$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOlLWRnQTUoqqc991HZH-5cdrC8.roa File: pOlLWRnQTUoqqc991HZH-5cdrC8.roa (raw, json) Hash identifier: 7EliHjm7bsNEQ3ljx7equhM4lL5MueH0RD/kMXRroZc= Subject key identifier: A4:E9:4B:59:19:D0:4D:4A:2A:A9:CF:7D:D4:76:47:FB:97:1D:AC:2F Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FD2 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOlLWRnQTUoqqc991HZH-5cdrC8.roa Signing time: Mon 26 Aug 2024 05:28:53 +0000 ROA not before: Mon 26 Aug 2024 05:28:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12242 (0x2fd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A4E94B5919D04D4A2AA9CF7DD47647FB971DAC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:b6:1e:d3:ac:b6:ec:f1:d2:7a:aa:ed:45: 81:da:fd:d6:20:46:bb:a0:c8:11:12:cb:91:c3:17: b7:e4:95:4c:39:2b:75:c6:53:91:3e:33:d3:9d:09: e1:cd:e3:86:7b:8d:86:33:ac:97:0d:99:07:e3:6e: 75:9b:02:35:b6:dd:c3:04:98:b6:e9:9c:e0:98:75: f2:50:aa:b4:76:ab:42:e6:b7:dc:47:a4:19:ed:2f: 09:0e:9a:d7:46:6d:72:be:5c:a3:c6:de:b9:ae:72: 50:a9:33:f1:0d:a5:c7:fd:06:33:d3:bc:20:7c:1f: 93:e3:34:b6:d8:c2:8c:b9:ba:1e:9f:94:03:d7:56: 7b:f6:84:0c:cb:4e:db:10:b8:76:94:2d:7e:ee:5b: 7b:55:10:8a:a1:09:0d:7a:b4:13:86:f0:c6:34:4f: 74:50:2b:03:23:ac:e0:f1:2a:33:c0:1f:a3:cc:95: 26:98:1f:4a:93:9b:8f:9b:68:10:03:8e:cd:0b:ee: 38:3c:e2:b4:c7:4e:86:37:60:2d:da:cc:33:21:03: ac:95:43:2b:a4:05:2a:31:4a:d3:cf:74:f4:c1:f6: f1:86:b3:ac:ff:2d:e0:b2:0a:1b:10:4e:66:5c:24: 63:f2:a7:1f:94:b4:8c:5a:8e:b7:13:f0:5d:f2:66: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E9:4B:59:19:D0:4D:4A:2A:A9:CF:7D:D4:76:47:FB:97:1D:AC:2F X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOlLWRnQTUoqqc991HZH-5cdrC8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.64.0/22 Signature Algorithm: sha256WithRSAEncryption a2:50:0e:1b:61:c0:84:c2:9b:20:b8:a2:cb:99:e2:f6:c2:9b: 43:0e:f1:fc:81:24:c3:de:f3:37:66:38:4a:19:db:cf:15:96: 5d:7f:b4:db:92:60:30:06:65:ff:fe:a4:33:1e:a4:97:52:63: 32:97:ab:66:e6:22:67:1c:48:6a:13:69:3f:d3:db:e0:a2:ed: 15:2e:4b:36:66:0a:68:c6:82:ec:d3:21:b6:91:cd:5b:79:87: 8d:da:b2:cf:57:ec:e7:e5:e0:fb:11:7c:36:1f:36:7b:1d:53: 11:8e:03:7b:f7:f8:ce:5a:4c:03:a2:58:44:13:11:e7:8c:c0: 15:3e:05:f7:06:e5:0b:ec:66:21:b3:92:90:cc:b4:b5:2c:82: 62:09:98:37:66:a3:7a:52:24:46:61:a3:f6:94:3e:18:4a:9f: 84:3d:c2:31:88:b7:cf:ab:fd:df:ef:cb:23:f5:fa:af:7b:68: ce:b0:06:61:b4:60:38:83:cf:02:eb:7d:bc:d3:60:91:f6:f7: df:96:2f:fd:54:13:44:9d:29:32:e4:9e:a9:1f:d6:89:90:55: b3:ab:fe:7a:cb:99:d1:0f:2b:1e:00:ee:50:4f:44:e2:a1:fc: 21:9b:82:b8:2c:1a:83:53:d4:28:04:ea:63:cf:9c:4b:bd:40: 42:f9:70:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0RTk0QjU5MTlEMDRE NEEyQUE5Q0Y3REQ0NzY0N0ZCOTcxREFDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZFbYe06y27PHSeqrtRYHa/dYgRrugyBESy5HDF7fklUw5K3XG U5E+M9OdCeHN44Z7jYYzrJcNmQfjbnWbAjW23cMEmLbpnOCYdfJQqrR2q0Lmt9xH pBntLwkOmtdGbXK+XKPG3rmuclCpM/ENpcf9BjPTvCB8H5PjNLbYwoy5uh6flAPX Vnv2hAzLTtsQuHaULX7uW3tVEIqhCQ16tBOG8MY0T3RQKwMjrODxKjPAH6PMlSaY H0qTm4+baBADjs0L7jg84rTHToY3YC3azDMhA6yVQyukBSoxStPPdPTB9vGGs6z/ LeCyChsQTmZcJGPypx+UtIxajrcT8F3yZpk1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpOlLWRnQTUoqqc991HZH+5cdrC8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BPbExXUm5RVFVvcXFjOTkx SFpILTVjZHJDOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6UAwDQYJKoZIhvcNAQELBQADggEBAKJQDhthwITCmyC4osuZ4vbCm0MO8fyBJMPe 8zdmOEoZ288Vll1/tNuSYDAGZf/+pDMepJdSYzKXq2bmImccSGoTaT/T2+Ci7RUu SzZmCmjGguzTIbaRzVt5h43ass9X7Ofl4PsRfDYfNnsdUxGOA3v3+M5aTAOiWEQT EeeMwBU+BfcG5QvsZiGzkpDMtLUsgmIJmDdmo3pSJEZho/aUPhhKn4Q9wjGIt8+r /d/vyyP1+q97aM6wBmG0YDiDzwLrfbzTYJH299+WL/1UE0SdKTLknqkf1omQVbOr /nrLmdEPKx4A7lBPROKh/CGbgrgsGoNT1CgE6mPPnEu9QEL5cE0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org