$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mS7QsnUBNaZ4Q5hfDYXaN2JbvJ4.roa File: mS7QsnUBNaZ4Q5hfDYXaN2JbvJ4.roa (raw, json) Hash identifier: g45JAJ3pQai+xYcownV4N4YD+cHFqcNBmiiPReAULXU= Subject key identifier: 99:2E:D0:B2:75:01:35:A6:78:43:98:5F:0D:85:DA:37:62:5B:BC:9E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FEF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mS7QsnUBNaZ4Q5hfDYXaN2JbvJ4.roa Signing time: Mon 26 Aug 2024 05:28:59 +0000 ROA not before: Mon 26 Aug 2024 05:28:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12271 (0x2fef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=992ED0B2750135A67843985F0D85DA37625BBC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:fc:06:74:2e:60:13:fc:ff:d0:9f:42:ca: 0e:74:c5:cd:a7:42:81:94:a8:02:b6:8a:23:f2:0b: d5:13:b5:9d:05:5b:f5:c7:71:24:8b:78:16:d7:f1: 8a:9f:81:f2:db:ca:32:17:b6:bf:66:5b:ea:1e:fc: 89:d5:47:ac:6e:07:9c:eb:ac:a0:ba:00:a6:89:61: 31:0d:be:7a:ba:ea:7c:9a:e7:c3:69:3a:28:8b:92: b2:38:f0:ca:a8:d6:71:14:e0:b1:03:86:6f:38:20: 6b:1f:14:a9:0a:21:12:38:e5:64:5a:05:d3:12:26: 79:31:ec:5a:4f:ea:68:48:a9:27:db:36:70:09:98: d8:73:58:12:76:b0:47:6c:54:9d:5e:a1:80:18:f7: 77:0c:eb:4f:b3:3f:1c:29:65:ed:a7:e8:b4:5b:5e: a3:44:4d:e2:55:cd:1b:c7:81:04:dd:9c:81:4c:6b: fb:73:8b:d5:5b:89:45:2d:2a:7d:fb:b1:be:aa:e7: cd:14:b7:87:34:37:a8:23:0d:2e:42:53:82:c6:93: c3:da:51:e5:62:16:73:90:ce:7c:66:5f:41:57:aa: a6:cb:2b:ef:cf:c1:55:52:68:6d:c6:93:b3:dd:1f: 66:88:52:be:8c:f8:cb:e7:44:9b:64:06:1d:a8:de: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2E:D0:B2:75:01:35:A6:78:43:98:5F:0D:85:DA:37:62:5B:BC:9E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mS7QsnUBNaZ4Q5hfDYXaN2JbvJ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.232.0/22 Signature Algorithm: sha256WithRSAEncryption 26:c9:b3:73:bc:9c:5a:e7:e6:02:0c:80:db:e5:e2:6d:76:4e: 13:9d:90:51:75:c4:4a:09:b4:b4:12:f7:f5:8c:15:85:08:27: b8:76:44:37:e0:fc:4a:79:50:58:65:0d:27:83:12:f0:cb:e4: dc:16:95:29:30:b4:a1:77:b7:79:5f:05:18:ca:32:74:54:7b: 71:0d:9f:da:9f:e9:3e:1a:76:a4:2a:47:da:40:10:60:62:41: b7:cd:a6:55:9e:37:e8:2e:4b:cd:18:f3:3f:95:db:4f:1b:60: 87:b6:05:6b:af:6a:08:7f:46:03:37:50:a6:e6:32:16:5d:33: 28:5c:2d:14:7b:fd:a6:e9:b4:42:59:b8:5f:dc:a8:5a:7c:c9: f3:07:f4:05:e8:3b:50:e0:c2:30:6e:38:ee:b4:b9:cb:72:95: 34:c1:6e:f3:61:4f:29:18:01:43:e7:21:4e:ac:c9:5f:69:5e: 3d:72:7b:18:a6:68:91:4d:3e:b8:87:37:16:54:be:6f:d6:76: 0b:7c:86:a0:59:11:10:2a:db:ee:ae:9a:ca:bb:c6:07:24:de: a6:59:8e:d0:9a:62:8f:38:3f:22:d8:62:af:2d:40:47:a0:47: 68:d3:07:64:9f:44:b8:9c:5c:15:16:c4:44:79:0c:38:d9:3b: 81:31:01:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5MkVEMEIyNzUwMTM1 QTY3ODQzOTg1RjBEODVEQTM3NjI1QkJDOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXe/wGdC5gE/z/0J9Cyg50xc2nQoGUqAK2iiPyC9UTtZ0FW/XH cSSLeBbX8YqfgfLbyjIXtr9mW+oe/InVR6xuB5zrrKC6AKaJYTENvnq66nya58Np OiiLkrI48Mqo1nEU4LEDhm84IGsfFKkKIRI45WRaBdMSJnkx7FpP6mhIqSfbNnAJ mNhzWBJ2sEdsVJ1eoYAY93cM60+zPxwpZe2n6LRbXqNETeJVzRvHgQTdnIFMa/tz i9VbiUUtKn37sb6q580Ut4c0N6gjDS5CU4LGk8PaUeViFnOQznxmX0FXqqbLK+/P wVVSaG3Gk7PdH2aIUr6M+MvnRJtkBh2o3jhTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUmS7QsnUBNaZ4Q5hfDYXaN2JbvJ4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21TN1FzblVCTmFaNFE1aGZE WVhhTjJKYnZKNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wOgwDQYJKoZIhvcNAQELBQADggEBACbJs3O8nFrn5gIMgNvl4m12ThOdkFF1xEoJ tLQS9/WMFYUIJ7h2RDfg/Ep5UFhlDSeDEvDL5NwWlSkwtKF3t3lfBRjKMnRUe3EN n9qf6T4adqQqR9pAEGBiQbfNplWeN+guS80Y8z+V208bYIe2BWuvagh/RgM3UKbm MhZdMyhcLRR7/abptEJZuF/cqFp8yfMH9AXoO1DgwjBuOO60uctylTTBbvNhTykY AUPnIU6syV9pXj1yeximaJFNPriHNxZUvm/Wdgt8hqBZERAq2+6umsq7xgck3qZZ jtCaYo84PyLYYq8tQEegR2jTB2SfRLicXBUWxER5DDjZO4ExAXQ= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org