$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/osSWeOFqwnSGjkOEzDMNCx_JaR8.roa File: osSWeOFqwnSGjkOEzDMNCx_JaR8.roa (raw, json) Hash identifier: 7DG6YRB5+EZhO2uGCod82YnDKiZxmIqaVEveq5zuOt0= Subject key identifier: A2:C4:96:78:E1:6A:C2:74:86:8E:43:84:CC:33:0D:0B:1F:C9:69:1F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31A0 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/osSWeOFqwnSGjkOEzDMNCx_JaR8.roa Signing time: Mon 26 Aug 2024 05:30:46 +0000 ROA not before: Mon 26 Aug 2024 05:30:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12704 (0x31a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2C49678E16AC274868E4384CC330D0B1FC9691F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:27:f9:89:b4:2b:cb:19:dc:3c:39:84:08: de:54:93:45:ad:d2:12:0d:04:0e:59:05:70:fe:bd: 86:85:47:e9:19:2a:2a:a4:21:ae:7a:7d:2c:39:d6: ca:54:0e:c5:d5:04:3c:f9:57:1e:ed:44:85:49:5d: e7:f4:bf:52:c6:91:08:b0:45:b5:cb:56:6d:1f:90: f4:23:8e:1a:ff:93:5c:e8:46:8f:1c:ce:bd:9e:f1: 79:b8:84:79:c7:24:95:0f:a2:69:1c:f5:d4:29:f9: 1b:48:fc:93:ee:cf:36:4c:75:30:cd:ca:82:7e:69: 39:a3:ce:91:26:0c:01:06:dd:11:46:6e:49:89:26: ab:30:38:9a:f2:c9:b0:5f:c8:86:cf:72:6a:a2:9d: 04:c6:ac:63:8f:6e:d9:43:82:61:01:f2:b4:d2:b4: a3:a3:c2:bf:ca:43:5b:47:ef:21:2d:bf:50:a9:db: 2f:18:79:3b:22:10:90:8e:25:46:c4:ad:be:e4:f7: 60:c8:67:4c:de:56:b0:3e:61:36:43:e3:28:f8:3a: 4c:14:33:8c:cc:db:92:06:cb:49:91:f7:91:97:96: cd:00:3f:2f:9b:1b:c4:cb:11:85:91:a3:c2:21:4b: 64:6b:4e:51:79:7b:81:37:ee:bf:6e:3c:80:24:2f: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:96:78:E1:6A:C2:74:86:8E:43:84:CC:33:0D:0B:1F:C9:69:1F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/osSWeOFqwnSGjkOEzDMNCx_JaR8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.44.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:c5:d2:c2:fc:18:f2:87:1f:99:6d:8a:70:30:04:6c:d6:b2: ea:23:c7:cc:25:f3:f6:c8:7b:fa:33:3f:61:0c:69:b8:f4:48: ea:bc:91:a3:40:c9:04:3e:f4:55:25:40:46:88:3d:7d:e7:ca: ef:3d:2a:07:04:e4:1c:32:8b:ad:66:f8:d7:31:cc:f1:73:ac: cd:6b:71:0c:d6:43:53:13:c8:71:94:c1:63:5e:cd:67:5f:a5: 0f:91:df:a5:cc:88:59:06:d3:b2:30:de:36:e3:83:7d:b6:da: 02:91:ea:6c:73:b1:11:f1:f5:03:fc:8a:df:7e:b7:55:42:48: 32:9e:b0:d2:05:42:c2:4b:2f:03:60:b3:36:a5:d1:6a:25:ec: ca:3f:bd:de:f8:3e:b2:31:b9:52:e8:91:e7:70:a2:5e:43:45: 54:b5:51:02:7f:92:45:88:a7:18:29:33:e9:77:7f:fc:ff:c6: 18:8d:e9:29:f2:9e:e4:b3:1b:2c:42:a7:d1:e7:6b:fe:41:d9: ed:5b:aa:da:87:20:8a:79:a1:a3:e7:a1:48:d1:75:fd:3a:3b: 36:36:d8:06:d8:65:2d:c1:aa:79:f6:c0:11:88:e6:e9:b1:16: 19:60:96:70:0a:40:f3:da:e4:2e:d2:29:82:d7:df:6e:66:33: 55:91:01:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyQzQ5Njc4RTE2QUMy NzQ4NjhFNDM4NENDMzMwRDBCMUZDOTY5MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAtif5ibQryxncPDmECN5Uk0Wt0hINBA5ZBXD+vYaFR+kZKiqk Ia56fSw51spUDsXVBDz5Vx7tRIVJXef0v1LGkQiwRbXLVm0fkPQjjhr/k1zoRo8c zr2e8Xm4hHnHJJUPomkc9dQp+RtI/JPuzzZMdTDNyoJ+aTmjzpEmDAEG3RFGbkmJ JqswOJryybBfyIbPcmqinQTGrGOPbtlDgmEB8rTStKOjwr/KQ1tH7yEtv1Cp2y8Y eTsiEJCOJUbErb7k92DIZ0zeVrA+YTZD4yj4OkwUM4zM25IGy0mR95GXls0APy+b G8TLEYWRo8IhS2RrTlF5e4E37r9uPIAkL3phAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUosSWeOFqwnSGjkOEzDMNCx/JaR8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29zU1dlT0Zxd25TR2prT0V6 RE1OQ3hfSmFSOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wiwwDQYJKoZIhvcNAQELBQADggEBAC/F0sL8GPKHH5ltinAwBGzWsuojx8wl8/bI e/ozP2EMabj0SOq8kaNAyQQ+9FUlQEaIPX3nyu89KgcE5Bwyi61m+NcxzPFzrM1r cQzWQ1MTyHGUwWNezWdfpQ+R36XMiFkG07Iw3jbjg3222gKR6mxzsRHx9QP8it9+ t1VCSDKesNIFQsJLLwNgszal0Wol7Mo/vd74PrIxuVLokedwol5DRVS1UQJ/kkWI pxgpM+l3f/z/xhiN6SnynuSzGyxCp9Hna/5B2e1bqtqHIIp5oaPnoUjRdf06OzY2 2AbYZS3Bqnn2wBGI5umxFhlglnAKQPPa5C7SKYLX325mM1WRAeM= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org