$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q-DEpAEWPQY5l9V-fb8U0DIXLoI.roa File: q-DEpAEWPQY5l9V-fb8U0DIXLoI.roa (raw, json) Hash identifier: V/YVaffHobYoyAFay7h6O8eqvaSiP346695qaZa/hac= Subject key identifier: AB:E0:C4:A4:01:16:3D:06:39:97:D5:7E:7D:BF:14:D0:32:17:2E:82 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31CF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q-DEpAEWPQY5l9V-fb8U0DIXLoI.roa Signing time: Mon 26 Aug 2024 05:30:58 +0000 ROA not before: Mon 26 Aug 2024 05:30:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12751 (0x31cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ABE0C4A401163D063997D57E7DBF14D032172E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:81:24:96:d9:1d:b8:d9:92:8a:20:36:5d: 13:40:bf:ba:a0:f0:96:ce:c3:c8:f8:25:92:0a:3a: e8:b8:f5:da:75:64:bc:85:61:3f:c4:a1:1d:7c:70: be:e1:53:1d:44:86:f3:f5:59:c3:02:9e:40:07:76: 25:ec:8f:9c:09:cd:80:d8:42:7e:68:20:02:9f:fe: 04:29:e4:fb:44:a4:b3:5d:f2:ec:1c:35:d0:86:81: cd:2d:a5:62:6d:9a:07:d2:86:18:ee:08:df:87:53: b2:73:6f:4c:46:a2:04:cf:b3:55:d2:cd:1e:f3:2c: 95:c8:84:3d:80:86:cf:73:ee:31:ea:4b:15:f2:e4: 17:6c:c5:09:0e:02:21:e2:74:96:9d:20:be:28:2c: 92:44:9a:cd:06:ef:33:c2:8d:9e:65:53:8d:b4:fa: 64:96:13:d5:9a:11:75:76:60:33:8a:81:ee:73:a6: d6:3d:fe:77:5b:c1:b1:6b:0a:90:35:5c:97:9f:20: 8e:f7:a0:5e:04:85:2a:48:1d:22:68:fa:1b:06:68: dc:74:95:45:55:95:48:20:da:0c:90:6f:b0:68:f7: 15:6c:0e:68:8b:9b:53:90:a6:9d:e9:2b:3d:53:01: 22:6e:a4:92:62:02:d1:dc:20:62:19:90:68:f8:a1: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:C4:A4:01:16:3D:06:39:97:D5:7E:7D:BF:14:D0:32:17:2E:82 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q-DEpAEWPQY5l9V-fb8U0DIXLoI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.228.0/22 Signature Algorithm: sha256WithRSAEncryption 91:40:ea:24:de:1f:2a:3b:3d:85:db:bc:78:11:fd:9a:5b:fd: a0:61:98:fe:f9:2b:b8:a2:f6:25:c1:ed:94:54:51:47:aa:82: d1:cd:ea:ff:e0:ac:35:86:e5:cc:31:f7:bc:78:86:d1:d4:31: b2:79:27:43:22:2d:2b:6d:27:f3:5c:91:00:32:8d:21:17:ae: 0b:46:34:fd:f6:92:98:63:23:7f:0d:8f:52:49:54:5c:ce:3c: c9:fb:57:6f:6e:c0:31:e0:ba:6c:ed:05:70:96:66:11:36:62: 64:2f:2b:13:8a:7e:39:0e:74:2f:25:aa:e5:48:54:a0:11:3f: ab:1b:d5:e3:2d:b2:2e:c3:d7:61:e4:8a:07:30:a8:78:83:b4: e0:0a:99:d0:47:51:e7:e9:7f:b2:fc:6b:2b:c4:f8:56:1f:23: 94:0c:48:c9:86:22:a4:5c:3d:14:23:66:10:de:38:c2:c5:f8: d2:44:f5:c9:5a:ba:42:48:4b:f5:ec:5e:5b:08:07:67:e8:e5: 29:46:39:c0:09:3a:bf:a6:b7:bf:38:c7:70:5d:67:12:14:d6: 73:02:9e:37:a3:d8:9e:1c:05:bf:53:b2:3e:1c:77:6d:9f:05: 9a:d4:f6:34:c5:15:fa:5c:14:20:1d:d4:cf:6b:ae:1f:05:b3: 97:d9:78:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCRTBDNEE0MDExNjNE MDYzOTk3RDU3RTdEQkYxNEQwMzIxNzJFODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvmIEkltkduNmSiiA2XRNAv7qg8JbOw8j4JZIKOui49dp1ZLyF YT/EoR18cL7hUx1EhvP1WcMCnkAHdiXsj5wJzYDYQn5oIAKf/gQp5PtEpLNd8uwc NdCGgc0tpWJtmgfShhjuCN+HU7Jzb0xGogTPs1XSzR7zLJXIhD2Ahs9z7jHqSxXy 5BdsxQkOAiHidJadIL4oLJJEms0G7zPCjZ5lU420+mSWE9WaEXV2YDOKge5zptY9 /ndbwbFrCpA1XJefII73oF4EhSpIHSJo+hsGaNx0lUVVlUgg2gyQb7Bo9xVsDmiL m1OQpp3pKz1TASJupJJiAtHcIGIZkGj4oU6/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUq+DEpAEWPQY5l9V+fb8U0DIXLoIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3EtREVwQUVXUFFZNWw5Vi1m YjhVMERJWExvSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wOQwDQYJKoZIhvcNAQELBQADggEBAJFA6iTeHyo7PYXbvHgR/Zpb/aBhmP75K7ii 9iXB7ZRUUUeqgtHN6v/grDWG5cwx97x4htHUMbJ5J0MiLSttJ/NckQAyjSEXrgtG NP32kphjI38Nj1JJVFzOPMn7V29uwDHgumztBXCWZhE2YmQvKxOKfjkOdC8lquVI VKARP6sb1eMtsi7D12HkigcwqHiDtOAKmdBHUefpf7L8ayvE+FYfI5QMSMmGIqRc PRQjZhDeOMLF+NJE9claukJIS/XsXlsIB2fo5SlGOcAJOr+mt784x3BdZxIU1nMC njej2J4cBb9Tsj4cd22fBZrU9jTFFfpcFCAd1M9rrh8Fs5fZeC0= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org