$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nRWhrIgLW0yY3tqat-WRcNwr1fo.roa File: nRWhrIgLW0yY3tqat-WRcNwr1fo.roa (raw, json) Hash identifier: dQJtDVG964fdB768bySKOJ8vWjSdQt0mZW6iolfm9Oo= Subject key identifier: 9D:15:A1:AC:88:0B:5B:4C:98:DE:DA:9A:B7:E5:91:70:DC:2B:D5:FA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30D4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nRWhrIgLW0yY3tqat-WRcNwr1fo.roa Signing time: Mon 26 Aug 2024 05:29:51 +0000 ROA not before: Mon 26 Aug 2024 05:29:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12500 (0x30d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9D15A1AC880B5B4C98DEDA9AB7E59170DC2BD5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:29:f8:5d:44:7b:7a:ca:33:12:7c:5c:9c: eb:c2:58:c8:85:d8:b9:19:98:68:63:4e:91:1b:7a: 97:fe:cc:94:36:96:a7:b0:b5:86:79:3b:be:2b:15: e9:b7:62:bb:a9:df:22:a5:c5:fa:22:78:31:5c:9b: 23:0b:cb:83:39:61:4a:4d:62:6a:04:02:d4:88:bb: d3:0e:2d:a4:4b:ff:59:99:15:d0:d5:db:d3:0e:38: 2a:8e:2b:ee:3f:d7:f0:02:03:92:61:7c:17:6e:21: 57:17:8d:dd:79:aa:ab:91:45:bb:8a:a4:eb:46:af: 97:a5:75:ee:fe:b8:c9:cb:63:82:0e:51:2c:f7:a7: d3:9f:a8:10:f8:87:c0:4a:e2:7a:06:5a:9f:cb:de: ff:c7:dc:08:7f:49:21:20:77:b4:a3:5c:ee:88:06: 59:06:58:e6:52:b9:be:6a:12:a8:df:72:8a:ef:b8: 00:3e:ef:a5:46:d1:3b:6b:07:d9:d4:41:53:1e:ba: e2:44:b9:2c:7f:af:fb:66:a1:6a:fb:c3:b7:7f:19: 61:c5:b9:5f:75:60:7c:2e:c6:84:2a:5e:7e:9f:d9: dc:dc:fb:55:4e:c5:51:be:e7:3c:b3:8e:05:6e:aa: 23:3e:b9:8a:3d:e1:3e:e1:9f:37:de:e1:60:03:72: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:15:A1:AC:88:0B:5B:4C:98:DE:DA:9A:B7:E5:91:70:DC:2B:D5:FA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nRWhrIgLW0yY3tqat-WRcNwr1fo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.76.0/24 Signature Algorithm: sha256WithRSAEncryption 52:d7:33:03:3a:d8:92:88:f4:74:1e:cd:78:ec:1c:1c:b3:9b: 66:57:d3:50:0a:2d:89:fc:4a:7a:c1:a2:52:3d:7e:a1:e1:41: a5:4e:b8:20:db:a8:da:a1:65:93:16:3f:71:9f:62:86:c3:bd: 28:74:2d:aa:31:1f:56:fd:3d:b4:f0:d9:e2:37:ae:79:7b:30: a4:ae:8a:18:b9:c7:9c:09:0d:c0:04:c0:65:03:1b:46:90:9d: 4a:13:ee:5a:a1:ad:ff:86:cc:14:de:78:96:65:c1:c9:f9:24: 56:d7:70:44:d1:9b:71:8f:69:8f:f0:4e:f7:9d:2e:6d:0d:6a: 40:d4:57:c5:78:32:a6:a1:91:9f:d7:a1:c5:dd:79:c7:8f:10: 8d:8b:f1:ec:51:4e:b9:ac:27:67:00:94:69:80:e8:39:9b:c5: 63:35:46:fc:52:1c:59:d6:71:fb:19:58:0b:8a:7c:0e:36:38: a4:4b:b0:12:d2:07:7e:ce:9a:2b:d5:00:e7:45:3f:70:8b:31: 93:a0:c4:41:0d:03:d5:0f:e7:84:72:29:2c:eb:eb:cd:95:2a: cd:c1:90:0c:db:fd:92:9f:6a:68:3f:66:fb:5b:7b:db:7e:f2: 27:3a:79:49:22:99:04:e4:33:49:81:52:52:f4:dd:c6:96:17: 96:a8:78:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlEMTVBMUFDODgwQjVC NEM5OERFREE5QUI3RTU5MTcwREMyQkQ1RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFyCn4XUR7esozEnxcnOvCWMiF2LkZmGhjTpEbepf+zJQ2lqew tYZ5O74rFem3Yrup3yKlxfoieDFcmyMLy4M5YUpNYmoEAtSIu9MOLaRL/1mZFdDV 29MOOCqOK+4/1/ACA5JhfBduIVcXjd15qquRRbuKpOtGr5elde7+uMnLY4IOUSz3 p9OfqBD4h8BK4noGWp/L3v/H3Ah/SSEgd7SjXO6IBlkGWOZSub5qEqjfcorvuAA+ 76VG0TtrB9nUQVMeuuJEuSx/r/tmoWr7w7d/GWHFuV91YHwuxoQqXn6f2dzc+1VO xVG+5zyzjgVuqiM+uYo94T7hnzfe4WADcnlLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnRWhrIgLW0yY3tqat+WRcNwr1fowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25SV2hySWdMVzB5WTN0cWF0 LVdSY053cjFmby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2 6EwwDQYJKoZIhvcNAQELBQADggEBAFLXMwM62JKI9HQezXjsHByzm2ZX01AKLYn8 SnrBolI9fqHhQaVOuCDbqNqhZZMWP3GfYobDvSh0LaoxH1b9PbTw2eI3rnl7MKSu ihi5x5wJDcAEwGUDG0aQnUoT7lqhrf+GzBTeeJZlwcn5JFbXcETRm3GPaY/wTved Lm0NakDUV8V4MqahkZ/XocXdecePEI2L8exRTrmsJ2cAlGmA6DmbxWM1RvxSHFnW cfsZWAuKfA42OKRLsBLSB37OmivVAOdFP3CLMZOgxEENA9UP54RyKSzr682VKs3B kAzb/ZKfamg/Zvtbe9t+8ic6eUkimQTkM0mBUlL03caWF5aoeJU= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:54 2024 by rpki-client on console-fra.rpki-client.org