$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1TKV7URg2XxM_RWQEXimhAg-o4.roa File: q1TKV7URg2XxM_RWQEXimhAg-o4.roa (raw, json) Hash identifier: GSZ3YPSk9fMY/DrLePzkWYIC2tRpc+ky+tTnOur9i2k= Subject key identifier: AB:54:CA:57:B5:11:83:65:F1:33:F4:56:40:45:E2:9A:10:20:FA:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32B5 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1TKV7URg2XxM_RWQEXimhAg-o4.roa Signing time: Mon 26 Aug 2024 05:31:56 +0000 ROA not before: Mon 26 Aug 2024 05:31:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 103.224.192.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12981 (0x32b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AB54CA57B5118365F133F4564045E29A1020FA8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:47:bf:39:4c:75:6c:36:7e:9f:ac:91:0b: 0b:11:29:4d:f7:dd:e6:c3:ee:a2:3b:1a:2e:d1:0a: c3:71:58:aa:42:4b:c5:4d:80:0d:17:2a:b3:66:b6: a0:77:94:e6:2c:04:21:5d:db:0d:08:91:50:5f:7a: ec:96:cf:13:c2:85:24:dc:6d:45:fb:a7:b7:e6:a4: cd:64:f5:b5:57:ae:c1:17:c8:d7:bb:ea:6f:df:0d: 5e:8a:51:2b:6f:44:d9:8d:ee:4d:c7:08:7c:f4:c6: ab:d8:c0:b7:73:a0:f9:e1:f1:19:16:1b:05:23:d2: 11:9e:04:11:85:c5:aa:78:47:bd:fa:9f:45:a8:11: 7b:03:47:7d:19:6e:1c:03:fd:dc:b7:46:23:f2:5e: 8e:a7:42:e1:38:64:15:9a:68:1b:e8:fb:96:82:36: a8:fb:89:4b:9e:c8:7a:a3:80:40:c0:83:8b:97:df: c8:d5:fa:77:68:77:12:c6:d8:5e:09:74:36:63:ec: 3a:51:4a:69:30:0b:d1:c3:a6:16:1b:16:43:4e:d5: 9e:fd:6c:97:84:b2:6d:ce:95:91:69:90:0d:73:3c: 00:c3:73:e8:4c:96:8d:0f:8a:96:d6:10:7f:a3:8a: 9c:38:52:5b:18:45:75:a6:54:94:90:40:d5:22:80: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:54:CA:57:B5:11:83:65:F1:33:F4:56:40:45:E2:9A:10:20:FA:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1TKV7URg2XxM_RWQEXimhAg-o4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.192.0/22 Signature Algorithm: sha256WithRSAEncryption 98:0f:85:dd:75:72:8e:83:a0:0b:6c:f8:70:3a:8d:5c:8d:79: d7:5d:55:25:57:f2:d0:20:6c:89:0c:69:38:61:8c:cc:64:95: 67:27:7a:58:a3:1c:95:9c:17:b3:80:be:aa:ab:1e:59:75:1d: e4:d5:49:57:e0:ae:be:fd:cb:e3:39:30:79:1f:a7:de:01:b2: 93:ba:51:34:29:dc:0e:42:12:5e:41:1b:09:56:4a:ea:c5:72: 87:cd:7a:8a:74:bb:e2:34:de:90:9d:e2:a1:6e:5b:1d:94:0d: 3f:e2:64:17:81:85:cf:c8:39:1e:36:05:a3:ac:7f:03:ef:68: 45:2a:3c:87:72:e0:cc:4d:64:e7:a5:68:a2:22:62:9f:01:db: 81:a0:1c:bf:8b:85:7e:fc:a5:31:eb:28:80:39:f8:66:de:a6: a9:48:59:9f:4d:92:e1:55:19:d0:b9:1e:87:1d:b9:6a:26:01: 0b:0d:bc:80:3e:76:49:04:69:c7:c2:a4:67:79:32:56:97:74: 3b:86:7b:b8:58:8d:8b:7c:ec:e4:97:af:dd:35:22:90:ba:0d: e3:1b:1d:15:54:4b:e0:0c:03:75:65:b8:d0:da:80:c3:bc:6a: 9c:f1:d6:2f:8a:a8:b6:c6:74:e0:7a:05:77:1f:df:68:f7:fc: b1:95:3e:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMrUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCNTRDQTU3QjUxMTgz NjVGMTMzRjQ1NjQwNDVFMjlBMTAyMEZBOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxpEe/OUx1bDZ+n6yRCwsRKU333ebD7qI7Gi7RCsNxWKpCS8VN gA0XKrNmtqB3lOYsBCFd2w0IkVBfeuyWzxPChSTcbUX7p7fmpM1k9bVXrsEXyNe7 6m/fDV6KUStvRNmN7k3HCHz0xqvYwLdzoPnh8RkWGwUj0hGeBBGFxap4R736n0Wo EXsDR30ZbhwD/dy3RiPyXo6nQuE4ZBWaaBvo+5aCNqj7iUueyHqjgEDAg4uX38jV +ndodxLG2F4JdDZj7DpRSmkwC9HDphYbFkNO1Z79bJeEsm3OlZFpkA1zPADDc+hM lo0PipbWEH+jipw4UlsYRXWmVJSQQNUigPGNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUq1TKV7URg2XxM/RWQEXimhAg+o4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ExVEtWN1VSZzJYeE1fUldR RVhpbWhBZy1vNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn 4MAwDQYJKoZIhvcNAQELBQADggEBAJgPhd11co6DoAts+HA6jVyNedddVSVX8tAg bIkMaThhjMxklWcnelijHJWcF7OAvqqrHll1HeTVSVfgrr79y+M5MHkfp94BspO6 UTQp3A5CEl5BGwlWSurFcofNeop0u+I03pCd4qFuWx2UDT/iZBeBhc/IOR42BaOs fwPvaEUqPIdy4MxNZOelaKIiYp8B24GgHL+LhX78pTHrKIA5+GbepqlIWZ9NkuFV GdC5HocduWomAQsNvIA+dkkEacfCpGd5MlaXdDuGe7hYjYt87OSXr901IpC6DeMb HRVUS+AMA3VluNDagMO8apzx1i+KqLbGdOB6BXcf32j3/LGVPgw= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org