:A1:E8:56 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30E3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ktaQQ0wr57QWoqGqnXg0qR6h6FY.roa Signing time: Mon 26 Aug 2024 05:29:56 +0000 ROA not before: Mon 26 Aug 2024 05:29:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12515 (0x30e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=92D690434C2BE7B416A2A1AA9D7834A91EA1E856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bd:51:b5:7c:b8:68:0f:23:b2:11:4a:4b:41: 03:ee:a8:52:d3:40:ae:18:8b:0f:62:1c:50:85:88: 3d:47:65:e5:e1:a2:81:21:65:51:85:11:dc:18:dd: 7d:43:60:7f:15:cb:42:31:8b:45:9c:b3:b1:a0:4b: df:89:ac:93:a6:4c:db:fe:87:66:00:cc:bd:d8:e1: ab:7c:bb:e7:d2:44:f5:42:f1:f0:74:ae:c3:01:6e: 0e:45:a7:36:b7:e0:b6:5a:5f:43:6e:0a:42:5e:39: 4b:4e:bb:b2:7c:d2:9f:71:25:8d:9e:f1:fb:d3:40: a5:5a:e4:46:5c:70:c9:83:d2:df:f0:23:37:85:5a: 44:44:8f:a4:99:10:f8:8d:1d:38:03:68:65:cc:0f: 4e:b6:1e:45:05:81:c2:fe:dc:18:5e:2c:56:e6:50: 18:aa:dc:d0:c0:ec:67:ac:c6:54:b6:c8:e0:85:35: b0:9a:02:27:f6:b9:39:40:00:ee:21:49:40:a6:5a: b7:36:bd:e6:85:17:3c:17:d7:07:be:e3:b1:49:4e: 08:77:2b:87:a2:d6:53:4c:60:be:de:3d:2d:fd:0b: 27:d9:83:b3:3c:7d:1f:50:d9:87:03:ea:e1:61:e8: a0:d1:90:ea:95:c3:05:c1:bb:21:c1:39:26:84:da: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D6:90:43:4C:2B:E7:B4:16:A2:A1:AA:9D:78:34:A9:1E:A1:E8:56 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ktaQQ0wr57QWoqGqnXg0qR6h6FY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.88.0/21 Signature Algorithm: sha256WithRSAEncryption 92:2a:e9:6f:ef:77:30:01:6d:12:51:9d:a1:71:9d:40:fa:67: 6e:8e:1d:70:6e:b0:83:45:5c:54:bb:30:10:5a:e1:5f:76:70: 83:ab:6c:8d:08:d5:22:8a:d0:22:d2:55:d9:15:22:ec:86:42: 4a:51:39:75:eb:89:ca:21:37:03:b7:d8:bd:b8:bc:84:9c:dc: 4a:48:ea:5e:69:a6:ed:62:d3:5b:99:3f:f0:ad:76:70:94:4d: 9e:41:bf:7c:f4:f2:4f:10:68:e7:f7:42:69:5e:b8:b2:1c:83: 39:66:c9:eb:81:2b:18:99:50:69:a6:48:71:dd:ba:f4:fd:08: 88:8b:d7:20:bc:87:00:b9:3b:a1:5d:61:ea:6b:1c:c6:0b:f0: 74:8b:49:c2:59:a8:bd:64:54:9b:5c:ac:9d:db:68:d3:3e:f2: 0a:6d:57:fe:b4:15:c5:61:86:93:76:08:90:a2:8c:a8:bc:51: a6:87:4b:4e:a4:a8:71:17:74:ee:9f:72:a1:d0:da:7d:3a:33: f8:64:bc:40:96:69:f9:c0:93:84:2e:fe:14:56:03:99:9c:2a: f8:22:ca:c0:03:eb:86:88:eb:2f:dd:44:0a:15:0b:f8:41:11: 2f:bf:32:bf:9a:35:e0:1e:6a:0b:4a:60:89:ba:43:59:d7:0b: 99:1a:24:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkyRDY5MDQzNEMyQkU3 QjQxNkEyQTFBQTlENzgzNEE5MUVBMUU4NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnvVG1fLhoDyOyEUpLQQPuqFLTQK4Yiw9iHFCFiD1HZeXhooEh ZVGFEdwY3X1DYH8Vy0Ixi0Wcs7GgS9+JrJOmTNv+h2YAzL3Y4at8u+fSRPVC8fB0 rsMBbg5Fpza34LZaX0NuCkJeOUtOu7J80p9xJY2e8fvTQKVa5EZccMmD0t/wIzeF WkREj6SZEPiNHTgDaGXMD062HkUFgcL+3BheLFbmUBiq3NDA7GesxlS2yOCFNbCa Aif2uTlAAO4hSUCmWrc2veaFFzwX1we+47FJTgh3K4ei1lNMYL7ePS39CyfZg7M8 fR9Q2YcD6uFh6KDRkOqVwwXBuyHBOSaE2qC3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUktaQQ0wr57QWoqGqnXg0qR6h6FYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2t0YVFRMHdyNTdRV29xR3Fu WGcwcVI2aDZGWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6FgwDQYJKoZIhvcNAQELBQADggEBAJIq6W/vdzABbRJRnaFxnUD6Z26OHXBusINF XFS7MBBa4V92cIOrbI0I1SKK0CLSVdkVIuyGQkpROXXricohNwO32L24vISc3EpI 6l5ppu1i01uZP/CtdnCUTZ5Bv3z08k8QaOf3QmleuLIcgzlmyeuBKxiZUGmmSHHd uvT9CIiL1yC8hwC5O6FdYeprHMYL8HSLScJZqL1kVJtcrJ3baNM+8gptV/60FcVh hpN2CJCijKi8UaaHS06kqHEXdO6fcqHQ2n06M/hkvECWafnAk4Qu/hRWA5mcKvgi ysAD64aI6y/dRAoVC/hBES+/Mr+aNeAeagtKYIm6Q1nXC5kaJI0= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org