$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oLMGYNGBQ8c34EkQNGrQDt8gH0k.roa File: oLMGYNGBQ8c34EkQNGrQDt8gH0k.roa (raw, json) Hash identifier: FG7MTZTO4qexzmD6hT8cFK9EKaUNbiUFae92kXY7Je8= Subject key identifier: A0:B3:06:60:D1:81:43:C7:37:E0:49:10:34:6A:D0:0E:DF:20:1F:49 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31D6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oLMGYNGBQ8c34EkQNGrQDt8gH0k.roa Signing time: Mon 26 Aug 2024 05:31:00 +0000 ROA not before: Mon 26 Aug 2024 05:31:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12758 (0x31d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0B30660D18143C737E04910346AD00EDF201F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:fc:5b:d7:51:c6:15:3d:11:62:a0:ef:b7: 91:be:3c:13:5e:84:39:48:9a:13:d5:f8:ed:43:76: 49:a7:d0:51:60:96:87:4c:ed:92:1d:79:9a:31:51: 53:c6:7f:fc:49:a5:45:d6:e8:e2:e0:35:82:08:81: 71:a8:32:2f:8e:3d:9b:4f:32:e2:e5:eb:de:15:22: d6:42:aa:1c:84:c3:39:4f:aa:95:59:31:16:f6:39: af:9e:e0:cf:c6:da:ad:df:e6:95:81:2b:8f:44:0c: 01:d1:77:cc:ab:82:82:2b:84:d4:0c:58:02:d9:90: 48:a6:95:86:03:ac:35:ef:f0:9b:1c:d2:85:76:f3: 31:da:eb:62:bb:5b:fa:35:74:62:2c:b7:76:c1:c1: 07:93:e6:23:13:f5:cc:e9:ab:1f:f4:7c:88:7d:75: bb:a8:70:7b:93:73:0b:b7:b5:37:b9:27:fe:b1:93: 44:02:b8:23:70:1a:de:4c:9f:97:7a:d2:f1:1f:87: 8f:dc:4f:0a:9a:02:8f:05:fa:00:e7:79:bd:3e:c3: 03:d7:2f:a3:3f:22:b1:8b:c1:cb:da:90:83:de:c0: 2b:02:33:51:db:54:93:b2:84:2f:f1:1f:b2:0b:15: 2c:7a:83:a6:12:99:7d:36:1d:72:53:8d:ae:e9:cb: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:06:60:D1:81:43:C7:37:E0:49:10:34:6A:D0:0E:DF:20:1F:49 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oLMGYNGBQ8c34EkQNGrQDt8gH0k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.232.0/21 Signature Algorithm: sha256WithRSAEncryption 89:b2:74:e8:da:f7:3f:f3:86:0e:f4:57:5b:bc:e6:85:2f:cd: 56:7b:29:8b:ce:b6:66:c8:10:d9:e2:6c:a3:58:e2:7b:16:55: 27:cb:29:75:69:4f:0b:cb:ef:7a:43:27:77:15:60:97:3d:27: 09:c7:06:8c:99:47:18:e5:a9:91:cd:bc:29:07:c4:a5:04:1d: c7:69:41:a6:a6:bf:af:d4:58:2e:8b:d4:09:1a:a7:ea:40:45: 6d:8c:39:c4:d6:0e:44:28:9b:77:2c:ce:68:56:ed:ae:75:d6: 0a:d7:ba:80:c3:d0:cd:28:cc:d9:10:79:c2:0b:b0:b1:4b:59: b2:69:61:6e:f4:6f:6b:2d:f8:4c:0a:53:7e:54:e8:ad:7a:c8: 25:32:1c:c0:b2:89:2c:90:2a:dd:bb:5f:7d:79:05:7c:5e:fc: e6:37:cd:49:92:7d:91:00:be:fe:18:7a:34:af:cd:68:cc:89: f0:7b:3f:ba:d1:eb:ec:34:f3:07:5c:b7:e6:d8:e9:cb:da:69: 57:46:39:f2:07:34:93:b0:6d:c1:16:1f:e7:d3:7c:36:01:f1: 2c:d7:19:94:a8:ce:e8:ef:02:97:6c:51:5d:e1:a1:39:8e:84: a3:55:f0:34:c5:8d:0b:43:44:16:b9:ec:97:8e:32:74:ea:43: 29:81:02:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwQjMwNjYwRDE4MTQz QzczN0UwNDkxMDM0NkFEMDBFREYyMDFGNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwVfxb11HGFT0RYqDvt5G+PBNehDlImhPV+O1Ddkmn0FFglodM 7ZIdeZoxUVPGf/xJpUXW6OLgNYIIgXGoMi+OPZtPMuLl694VItZCqhyEwzlPqpVZ MRb2Oa+e4M/G2q3f5pWBK49EDAHRd8yrgoIrhNQMWALZkEimlYYDrDXv8Jsc0oV2 8zHa62K7W/o1dGIst3bBwQeT5iMT9czpqx/0fIh9dbuocHuTcwu3tTe5J/6xk0QC uCNwGt5Mn5d60vEfh4/cTwqaAo8F+gDneb0+wwPXL6M/IrGLwcvakIPewCsCM1Hb VJOyhC/xH7ILFSx6g6YSmX02HXJTja7py2BVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoLMGYNGBQ8c34EkQNGrQDt8gH0kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29MTUdZTkdCUThjMzRFa1FO R3JRRHQ4Z0gway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wugwDQYJKoZIhvcNAQELBQADggEBAImydOja9z/zhg70V1u85oUvzVZ7KYvOtmbI ENnibKNY4nsWVSfLKXVpTwvL73pDJ3cVYJc9JwnHBoyZRxjlqZHNvCkHxKUEHcdp Qaamv6/UWC6L1Akap+pARW2MOcTWDkQom3cszmhW7a511grXuoDD0M0ozNkQecIL sLFLWbJpYW70b2st+EwKU35U6K16yCUyHMCyiSyQKt27X315BXxe/OY3zUmSfZEA vv4YejSvzWjMifB7P7rR6+w08wdct+bY6cvaaVdGOfIHNJOwbcEWH+fTfDYB8SzX GZSozujvApdsUV3hoTmOhKNV8DTFjQtDRBa57JeOMnTqQymBAok= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org