$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa File: oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa (raw, json) Hash identifier: 9VdXmac+qj+XZ5hrbr475BDwymSAAz5a+/NlbyJfYHg= Subject key identifier: A1:35:06:56:BD:D9:88:6A:02:C7:1C:68:78:D4:2D:A5:FB:31:EC:59 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32AA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa Signing time: Mon 26 Aug 2024 05:31:52 +0000 ROA not before: Mon 26 Aug 2024 05:31:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 118.232.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12970 (0x32aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A1350656BDD9886A02C71C6878D42DA5FB31EC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:43:2a:bc:61:bc:db:72:42:9e:fa:1b:da: 5c:f1:2c:20:c8:18:f3:bb:69:4e:27:cd:1f:f0:a7: fb:c9:61:cd:92:c2:c9:7e:89:db:1c:66:c4:98:82: a9:ed:5f:70:9a:32:d8:c4:b3:dd:ae:a7:41:07:52: fa:06:19:9d:74:79:1a:46:cd:06:15:4d:e1:10:ff: f0:cf:48:fc:06:3a:43:cb:35:0b:e5:b5:ed:ff:47: 31:79:4b:e4:6a:35:ab:1c:57:3e:88:01:eb:a7:f6: 6c:9e:ad:25:fd:c4:32:41:e2:08:10:2a:0a:d9:02: 5e:18:ba:a2:60:b6:b5:cf:87:1d:27:c3:e8:f3:64: 83:7d:7e:53:ef:e9:2b:a5:7b:78:f4:d7:ac:6d:38: 3b:a7:7f:2f:bd:9f:89:35:a5:6a:03:db:c3:8d:3b: 4b:77:5f:dc:8e:a7:e3:24:e9:a4:f4:64:37:ed:66: 5d:37:a2:f6:13:bf:1b:9c:51:38:27:2c:50:99:80: 0f:30:de:10:7a:5a:3a:c1:ee:b9:b0:54:e0:ce:c5: 3a:e9:22:a3:bf:05:23:ad:e9:c2:a0:5f:ef:55:e7: 07:08:38:a8:42:1f:c6:2e:92:4b:26:24:12:16:a6: e5:a1:c9:93:a2:23:9c:e5:83:29:6f:a6:18:fe:66: 5b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:06:56:BD:D9:88:6A:02:C7:1C:68:78:D4:2D:A5:FB:31:EC:59 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.100.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:d9:f9:2d:04:fc:34:42:2d:18:2d:9b:42:71:a7:42:31:cd: dc:f5:97:8c:84:aa:76:a5:3d:ee:25:2a:55:d4:20:70:6b:d6: 60:73:a7:82:0a:f2:9d:e5:bc:09:2f:27:8f:01:66:68:6c:37: 2a:ed:ed:dc:ac:f2:de:d4:92:2c:af:bc:fe:9a:56:44:db:f3: 34:15:3b:07:47:99:3e:eb:19:bb:71:0f:0e:87:c3:e6:11:17: d9:b6:28:bb:87:49:d7:9d:84:7c:57:8e:13:be:08:5e:bb:8e: af:db:55:d9:2f:0a:27:2d:31:f8:88:05:3e:a1:8e:8f:67:1d: b6:f8:41:a6:0c:09:2e:b5:ac:01:85:a2:ba:05:6a:53:87:56: 23:16:48:5c:0d:8c:95:05:8d:fa:21:f3:6f:e4:f1:a1:35:16: ac:40:e4:e7:2c:f1:9a:0b:6f:03:c4:1f:6d:77:63:ed:1e:61: f4:5f:5b:ca:4f:49:dd:bc:5e:6a:e2:36:70:df:b4:56:fe:ef: 1e:f4:f2:3f:9e:e9:35:ef:e1:f6:c6:4a:6a:ac:0b:a0:5c:37: 4a:c9:da:0f:6e:27:6e:d6:bc:c3:0c:75:ec:5e:c6:26:9f:c9: 27:10:1b:2b:dc:bd:f7:fe:de:04:d2:81:40:af:af:9c:34:bb: e0:d2:f9:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEExMzUwNjU2QkREOTg4 NkEwMkM3MUM2ODc4RDQyREE1RkIzMUVDNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpd0MqvGG823JCnvob2lzxLCDIGPO7aU4nzR/wp/vJYc2Swsl+ idscZsSYgqntX3CaMtjEs92up0EHUvoGGZ10eRpGzQYVTeEQ//DPSPwGOkPLNQvl te3/RzF5S+RqNascVz6IAeun9myerSX9xDJB4ggQKgrZAl4YuqJgtrXPhx0nw+jz ZIN9flPv6Sule3j016xtODunfy+9n4k1pWoD28ONO0t3X9yOp+Mk6aT0ZDftZl03 ovYTvxucUTgnLFCZgA8w3hB6WjrB7rmwVODOxTrpIqO/BSOt6cKgX+9V5wcIOKhC H8YukksmJBIWpuWhyZOiI5zlgylvphj+ZltFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoTUGVr3ZiGoCxxxoeNQtpfsx7FkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29UVUdWcjNaaUdvQ3h4eG9l TlF0cGZzeDdGay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6GQwDQYJKoZIhvcNAQELBQADggEBAJ/Z+S0E/DRCLRgtm0Jxp0Ixzdz1l4yEqnal Pe4lKlXUIHBr1mBzp4IK8p3lvAkvJ48BZmhsNyrt7dys8t7UkiyvvP6aVkTb8zQV OwdHmT7rGbtxDw6Hw+YRF9m2KLuHSdedhHxXjhO+CF67jq/bVdkvCictMfiIBT6h jo9nHbb4QaYMCS61rAGForoFalOHViMWSFwNjJUFjfoh82/k8aE1FqxA5Ocs8ZoL bwPEH213Y+0eYfRfW8pPSd28XmriNnDftFb+7x708j+e6TXv4fbGSmqsC6BcN0rJ 2g9uJ27WvMMMdexexiafyScQGyvcvff+3gTSgUCvr5w0u+DS+cU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:39 2024 by rpki-client on console-ams.rpki-client.org