$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lB8DAtHVtk1-eJndniYQpRl3k4s.roa File: lB8DAtHVtk1-eJndniYQpRl3k4s.roa (raw, json) Hash identifier: UF10hGyUlK2/EUmlZ1u1Q/tgHuxl8eDY1hVXB+FIwz0= Subject key identifier: 94:1F:03:02:D1:D5:B6:4D:7E:78:99:DD:9E:26:10:A5:19:77:93:8B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3219 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lB8DAtHVtk1-eJndniYQpRl3k4s.roa Signing time: Mon 26 Aug 2024 05:31:16 +0000 ROA not before: Mon 26 Aug 2024 05:31:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12825 (0x3219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=941F0302D1D5B64D7E7899DD9E2610A51977938B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:63:ac:48:97:36:6a:ea:eb:f0:0a:e4:27:ea: 92:0d:6a:f2:5f:2f:e2:c3:a7:83:06:ff:4a:67:f0: 13:fb:d0:67:b5:fd:dc:f8:bc:40:b4:60:46:21:35: 61:4b:d7:fd:6e:21:09:32:7a:8f:70:03:83:6f:15: 96:09:78:3f:00:2d:ea:80:8b:60:08:83:36:c0:b3: 56:c2:cb:c6:f2:9f:df:b6:97:b3:15:82:46:6b:a1: 32:b5:5a:f5:fe:f3:b2:69:ed:72:59:3c:3a:42:7a: 34:28:1c:44:d2:b5:76:10:88:ea:d8:cb:d0:42:2d: ce:1d:dc:df:31:05:39:6b:49:77:0d:46:d7:77:17: 9c:ba:ef:a4:89:63:04:f1:32:1e:a1:ce:84:3f:72: bf:59:85:48:c6:97:a1:ea:bf:2d:cd:bd:98:d5:fd: 76:49:bf:83:f0:9f:c3:4a:75:96:71:25:35:98:ce: 28:d5:22:cc:89:d3:69:ab:9e:1d:d8:52:79:52:83: 8c:d1:4c:9e:09:30:61:62:c6:e7:c9:02:c7:b6:89: 34:85:13:71:ae:ed:3f:01:ee:4a:69:19:5c:b1:07: e8:7b:91:b8:2a:2e:ec:78:ad:44:97:29:12:49:65: 31:47:5c:5a:4b:f1:d1:a3:e6:c3:24:8e:8d:a1:65: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:03:02:D1:D5:B6:4D:7E:78:99:DD:9E:26:10:A5:19:77:93:8B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lB8DAtHVtk1-eJndniYQpRl3k4s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.0.0/14 Signature Algorithm: sha256WithRSAEncryption 9c:24:cd:cc:61:3c:5a:2a:ee:ff:5d:16:6b:7a:a6:be:97:37: 5d:d0:e8:73:ee:2f:5f:77:a1:71:b8:19:ab:d0:7d:29:3d:c2: 02:e7:95:6e:d9:c1:54:77:d9:27:3f:8e:53:79:37:3b:c0:6d: 9b:a3:9d:2c:40:f4:18:de:be:14:1a:2e:24:e6:97:60:43:36: b0:61:98:18:37:b4:69:20:7f:f7:a1:85:62:04:c1:36:48:3f: 7c:37:62:27:96:41:77:79:7b:aa:c0:76:3d:03:ff:c6:b7:7d: 59:d3:e7:77:39:a5:99:21:71:ec:58:f5:0f:b5:e8:24:c4:ea: 03:b3:c9:7d:6f:d5:3a:f3:27:d9:a3:61:c8:94:2d:ae:31:2a: dd:2b:de:49:ea:f4:8c:9c:8e:c9:81:5c:ee:fe:59:1d:22:c9: 8b:3f:b1:9e:63:ea:4a:0b:b3:94:e2:59:d8:bc:ad:03:c7:c7: d2:95:3b:15:ba:07:b4:3f:de:14:12:6d:55:f4:cc:65:c3:ce: 3f:17:f3:74:cf:84:07:26:0b:af:7d:d3:85:cc:64:c9:35:9c: 93:5d:74:12:43:1f:ee:57:e9:0e:d4:6d:b7:76:56:2d:77:05: 9f:8d:78:17:51:2a:7f:db:9d:56:48:2b:81:2c:4c:b8:2d:d7: f1:f7:78:dd -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICMhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0MUYwMzAyRDFENUI2 NEQ3RTc4OTlERDlFMjYxMEE1MTk3NzkzOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnY6xIlzZq6uvwCuQn6pINavJfL+LDp4MG/0pn8BP70Ge1/dz4 vEC0YEYhNWFL1/1uIQkyeo9wA4NvFZYJeD8ALeqAi2AIgzbAs1bCy8byn9+2l7MV gkZroTK1WvX+87Jp7XJZPDpCejQoHETStXYQiOrYy9BCLc4d3N8xBTlrSXcNRtd3 F5y676SJYwTxMh6hzoQ/cr9ZhUjGl6Hqvy3NvZjV/XZJv4Pwn8NKdZZxJTWYzijV IsyJ02mrnh3YUnlSg4zRTJ4JMGFixufJAse2iTSFE3Gu7T8B7kppGVyxB+h7kbgq Lux4rUSXKRJJZTFHXFpL8dGj5sMkjo2hZTnXAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUlB8DAtHVtk1+eJndniYQpRl3k4swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xCOERBdEhWdGsxLWVKbmRu aVlRcFJsM2s0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ7 wDANBgkqhkiG9w0BAQsFAAOCAQEAnCTNzGE8Wiru/10Wa3qmvpc3XdDoc+4vX3eh cbgZq9B9KT3CAueVbtnBVHfZJz+OU3k3O8Btm6OdLED0GN6+FBouJOaXYEM2sGGY GDe0aSB/96GFYgTBNkg/fDdiJ5ZBd3l7qsB2PQP/xrd9WdPndzmlmSFx7Fj1D7Xo JMTqA7PJfW/VOvMn2aNhyJQtrjEq3SveSer0jJyOyYFc7v5ZHSLJiz+xnmPqSguz lOJZ2LytA8fH0pU7FboHtD/eFBJtVfTMZcPOPxfzdM+EByYLr33ThcxkyTWck110 EkMf7lfpDtRtt3ZWLXcFn414F1Eqf9udVkgrgSxMuC3X8fd43Q== -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org