$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mFA5JyZDtrzm4FE1S6rCAjR1830.roa File: mFA5JyZDtrzm4FE1S6rCAjR1830.roa (raw, json) Hash identifier: f6229L51NVE6gqiaeAvtnBEaDSAINWif2KHyuR4GnEc= Subject key identifier: 98:50:39:27:26:43:B6:BC:E6:E0:51:35:4B:AA:C2:02:34:75:F3:7D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3031 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mFA5JyZDtrzm4FE1S6rCAjR1830.roa Signing time: Mon 26 Aug 2024 05:29:14 +0000 ROA not before: Mon 26 Aug 2024 05:29:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12337 (0x3031) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=985039272643B6BCE6E051354BAAC2023475F37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:75:68:c3:37:d4:51:4d:11:8c:23:94:f1: d1:ad:c6:6e:83:75:7a:49:ab:90:7e:9b:1a:62:74: f8:7f:a1:51:e3:02:ec:04:b0:22:1e:61:7a:62:f8: 38:37:8a:da:7b:92:58:97:8a:ac:18:a6:4c:5d:9a: ee:0a:74:b0:eb:68:11:7f:70:40:b8:e5:ba:f9:0b: 9d:7c:a6:f6:5f:e3:19:80:d5:7a:92:85:77:38:2b: 46:a9:2f:99:14:6b:98:7d:99:b4:38:0f:13:03:82: b8:72:08:3b:ae:3f:b8:17:4c:0c:bb:50:a3:2f:2c: e0:c0:80:8d:d0:96:ee:66:3a:e2:62:44:a0:58:87: 6b:11:07:3a:dd:09:40:db:42:31:a1:ae:f2:dc:93: a5:1c:70:d6:1d:63:df:07:f3:32:3d:35:1d:54:ea: 51:41:79:94:c0:77:81:75:48:c0:67:5c:21:01:ea: ab:62:de:c5:3a:39:40:44:f6:5b:f9:3d:cd:20:ed: 96:fe:4d:f3:1e:86:dc:43:22:58:88:56:27:ec:e7: 13:2d:fa:98:90:6d:05:f9:6d:2f:32:e6:82:16:20: 1c:29:8b:ea:29:cb:c5:8f:44:9c:f9:2e:63:11:71: f1:67:9f:dd:ba:4e:e9:bc:14:12:b6:19:ca:56:f1: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:50:39:27:26:43:B6:BC:E6:E0:51:35:4B:AA:C2:02:34:75:F3:7D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mFA5JyZDtrzm4FE1S6rCAjR1830.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/19 Signature Algorithm: sha256WithRSAEncryption 84:ef:ff:4d:4e:18:a8:1b:38:7a:47:45:dc:26:24:b7:b3:37: 33:47:ba:10:f8:e3:aa:74:f6:37:b9:15:82:93:00:66:39:e3: 75:f0:15:47:b0:87:77:9b:fa:00:ec:4d:cc:45:6a:6f:fd:a5: e6:0b:6b:5c:ab:bf:f1:36:1b:b9:78:ef:84:51:8a:6a:8b:39: 8d:85:02:89:c1:7d:73:7b:12:e3:ab:9d:61:f1:42:c0:a0:86: 94:91:8b:92:27:91:79:ac:23:f4:6b:58:62:16:ab:43:34:a0: a0:1e:be:ce:40:15:d6:f8:70:6d:a0:7d:42:c2:35:07:eb:b6: 66:eb:f5:f5:fd:19:7e:b4:df:ab:cc:aa:ba:94:f3:8f:12:e9: 19:6f:76:43:57:ff:2e:bd:4f:dc:fc:40:f1:84:40:e5:8c:50: 7e:de:97:71:be:0f:19:ab:ea:20:91:ca:39:1c:b8:9c:75:93: 6e:c3:5e:c3:36:33:f0:42:07:30:80:04:22:a9:f4:e8:5a:e0: c6:19:da:68:29:58:58:27:9d:cf:95:98:5e:ce:8a:b9:85:50: 75:bc:e0:46:d9:68:cd:a5:4b:ef:95:b8:15:d7:f4:9e:2a:bf: bd:37:be:7e:4d:5f:c2:ba:ca:32:66:e1:5a:09:2c:6b:25:59: 1e:9b:01:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk4NTAzOTI3MjY0M0I2 QkNFNkUwNTEzNTRCQUFDMjAyMzQ3NUYzN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd9nVowzfUUU0RjCOU8dGtxm6DdXpJq5B+mxpidPh/oVHjAuwE sCIeYXpi+Dg3itp7kliXiqwYpkxdmu4KdLDraBF/cEC45br5C518pvZf4xmA1XqS hXc4K0apL5kUa5h9mbQ4DxMDgrhyCDuuP7gXTAy7UKMvLODAgI3Qlu5mOuJiRKBY h2sRBzrdCUDbQjGhrvLck6UccNYdY98H8zI9NR1U6lFBeZTAd4F1SMBnXCEB6qti 3sU6OUBE9lv5Pc0g7Zb+TfMehtxDIliIVifs5xMt+piQbQX5bS8y5oIWIBwpi+op y8WPRJz5LmMRcfFnn926Tum8FBK2GcpW8Zq5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmFA5JyZDtrzm4FE1S6rCAjR1830wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21GQTVKeVpEdHJ6bTRGRTFT NnJDQWpSMTgzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2 6MAwDQYJKoZIhvcNAQELBQADggEBAITv/01OGKgbOHpHRdwmJLezNzNHuhD446p0 9je5FYKTAGY543XwFUewh3eb+gDsTcxFam/9peYLa1yrv/E2G7l474RRimqLOY2F AonBfXN7EuOrnWHxQsCghpSRi5InkXmsI/RrWGIWq0M0oKAevs5AFdb4cG2gfULC NQfrtmbr9fX9GX6036vMqrqU848S6RlvdkNX/y69T9z8QPGEQOWMUH7el3G+Dxmr 6iCRyjkcuJx1k27DXsM2M/BCBzCABCKp9Oha4MYZ2mgpWFgnnc+VmF7OirmFUHW8 4EbZaM2lS++VuBXX9J4qv703vn5NX8K6yjJm4VoJLGslWR6bAXg= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:58 2024 by rpki-client on console-fra.rpki-client.org