$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nEWOATS72IqEl8TDDloUHIvI7ek.roa File: nEWOATS72IqEl8TDDloUHIvI7ek.roa (raw, json) Hash identifier: PE/Sg8JOo+jgW4G4mo9Xtfdr3OE47GccbEmSmXNB1fU= Subject key identifier: 9C:45:8E:01:34:BB:D8:8A:84:97:C4:C3:0E:5A:14:1C:8B:C8:ED:E9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30DC Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nEWOATS72IqEl8TDDloUHIvI7ek.roa Signing time: Mon 26 Aug 2024 05:29:53 +0000 ROA not before: Mon 26 Aug 2024 05:29:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12508 (0x30dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9C458E0134BBD88A8497C4C30E5A141C8BC8EDE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:62:96:79:11:48:b3:de:55:5d:2c:c7:e7:81: 18:f4:97:34:ee:f4:7d:58:19:5a:a8:77:10:f9:a1: 09:3c:19:26:62:78:ca:75:9a:6a:20:7a:ae:d6:81: 88:71:f3:f8:fe:39:cb:4e:31:2d:21:72:eb:06:d5: 67:45:46:0a:43:02:ac:8a:1d:b7:46:af:d9:c3:4d: f8:00:40:1e:0c:51:e6:0a:9e:46:84:f0:d4:47:69: 67:f1:ea:b2:11:c8:b2:75:7d:4c:63:ea:0b:d7:76: f3:7f:29:24:9d:43:95:78:6f:cc:7c:15:d4:14:be: d2:4c:f9:ba:e8:31:38:a8:c0:61:90:c4:17:ac:85: ed:6b:07:41:62:d8:4e:ae:dd:34:a0:31:dc:1d:cd: 13:a0:7d:84:da:33:1b:99:ff:8e:7a:8c:0f:8a:0a: cc:2d:af:c0:ca:15:b7:8b:18:da:11:c4:24:28:aa: 3f:eb:76:ce:44:74:a7:af:e9:00:66:32:37:21:ae: 75:b6:54:a4:9b:de:69:f0:e1:7d:80:02:7d:60:3d: 6b:1a:65:32:2f:fd:98:73:10:1a:38:13:c0:bf:cc: 00:7e:bd:ad:42:19:b1:d9:16:b0:56:31:61:59:ea: 06:6f:12:9c:07:2e:31:ad:0a:bc:d3:d9:bc:db:e6: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:8E:01:34:BB:D8:8A:84:97:C4:C3:0E:5A:14:1C:8B:C8:ED:E9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nEWOATS72IqEl8TDDloUHIvI7ek.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.119.0/24 Signature Algorithm: sha256WithRSAEncryption ab:f8:39:aa:10:36:f2:56:d6:e4:fd:79:f0:b9:b1:79:fd:af: 0f:e5:5c:d1:77:80:84:9c:93:c8:21:a5:44:da:73:25:27:0c: e3:e3:04:c7:80:ef:22:5b:83:5d:57:45:f5:d0:63:20:74:b7: df:0d:12:da:03:ca:21:e5:7f:3a:78:09:8f:dd:0b:b6:f9:aa: db:58:4b:34:8e:3f:f9:8c:e2:07:10:27:96:bb:40:68:20:c8: c7:34:86:33:e7:5d:90:0f:10:66:13:12:b6:51:be:6f:65:7c: 60:0f:46:04:f7:e4:f2:13:08:47:e7:47:af:39:5f:54:1e:e5: c8:fd:c3:ae:a4:66:be:ea:15:6a:ab:29:9b:d5:5b:8b:6a:1b: 95:a8:f3:eb:8e:38:59:6e:ce:8c:26:15:1f:de:22:63:ca:b7: 98:3a:26:ce:83:33:8b:c2:08:f1:19:80:26:f8:d8:c4:84:2f: c7:7e:fe:fe:83:f2:fb:a5:ab:dc:b9:11:89:b2:68:7c:06:59: 00:42:6c:3a:26:fd:c1:9a:0f:fb:18:79:d6:18:42:c5:0c:da: 80:18:06:64:23:1b:f6:f1:1f:d4:1f:16:b5:a6:ec:06:e2:47: ae:61:76:81:87:61:38:1e:6d:5b:c5:ff:4e:3d:b8:bc:d0:ab: 15:01:87:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDNDU4RTAxMzRCQkQ4 OEE4NDk3QzRDMzBFNUExNDFDOEJDOEVERTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqYpZ5EUiz3lVdLMfngRj0lzTu9H1YGVqodxD5oQk8GSZieMp1 mmogeq7WgYhx8/j+OctOMS0hcusG1WdFRgpDAqyKHbdGr9nDTfgAQB4MUeYKnkaE 8NRHaWfx6rIRyLJ1fUxj6gvXdvN/KSSdQ5V4b8x8FdQUvtJM+broMTiowGGQxBes he1rB0Fi2E6u3TSgMdwdzROgfYTaMxuZ/456jA+KCswtr8DKFbeLGNoRxCQoqj/r ds5EdKev6QBmMjchrnW2VKSb3mnw4X2AAn1gPWsaZTIv/ZhzEBo4E8C/zAB+va1C GbHZFrBWMWFZ6gZvEpwHLjGtCrzT2bzb5s13AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnEWOATS72IqEl8TDDloUHIvI7ekwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25FV09BVFM3MklxRWw4VERE bG9VSEl2STdlay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6XcwDQYJKoZIhvcNAQELBQADggEBAKv4OaoQNvJW1uT9efC5sXn9rw/lXNF3gISc k8ghpUTacyUnDOPjBMeA7yJbg11XRfXQYyB0t98NEtoDyiHlfzp4CY/dC7b5qttY SzSOP/mM4gcQJ5a7QGggyMc0hjPnXZAPEGYTErZRvm9lfGAPRgT35PITCEfnR685 X1Qe5cj9w66kZr7qFWqrKZvVW4tqG5Wo8+uOOFluzowmFR/eImPKt5g6Js6DM4vC CPEZgCb42MSEL8d+/v6D8vulq9y5EYmyaHwGWQBCbDom/cGaD/sYedYYQsUM2oAY BmQjG/bxH9QfFrWm7AbiR65hdoGHYTgebVvF/049uLzQqxUBhyU= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org