$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qVpe1ntcZ-NZfXuzy6Rxv-jn2JA.roa File: qVpe1ntcZ-NZfXuzy6Rxv-jn2JA.roa (raw, json) Hash identifier: LYDzWHAv9UhDZO/20yubHUmQSpCTPnYB2JbKFZY8R3I= Subject key identifier: A9:5A:5E:D6:7B:5C:67:E3:59:7D:7B:B3:CB:A4:71:BF:E8:E7:D8:90 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32EF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qVpe1ntcZ-NZfXuzy6Rxv-jn2JA.roa Signing time: Mon 26 Aug 2024 05:32:09 +0000 ROA not before: Mon 26 Aug 2024 05:32:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.24.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13039 (0x32ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A95A5ED67B5C67E3597D7BB3CBA471BFE8E7D890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:dc:2e:62:60:eb:f0:ff:f7:36:a8:f1:1f: b9:51:8b:6e:44:3a:1d:bc:16:5d:16:42:67:26:db: fe:a4:a4:47:62:29:6f:43:3d:50:f5:a3:5a:93:db: 89:26:a1:0e:6d:36:2e:db:02:2f:bb:ba:e2:6e:3c: a6:c7:6e:1e:2e:34:54:eb:00:05:a9:d7:47:3c:93: 1c:61:c7:e7:37:e6:e5:54:17:56:fc:80:da:4d:cc: a6:b7:4b:94:44:8b:ca:ce:44:34:3c:8a:2e:1d:e1: 2e:ac:4d:56:5d:87:74:3e:a7:9a:9b:75:b1:e3:6a: 5e:82:d7:34:fb:ae:1a:6a:19:d3:67:99:7d:18:fd: 38:dd:e0:39:bc:48:50:29:e7:29:60:1a:21:b8:b3: 23:dd:1e:a2:8e:ea:64:55:66:7a:d7:8a:58:05:43: ed:4f:d6:09:d5:fc:28:b8:89:9b:9c:ef:f9:c2:a1: 38:f8:13:82:1d:ac:77:4f:ca:58:de:39:a9:66:e2: bf:03:20:e8:73:7c:77:a0:a7:ab:4f:f1:48:89:2e: 6e:5d:44:78:be:fb:28:ad:fc:06:05:75:ed:d7:ff: 01:06:2e:00:df:95:8a:33:b2:1c:bb:bc:be:62:aa: 25:e7:9c:d1:80:f8:b3:aa:4b:ac:85:89:1c:12:6b: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5A:5E:D6:7B:5C:67:E3:59:7D:7B:B3:CB:A4:71:BF:E8:E7:D8:90 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qVpe1ntcZ-NZfXuzy6Rxv-jn2JA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.24.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:e1:bf:95:39:70:43:f8:2e:54:50:76:3b:22:51:b1:b2:6e: 8b:d5:49:26:4a:d9:d4:a9:c0:ba:8c:d4:91:70:a6:dc:7b:f9: b5:f9:5d:1e:e4:d6:28:a7:22:b6:f2:be:08:84:f6:c0:c0:fa: 07:79:76:d5:f7:a6:16:fe:a6:b5:51:db:15:3e:cb:be:3f:cc: 8a:5f:04:52:0a:81:b1:74:4b:b7:0b:cb:cf:21:82:6c:ab:9f: 79:4b:9d:98:72:b4:b3:2c:64:f5:15:5b:c7:4c:f6:2f:cb:54: 58:5b:d2:64:7a:ee:98:c6:78:5a:bc:c9:1a:a2:48:82:43:19: ff:01:d6:b5:7a:e7:ba:0d:e2:b1:8d:fa:73:4b:c0:90:cd:52: ad:4d:f9:c5:03:72:b3:04:79:04:0c:df:e7:3a:83:e5:83:4c: 5c:44:c1:e8:7f:ea:a8:ea:4e:ff:99:de:4f:b4:24:6e:f3:88: cc:c6:25:be:64:79:e6:24:02:94:78:71:e0:39:b9:2d:7a:2a: ef:9e:35:5d:b7:e0:69:33:60:6b:fd:87:c7:92:f0:21:ad:bf: 91:f8:52:d0:d1:76:f9:f8:a4:58:76:57:fa:28:53:a6:ce:8b: cd:64:1b:1e:1b:f5:10:23:ea:95:a8:7c:ff:86:ce:39:01:b5: cf:dd:80:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE5NUE1RUQ2N0I1QzY3 RTM1OTdEN0JCM0NCQTQ3MUJGRThFN0Q4OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXH9wuYmDr8P/3NqjxH7lRi25EOh28Fl0WQmcm2/6kpEdiKW9D PVD1o1qT24kmoQ5tNi7bAi+7uuJuPKbHbh4uNFTrAAWp10c8kxxhx+c35uVUF1b8 gNpNzKa3S5REi8rORDQ8ii4d4S6sTVZdh3Q+p5qbdbHjal6C1zT7rhpqGdNnmX0Y /Tjd4Dm8SFAp5ylgGiG4syPdHqKO6mRVZnrXilgFQ+1P1gnV/Ci4iZuc7/nCoTj4 E4IdrHdPyljeOalm4r8DIOhzfHegp6tP8UiJLm5dRHi++yit/AYFde3X/wEGLgDf lYozshy7vL5iqiXnnNGA+LOqS6yFiRwSa8G5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqVpe1ntcZ+NZfXuzy6Rxv+jn2JAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FWcGUxbnRjWi1OWmZYdXp5 NlJ4di1qbjJKQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wxgwDQYJKoZIhvcNAQELBQADggEBAAzhv5U5cEP4LlRQdjsiUbGybovVSSZK2dSp wLqM1JFwptx7+bX5XR7k1iinIrbyvgiE9sDA+gd5dtX3phb+prVR2xU+y74/zIpf BFIKgbF0S7cLy88hgmyrn3lLnZhytLMsZPUVW8dM9i/LVFhb0mR67pjGeFq8yRqi SIJDGf8B1rV657oN4rGN+nNLwJDNUq1N+cUDcrMEeQQM3+c6g+WDTFxEweh/6qjq Tv+Z3k+0JG7ziMzGJb5keeYkApR4ceA5uS16Ku+eNV234GkzYGv9h8eS8CGtv5H4 UtDRdvn4pFh2V/ooU6bOi81kGx4b9RAj6pWofP+GzjkBtc/dgEo= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org