$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy4x17_EE9JNMSAHUzJJeiuX1Ic.roa File: oy4x17_EE9JNMSAHUzJJeiuX1Ic.roa (raw, json) Hash identifier: MECn0GOt413NsmKQ7UwvZi6ZxpOlETmk3bp8S7Xrqu4= Subject key identifier: A3:2E:31:D7:BF:C4:13:D2:4D:31:20:07:53:32:49:7A:2B:97:D4:87 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32BB Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy4x17_EE9JNMSAHUzJJeiuX1Ic.roa Signing time: Mon 26 Aug 2024 05:31:57 +0000 ROA not before: Mon 26 Aug 2024 05:31:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.136.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12987 (0x32bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A32E31D7BFC413D24D3120075332497A2B97D487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:a6:24:df:ee:43:71:32:41:48:e8:30:85: ad:bf:79:84:c3:8f:d6:a6:8d:c4:76:56:a5:3f:01: 34:99:27:95:84:84:d9:7f:a1:a0:b8:02:8d:0b:b6: a9:3f:e5:22:da:26:95:7a:52:3b:d9:19:2f:93:a7: 52:ad:31:6f:c7:c5:2d:03:b6:58:f9:5c:47:45:64: c4:71:33:d7:87:a6:58:aa:30:0f:13:f6:11:f9:c0: 06:4a:1c:83:44:11:07:f3:4b:78:a3:12:50:23:cf: c0:7d:88:bb:bf:f3:ac:ba:91:10:9b:fa:50:db:25: d7:c4:5a:fb:01:c9:7f:15:ad:c9:8f:9f:d0:ac:60: ad:e0:87:89:83:13:ed:dd:6d:f7:46:35:91:bd:1c: 52:69:63:68:1a:ad:93:97:05:c9:f3:0a:97:25:39: d9:e2:fb:e7:c2:05:00:93:c2:f2:d8:bf:d1:1f:03: 55:41:5e:09:84:51:89:eb:3d:cd:58:fa:7d:80:86: d4:67:fb:df:a9:85:fa:f3:5c:8c:2e:d6:58:27:a9: 6d:f9:78:55:6c:f7:66:c3:c3:eb:37:9e:77:c3:a2: 84:4b:31:5b:c3:40:7b:ca:b4:d1:57:18:c8:57:0e: 83:ba:3f:10:30:49:a5:bd:30:8e:86:27:69:e5:c5: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2E:31:D7:BF:C4:13:D2:4D:31:20:07:53:32:49:7A:2B:97:D4:87 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy4x17_EE9JNMSAHUzJJeiuX1Ic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.136.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:52:a5:67:6a:ce:1d:ac:01:9b:a6:40:db:56:9c:75:79:43: b0:50:40:49:b8:85:e6:b6:e2:0e:f3:46:61:04:90:93:cc:ec: 61:c8:33:5f:30:92:3f:08:df:86:a3:f0:d2:58:f5:fa:a7:13: 1f:38:55:dd:1d:ee:c2:11:c5:b1:e5:bb:1a:09:6a:7c:e3:92: 4d:49:fe:55:21:14:05:5c:5e:bf:2e:da:74:21:61:7c:0b:1e: 5d:d1:f5:6a:e2:75:92:80:c2:d6:dc:40:e6:db:4d:21:5f:3f: 9d:7a:28:ff:c8:63:7d:64:73:9f:c5:47:41:3f:a8:a1:4d:b4: 01:49:f8:be:77:b3:54:92:c3:88:ce:4a:f7:fd:5c:e8:65:ac: b0:22:eb:76:ac:76:7f:d5:2a:3c:a6:06:e7:70:48:fa:ed:aa: d0:14:74:37:86:ce:d8:ff:a4:91:55:c0:2a:5b:9b:7d:8a:d7: f3:f4:18:a4:e9:c9:e5:53:3d:16:45:e2:8a:25:d3:b8:9a:74: 22:26:33:a8:2a:aa:a9:fc:21:09:76:91:48:9c:a9:11:0c:11: 77:93:53:66:6a:69:00:d0:bd:19:e9:dd:44:bf:53:f3:49:f2: 69:61:c2:4b:50:45:79:88:99:1d:cb:58:8f:4b:ad:7a:28:10: bc:b9:50:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMrswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzMkUzMUQ3QkZDNDEz RDI0RDMxMjAwNzUzMzI0OTdBMkI5N0Q0ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7l6Yk3+5DcTJBSOgwha2/eYTDj9amjcR2VqU/ATSZJ5WEhNl/ oaC4Ao0Ltqk/5SLaJpV6UjvZGS+Tp1KtMW/HxS0Dtlj5XEdFZMRxM9eHpliqMA8T 9hH5wAZKHINEEQfzS3ijElAjz8B9iLu/86y6kRCb+lDbJdfEWvsByX8VrcmPn9Cs YK3gh4mDE+3dbfdGNZG9HFJpY2garZOXBcnzCpclOdni++fCBQCTwvLYv9EfA1VB XgmEUYnrPc1Y+n2AhtRn+9+phfrzXIwu1lgnqW35eFVs92bDw+s3nnfDooRLMVvD QHvKtNFXGMhXDoO6PxAwSaW9MI6GJ2nlxU5RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoy4x17/EE9JNMSAHUzJJeiuX1IcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL295NHgxN19FRTlKTk1TQUhV ekpKZWl1WDFJYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6YgwDQYJKoZIhvcNAQELBQADggEBAH1SpWdqzh2sAZumQNtWnHV5Q7BQQEm4hea2 4g7zRmEEkJPM7GHIM18wkj8I34aj8NJY9fqnEx84Vd0d7sIRxbHluxoJanzjkk1J /lUhFAVcXr8u2nQhYXwLHl3R9WridZKAwtbcQObbTSFfP516KP/IY31kc5/FR0E/ qKFNtAFJ+L53s1SSw4jOSvf9XOhlrLAi63asdn/VKjymBudwSPrtqtAUdDeGztj/ pJFVwCpbm32K1/P0GKTpyeVTPRZF4ool07iadCImM6gqqqn8IQl2kUicqREMEXeT U2ZqaQDQvRnp3US/U/NJ8mlhwktQRXmImR3LWI9LrXooELy5UHA= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:39 2024 by rpki-client on console-ams.rpki-client.org