$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-qnRSbA3u23VP9CnKNqM2n3qTk.roa File: m-qnRSbA3u23VP9CnKNqM2n3qTk.roa (raw, json) Hash identifier: etPKOUO4v8Fu7/S6dPw0Dbj/S+OcFQP2olPm2MVPslg= Subject key identifier: 9B:EA:A7:45:26:C0:DE:ED:B7:54:FF:42:9C:A3:6A:33:69:F7:A9:39 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3243 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-qnRSbA3u23VP9CnKNqM2n3qTk.roa Signing time: Mon 26 Aug 2024 05:31:29 +0000 ROA not before: Mon 26 Aug 2024 05:31:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12867 (0x3243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9BEAA74526C0DEEDB754FF429CA36A3369F7A939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:5e:27:36:f5:45:93:f1:8b:2d:11:cf:73: 17:eb:0b:c9:06:17:92:a6:c0:25:ea:b7:4f:f8:ac: c5:85:17:2f:f3:de:a8:6f:41:60:75:ac:76:e5:46: 24:5b:64:b3:4f:38:f4:74:de:76:6f:8c:cf:44:b6: ab:92:73:2c:6d:66:c1:e6:64:0a:ac:ec:cf:ce:88: 1e:1d:24:d2:3b:44:f6:05:38:49:7e:85:53:df:bb: 4c:db:0e:ea:51:83:4e:6a:9c:ce:c0:46:71:3d:04: 99:24:8b:58:88:68:61:a9:95:28:b2:f1:9f:e6:69: be:22:a0:5f:68:2d:fd:f5:f1:cb:a7:e1:bb:1c:03: 55:c2:01:5f:d6:58:a1:a2:94:56:a6:82:7f:f9:a0: e6:fc:48:d8:86:54:b4:e6:78:8d:7f:41:d1:e5:f4: 72:6f:0e:da:2a:a2:0c:6b:ca:26:a9:77:98:c2:dd: dd:ac:20:22:a6:eb:8c:96:93:b7:d0:6d:01:6a:0c: d6:75:ef:19:52:55:23:0e:2e:69:07:9e:d0:30:5b: e9:12:68:86:e5:71:79:36:fe:95:df:63:c8:68:f7: 91:92:7d:4c:cb:b2:8b:f0:b6:9d:a3:66:e6:2d:ef: 24:33:59:24:5f:05:21:ca:82:2c:8d:a8:42:17:82: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EA:A7:45:26:C0:DE:ED:B7:54:FF:42:9C:A3:6A:33:69:F7:A9:39 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-qnRSbA3u23VP9CnKNqM2n3qTk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.131.0/24 Signature Algorithm: sha256WithRSAEncryption 67:56:87:08:f2:26:6f:c5:45:3f:d8:d7:d4:e2:8e:c6:b4:2f: d3:44:5c:9d:d2:53:2a:57:e6:96:b4:77:b4:3f:16:28:3d:39: ab:68:2f:82:79:af:82:e6:ac:f7:22:e1:37:ed:75:fa:e3:e8: 17:70:80:bc:74:38:2d:a6:82:c4:4c:4c:54:5f:a0:d1:6a:5f: e0:c8:dc:63:a8:6a:03:a3:52:91:b5:e5:c1:90:d8:58:f2:5f: be:90:4e:de:f8:dd:c1:58:e8:8e:26:27:e7:69:0f:11:0f:7a: 08:f4:b4:25:b5:59:b9:e5:a7:db:19:0c:91:fb:1d:06:2f:3b: f3:0e:b6:1c:82:ad:1b:43:37:7e:a5:2b:9b:61:05:91:4f:ca: a2:ea:51:10:f2:a2:98:8e:bd:76:42:f3:31:8b:f2:96:0f:13: 9d:2f:c2:ec:e1:a6:8f:96:38:fb:f5:6e:af:61:32:39:fd:dc: 90:a8:f0:29:76:ea:f6:c2:3a:38:6d:b8:a2:ab:1e:ad:41:ce: 00:38:54:cf:1e:2b:00:7d:fd:c3:93:17:47:12:91:29:69:ab: fe:19:38:9d:cf:71:8d:ed:46:50:81:87:65:cc:73:fe:d1:c2: e0:ac:e2:d5:ec:c9:99:32:c8:4b:ae:6e:9b:a8:08:aa:d7:44: 8b:fc:35:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCRUFBNzQ1MjZDMERF RURCNzU0RkY0MjlDQTM2QTMzNjlGN0E5MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2114nNvVFk/GLLRHPcxfrC8kGF5KmwCXqt0/4rMWFFy/z3qhv QWB1rHblRiRbZLNPOPR03nZvjM9EtquScyxtZsHmZAqs7M/OiB4dJNI7RPYFOEl+ hVPfu0zbDupRg05qnM7ARnE9BJkki1iIaGGplSiy8Z/mab4ioF9oLf318cun4bsc A1XCAV/WWKGilFamgn/5oOb8SNiGVLTmeI1/QdHl9HJvDtoqogxryiapd5jC3d2s ICKm64yWk7fQbQFqDNZ17xlSVSMOLmkHntAwW+kSaIblcXk2/pXfY8ho95GSfUzL sovwtp2jZuYt7yQzWSRfBSHKgiyNqEIXgnXpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUm+qnRSbA3u23VP9CnKNqM2n3qTkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL20tcW5SU2JBM3UyM1ZQOUNu S05xTTJuM3FUay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYMwDQYJKoZIhvcNAQELBQADggEBAGdWhwjyJm/FRT/Y19Tijsa0L9NEXJ3SUypX 5pa0d7Q/Fig9OatoL4J5r4LmrPci4Tftdfrj6BdwgLx0OC2mgsRMTFRfoNFqX+DI 3GOoagOjUpG15cGQ2FjyX76QTt743cFY6I4mJ+dpDxEPegj0tCW1Wbnlp9sZDJH7 HQYvO/MOthyCrRtDN36lK5thBZFPyqLqURDyopiOvXZC8zGL8pYPE50vwuzhpo+W OPv1bq9hMjn93JCo8Cl26vbCOjhtuKKrHq1BzgA4VM8eKwB9/cOTF0cSkSlpq/4Z OJ3PcY3tRlCBh2XMc/7RwuCs4tXsyZkyyEuubpuoCKrXRIv8NbA= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org