$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oP7__h5Vl4RXkd0MDGoHk7CMTnw.roa File: oP7__h5Vl4RXkd0MDGoHk7CMTnw.roa (raw, json) Hash identifier: HINt2NZFs0+/G/2FMP3uOgoIj/SsFvSA3WaAaJQEeD8= Subject key identifier: A0:FE:FF:FE:1E:55:97:84:57:91:DD:0C:0C:6A:07:93:B0:8C:4E:7C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 322E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oP7__h5Vl4RXkd0MDGoHk7CMTnw.roa Signing time: Mon 26 Aug 2024 05:31:23 +0000 ROA not before: Mon 26 Aug 2024 05:31:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.192.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12846 (0x322e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0FEFFFE1E5597845791DD0C0C6A0793B08C4E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:ea:07:a3:57:9b:3e:df:e9:a0:4c:61:b4: e1:43:fd:fe:a8:28:fc:2a:a2:83:7e:b3:ff:5f:f7: 47:f9:3e:75:1d:c9:3e:9a:6a:95:33:8e:f9:37:70: 02:11:bc:5b:8b:12:08:35:54:02:64:e4:c6:97:05: 43:a7:d5:2a:46:c3:a2:08:30:c1:68:21:92:62:89: 4f:38:12:21:85:a8:46:c3:5c:44:69:bd:cd:ab:e1: 0a:85:59:fc:50:1f:e0:34:2a:a3:49:ab:bf:26:e5: 1c:65:60:a6:80:1e:4c:dd:3f:2c:de:90:0f:6a:e3: c4:19:13:91:2b:2b:27:bb:cf:8e:98:59:52:39:03: 08:7f:5a:b6:af:52:27:98:de:3c:3d:0b:34:30:06: fa:14:da:31:bd:12:66:cb:e4:5e:01:97:4d:1b:6f: e7:2a:19:2c:71:8e:cd:96:03:7b:67:95:1f:30:10: 89:1b:6b:4c:9f:ec:f6:a0:7a:b0:79:99:37:87:73: d1:29:31:3f:0e:2c:64:30:ae:10:f0:42:e2:59:f0: 85:7c:f2:71:89:d1:5d:8d:b5:18:2d:a5:f4:bb:8e: 6c:8a:f2:1a:09:0d:71:cb:c8:c2:98:ef:de:db:ed: 5d:f8:35:74:78:0c:42:a4:32:d9:ec:dd:8e:b1:63: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FE:FF:FE:1E:55:97:84:57:91:DD:0C:0C:6A:07:93:B0:8C:4E:7C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oP7__h5Vl4RXkd0MDGoHk7CMTnw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.192.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:a7:dc:ea:88:e3:d2:75:fe:95:84:bc:1e:a7:9d:c5:15:f0: e6:fa:14:b0:69:ca:49:e9:37:20:19:cf:e2:44:bc:78:4c:e3: 07:07:8b:52:f5:ea:45:7e:a6:82:c9:49:5a:b3:64:65:ea:2c: c5:c1:1e:7e:54:d3:5f:7b:82:7d:3a:87:14:25:33:7e:a4:c2: b9:8f:d0:20:17:c5:cb:0d:b7:38:be:04:f9:ad:cb:49:e6:54: 50:c6:f4:e5:40:6d:da:56:1f:23:d4:10:c7:a4:a2:82:46:b3: 21:46:0f:dd:2d:b4:54:46:7f:7d:48:1e:1d:81:5f:56:f6:a6: 8b:55:c8:a0:46:4c:47:36:38:dd:08:ba:0d:ad:4c:32:19:10: 78:63:01:bc:28:c6:94:65:ac:fa:a4:2d:ce:3b:15:b4:ee:43: c2:5a:c1:67:99:26:fd:84:d7:69:1f:28:6d:d3:4f:63:16:45: ca:84:28:79:60:5f:8b:5e:66:3e:78:c3:7d:f8:81:d3:db:7c: 21:8a:f6:a6:8d:e6:7f:ee:a7:08:73:8f:13:bd:58:04:12:b0: 42:45:d2:5e:dd:78:9c:3a:54:e6:31:36:ae:64:de:07:20:3d: 04:dc:ac:cf:36:f6:e0:b0:d5:bd:87:d5:a7:a4:50:3c:15:d6: 51:d7:0b:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwRkVGRkZFMUU1NTk3 ODQ1NzkxREQwQzBDNkEwNzkzQjA4QzRFN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD/+oHo1ebPt/poExhtOFD/f6oKPwqooN+s/9f90f5PnUdyT6a apUzjvk3cAIRvFuLEgg1VAJk5MaXBUOn1SpGw6IIMMFoIZJiiU84EiGFqEbDXERp vc2r4QqFWfxQH+A0KqNJq78m5RxlYKaAHkzdPyzekA9q48QZE5ErKye7z46YWVI5 Awh/WravUieY3jw9CzQwBvoU2jG9EmbL5F4Bl00bb+cqGSxxjs2WA3tnlR8wEIkb a0yf7PagerB5mTeHc9EpMT8OLGQwrhDwQuJZ8IV88nGJ0V2NtRgtpfS7jmyK8hoJ DXHLyMKY797b7V34NXR4DEKkMtns3Y6xY4wXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoP7//h5Vl4RXkd0MDGoHk7CMTnwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29QN19faDVWbDRSWGtkME1E R29IazdDTVRudy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6MAwDQYJKoZIhvcNAQELBQADggEBAH+n3OqI49J1/pWEvB6nncUV8Ob6FLBpyknp NyAZz+JEvHhM4wcHi1L16kV+poLJSVqzZGXqLMXBHn5U0197gn06hxQlM36kwrmP 0CAXxcsNtzi+BPmty0nmVFDG9OVAbdpWHyPUEMekooJGsyFGD90ttFRGf31IHh2B X1b2potVyKBGTEc2ON0Iug2tTDIZEHhjAbwoxpRlrPqkLc47FbTuQ8JawWeZJv2E 12kfKG3TT2MWRcqEKHlgX4teZj54w334gdPbfCGK9qaN5n/upwhzjxO9WAQSsEJF 0l7deJw6VOYxNq5k3gcgPQTcrM829uCw1b2H1aekUDwV1lHXC2M= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org