$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNNGhy93AhOt1Cg20b3WkFAUvMc.roa File: mNNGhy93AhOt1Cg20b3WkFAUvMc.roa (raw, json) Hash identifier: 2eYwfH3KpJ8fpqXGKZLq5cB6H/nJmchAdgnJx712fpY= Subject key identifier: 98:D3:46:87:2F:77:02:13:AD:D4:28:36:D1:BD:D6:90:50:14:BC:C7 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 303D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNNGhy93AhOt1Cg20b3WkFAUvMc.roa Signing time: Mon 26 Aug 2024 05:29:17 +0000 ROA not before: Mon 26 Aug 2024 05:29:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12349 (0x303d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=98D346872F770213ADD42836D1BDD6905014BCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:37:45:4d:b1:cd:50:d0:03:86:7b:f9:cc: 5b:4a:91:36:71:08:b0:a2:81:f6:d6:d5:ff:5e:ee: 10:67:b0:31:5d:f5:26:dc:84:e1:34:1d:b0:bd:f1: 50:ce:e8:2e:ac:a0:70:21:ae:aa:4f:7d:4b:d2:47: 0b:7e:91:d8:4e:34:30:99:6b:9b:a4:36:03:cc:fa: 1d:72:2c:63:f8:47:fa:14:be:25:3a:3f:51:25:81: 63:0e:21:08:3b:4f:d1:0e:22:c9:1e:6b:a0:24:ec: f8:39:17:f2:fe:64:73:e7:41:f7:e6:35:18:5b:73: 9d:3a:06:57:78:5c:af:43:2c:ef:f2:69:ff:bd:d9: 18:de:6f:0d:c8:65:bb:77:37:98:1f:82:61:03:b4: 3a:b6:5a:bd:77:23:27:54:6d:df:3d:57:0b:ee:e0: 5a:56:5d:f3:1f:6d:9a:23:57:d2:dd:3b:da:b1:2f: 50:5e:90:a8:08:cd:3a:e0:e3:bc:6a:4c:60:bc:d2: 1f:d2:a2:84:a3:c5:17:a2:06:7e:6b:5f:ab:8f:df: b3:45:ac:9e:c1:99:3f:ff:76:28:44:1a:7f:ec:f3: c7:e7:f8:72:4b:d7:a1:17:6f:ae:ba:a3:b8:8b:32: 44:56:c1:c7:4d:11:fd:2e:66:be:e9:4b:ba:95:a0: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D3:46:87:2F:77:02:13:AD:D4:28:36:D1:BD:D6:90:50:14:BC:C7 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNNGhy93AhOt1Cg20b3WkFAUvMc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.72.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:c5:28:5d:86:ae:9c:64:0f:a1:f2:0c:20:d5:3f:6c:6f:c4: 2f:ce:6b:5d:03:e0:7f:68:b4:2f:ae:ca:a9:4d:40:8c:9b:b6: 62:1a:43:4b:ff:32:e0:80:d0:cd:34:64:ad:12:b1:f2:21:be: 6c:ed:b6:5a:7c:90:39:67:b9:19:13:8f:79:c0:8b:de:f5:5b: 7c:14:86:9b:23:a3:39:b4:fc:4c:23:8e:3a:fb:e5:af:88:da: eb:7c:61:82:70:43:42:d7:6a:62:4f:12:ef:79:c9:c0:a7:65: ad:bb:99:4a:a6:14:93:d9:7e:cd:4d:84:b3:a1:ed:df:90:ad: f7:3e:10:8a:2d:d8:bd:88:14:bb:63:d4:35:e2:93:39:aa:96: 44:af:f1:e4:60:e4:f0:06:81:cf:1c:16:35:6d:aa:12:36:18: e2:05:fa:fe:ab:09:07:4e:34:35:b2:63:09:65:16:18:2e:64: 66:f4:af:82:f9:65:03:11:45:9c:2c:53:ea:be:ee:01:76:5d: 32:d8:07:a9:94:1c:c8:96:8e:e3:ec:51:57:5b:66:af:16:75: a4:ab:0a:dc:5e:cf:e9:7b:c7:98:59:12:e5:dd:a9:57:47:ab: 7d:32:b8:59:1c:f9:04:3e:fd:b9:d1:78:f9:13:dc:9d:e0:bf: 18:f3:30:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk4RDM0Njg3MkY3NzAy MTNBREQ0MjgzNkQxQkRENjkwNTAxNEJDQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzczdFTbHNUNADhnv5zFtKkTZxCLCigfbW1f9e7hBnsDFd9Sbc hOE0HbC98VDO6C6soHAhrqpPfUvSRwt+kdhONDCZa5ukNgPM+h1yLGP4R/oUviU6 P1ElgWMOIQg7T9EOIskea6Ak7Pg5F/L+ZHPnQffmNRhbc506Bld4XK9DLO/yaf+9 2Rjebw3IZbt3N5gfgmEDtDq2Wr13IydUbd89Vwvu4FpWXfMfbZojV9LdO9qxL1Be kKgIzTrg47xqTGC80h/SooSjxReiBn5rX6uP37NFrJ7BmT//dihEGn/s88fn+HJL 16EXb666o7iLMkRWwcdNEf0uZr7pS7qVoDgfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmNNGhy93AhOt1Cg20b3WkFAUvMcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21OTkdoeTkzQWhPdDFDZzIw YjNXa0ZBVXZNYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w0gwDQYJKoZIhvcNAQELBQADggEBABvFKF2GrpxkD6HyDCDVP2xvxC/Oa10D4H9o tC+uyqlNQIybtmIaQ0v/MuCA0M00ZK0SsfIhvmzttlp8kDlnuRkTj3nAi971W3wU hpsjozm0/Ewjjjr75a+I2ut8YYJwQ0LXamJPEu95ycCnZa27mUqmFJPZfs1NhLOh 7d+Qrfc+EIot2L2IFLtj1DXikzmqlkSv8eRg5PAGgc8cFjVtqhI2GOIF+v6rCQdO NDWyYwllFhguZGb0r4L5ZQMRRZwsU+q+7gF2XTLYB6mUHMiWjuPsUVdbZq8WdaSr Ctxez+l7x5hZEuXdqVdHq30yuFkc+QQ+/bnRePkT3J3gvxjzMNY= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org