$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oOLWR6lqEf3AiSk3WLoy9TriBfo.roa File: oOLWR6lqEf3AiSk3WLoy9TriBfo.roa (raw, json) Hash identifier: Vb/OgAiiYe3ONNUwglpoPVccykAiLeMEGXI9V8brGJ8= Subject key identifier: A0:E2:D6:47:A9:6A:11:FD:C0:89:29:37:58:BA:32:F5:3A:E2:05:FA Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3037 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oOLWR6lqEf3AiSk3WLoy9TriBfo.roa Signing time: Mon 26 Aug 2024 05:29:15 +0000 ROA not before: Mon 26 Aug 2024 05:29:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12343 (0x3037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0E2D647A96A11FDC089293758BA32F53AE205FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:8b:f2:d3:7e:13:cf:fb:89:af:e8:d5:08: a9:d5:af:d4:a7:c9:0d:53:17:2b:37:40:4a:d0:39: 5c:eb:3d:e7:63:43:bb:e5:e3:8d:8a:41:41:b4:be: d3:10:86:84:b7:ab:20:86:a6:d3:75:e2:58:2e:56: ab:5d:05:bf:06:4c:24:33:fb:0e:1e:0a:6c:4f:53: c8:52:b3:83:b6:0c:e9:dc:23:cf:eb:e4:6f:d8:0c: cb:57:4e:07:96:1a:59:94:4e:ce:89:fa:f0:d4:8a: e4:49:f5:c4:54:55:ef:b0:6b:a8:c9:13:64:23:92: 77:d7:cc:3a:77:99:9b:1b:87:9d:05:37:2a:82:80: 56:99:95:05:d4:c7:c3:b4:b4:6f:0c:3a:0e:f4:4c: 49:05:7f:7d:7b:10:cc:cd:12:84:b0:dd:78:b0:8e: e6:88:01:24:d4:ad:4f:22:ad:94:5f:9c:18:ff:89: 22:69:70:f4:49:fc:07:c0:50:39:93:cd:d2:ae:58: f3:9a:73:78:1e:eb:e2:06:3a:bc:5d:8e:19:64:88: 26:37:f8:14:36:37:90:d2:3f:d1:c8:32:c2:ad:83: d7:84:9b:12:6f:5f:1a:b8:13:91:5f:4b:4c:20:7c: 0d:a9:77:d6:e5:96:49:33:ab:d2:a5:d5:99:f1:dc: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E2:D6:47:A9:6A:11:FD:C0:89:29:37:58:BA:32:F5:3A:E2:05:FA X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oOLWR6lqEf3AiSk3WLoy9TriBfo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.220.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:f2:1f:a5:fe:c1:c4:fa:4e:63:f5:13:b6:cc:24:5f:fd:38: 62:76:0d:e6:79:11:64:f7:37:87:52:84:ab:69:2c:14:dc:6f: db:80:b9:47:0b:fc:76:33:46:9a:9f:d1:63:b6:06:b8:7b:73: 92:36:11:d9:23:0d:63:4b:a9:0b:e6:69:0b:72:27:65:0a:3c: 02:cb:17:65:8b:4a:b7:8d:5b:f2:d3:a7:35:6c:17:72:53:f2: 26:f3:95:95:21:08:ae:b4:e1:7b:db:72:0e:d3:3a:ec:6e:5e: 56:90:53:2f:e9:13:f4:6f:9c:fb:e3:4e:7f:d4:6d:86:29:8f: d4:43:25:ec:cd:78:1f:4e:60:80:cd:8e:9b:d2:a3:b6:86:1e: be:de:a2:06:01:83:7d:63:f1:8f:df:40:52:76:ac:ee:f4:36: 18:41:42:52:8f:b1:46:7a:e1:79:6f:a9:71:ce:39:21:af:f7: cf:56:33:01:6f:91:6f:c0:71:8c:a5:3b:a9:00:e8:24:6a:33: cd:00:2e:7e:15:52:92:73:d3:f2:7a:8c:50:bb:41:19:5d:db: 2c:36:64:c5:c2:ca:fc:6d:c6:85:37:d2:43:59:fa:6b:ad:e3: fa:8c:19:1e:2b:28:4c:b7:5a:85:90:21:dd:55:9f:0f:2e:03: 5e:e6:8b:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwRTJENjQ3QTk2QTEx RkRDMDg5MjkzNzU4QkEzMkY1M0FFMjA1RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfx4vy034Tz/uJr+jVCKnVr9SnyQ1TFys3QErQOVzrPedjQ7vl 442KQUG0vtMQhoS3qyCGptN14lguVqtdBb8GTCQz+w4eCmxPU8hSs4O2DOncI8/r 5G/YDMtXTgeWGlmUTs6J+vDUiuRJ9cRUVe+wa6jJE2QjknfXzDp3mZsbh50FNyqC gFaZlQXUx8O0tG8MOg70TEkFf317EMzNEoSw3XiwjuaIASTUrU8irZRfnBj/iSJp cPRJ/AfAUDmTzdKuWPOac3ge6+IGOrxdjhlkiCY3+BQ2N5DSP9HIMsKtg9eEmxJv Xxq4E5FfS0wgfA2pd9bllkkzq9Kl1Znx3JP9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoOLWR6lqEf3AiSk3WLoy9TriBfowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29PTFdSNmxxRWYzQWlTazNX TG95OVRyaUJmby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wNwwDQYJKoZIhvcNAQELBQADggEBABzyH6X+wcT6TmP1E7bMJF/9OGJ2DeZ5EWT3 N4dShKtpLBTcb9uAuUcL/HYzRpqf0WO2Brh7c5I2EdkjDWNLqQvmaQtyJ2UKPALL F2WLSreNW/LTpzVsF3JT8ibzlZUhCK604Xvbcg7TOuxuXlaQUy/pE/RvnPvjTn/U bYYpj9RDJezNeB9OYIDNjpvSo7aGHr7eogYBg31j8Y/fQFJ2rO70NhhBQlKPsUZ6 4XlvqXHOOSGv989WMwFvkW/AcYylO6kA6CRqM80ALn4VUpJz0/J6jFC7QRld2yw2 ZMXCyvxtxoU30kNZ+mut4/qMGR4rKEy3WoWQId1Vnw8uA17mi2I= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org