$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa File: qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa (raw, json) Hash identifier: BqVNgR59ZTkF8mzWQ7qgp97QdMUSsyrq46IkBOTumHM= Subject key identifier: A9:EE:25:DC:B7:1B:B8:B4:35:98:3C:F7:80:CB:25:A4:B3:81:57:93 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32B7 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa Signing time: Mon 26 Aug 2024 05:31:56 +0000 ROA not before: Mon 26 Aug 2024 05:31:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12983 (0x32b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A9EE25DCB71BB8B435983CF780CB25A4B3815793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:32:4c:ba:5b:51:4e:9a:86:d3:e6:ce:74: 66:24:f7:92:4d:d7:43:61:ac:fc:92:ec:8b:e3:f0: 63:98:18:d4:54:c1:61:e1:93:e0:68:76:b0:da:62: 27:56:b5:2b:83:49:ce:75:43:ae:91:6d:4d:5b:b4: f2:ad:aa:51:c5:e7:c7:54:f6:e5:10:a2:aa:92:7e: d9:37:19:8d:4d:66:1b:a0:5a:e2:ee:1c:f5:f5:dd: e6:a1:53:bb:c9:11:d3:fb:82:ee:6b:f9:43:8e:ce: b5:9e:8e:eb:c8:3e:1b:a7:bf:3c:e8:c1:73:84:e4: b7:95:f7:a2:9c:20:a3:7c:30:d6:4d:55:2c:d7:af: ef:94:e0:2b:e3:a0:79:2b:f7:d2:43:26:67:5c:cd: b2:a6:8c:51:ec:9f:ba:14:28:66:59:79:0a:f3:96: 44:1e:66:e1:70:9c:fc:25:66:ed:27:95:b9:8e:0f: aa:26:df:db:7b:da:f8:cd:eb:cf:9b:fb:56:84:10: 95:75:c9:c2:5c:1c:96:40:b0:9c:aa:3a:b0:55:79: bc:ce:60:fb:4f:00:25:34:73:c2:f7:f9:15:03:33: 86:70:1a:77:8a:ba:04:8a:09:26:1e:ac:8b:e8:f4: dc:85:46:3e:9d:e2:f9:2c:18:f7:c9:a3:90:d8:22: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EE:25:DC:B7:1B:B8:B4:35:98:3C:F7:80:CB:25:A4:B3:81:57:93 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.232.0/22 Signature Algorithm: sha256WithRSAEncryption 18:dd:08:23:18:89:4a:88:52:5e:e8:12:a1:f3:cf:31:4c:eb: 5f:6a:13:f9:a7:2d:56:42:34:94:ae:c3:36:98:f9:3d:4c:b4: 3d:61:c0:6a:37:44:08:89:19:0d:65:ee:37:86:aa:c6:90:c0: 6d:d3:24:68:da:48:9b:98:ce:97:d3:de:9a:69:ab:ce:7b:93: d6:cd:cc:38:eb:71:77:c4:7c:b0:1f:44:81:10:4c:a7:dc:03: 36:fd:4c:36:d5:d1:99:30:cc:2d:e2:2a:79:68:0f:e8:bb:fa: 22:1a:72:b0:e0:d0:d1:4a:75:67:b7:2e:5f:70:70:fb:88:76: 9b:72:6e:f9:b5:f2:99:80:4e:3a:79:a2:72:a6:ec:fb:13:5c: 3b:8a:5d:56:aa:c4:9e:1a:81:4c:c2:63:20:42:6b:a2:88:a5: 04:17:04:eb:44:f3:85:28:7e:72:67:c3:d1:a9:22:47:a7:2a: 35:08:76:a1:83:42:30:f6:31:d0:3f:66:a0:f6:48:fb:97:6a: 0f:f3:9c:34:2e:2e:87:b7:50:83:a6:eb:a2:75:8d:e5:46:a0: 91:be:f8:15:b2:53:d9:25:88:69:a7:64:17:42:ff:8f:12:4c: 8d:b7:98:b2:a6:5a:33:e4:12:f1:00:e9:e4:3a:2e:c3:a9:57: 4a:b7:37:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE5RUUyNURDQjcxQkI4 QjQzNTk4M0NGNzgwQ0IyNUE0QjM4MTU3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ATJMultRTpqG0+bOdGYk95JN10NhrPyS7Ivj8GOYGNRUwWHh k+BodrDaYidWtSuDSc51Q66RbU1btPKtqlHF58dU9uUQoqqSftk3GY1NZhugWuLu HPX13eahU7vJEdP7gu5r+UOOzrWejuvIPhunvzzowXOE5LeV96KcIKN8MNZNVSzX r++U4CvjoHkr99JDJmdczbKmjFHsn7oUKGZZeQrzlkQeZuFwnPwlZu0nlbmOD6om 39t72vjN68+b+1aEEJV1ycJcHJZAsJyqOrBVebzOYPtPACU0c8L3+RUDM4ZwGneK ugSKCSYerIvo9NyFRj6d4vksGPfJo5DYItetAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqe4l3LcbuLQ1mDz3gMslpLOBV5MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FlNGwzTGNidUxRMW1EejNn TXNscExPQlY1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w+gwDQYJKoZIhvcNAQELBQADggEBABjdCCMYiUqIUl7oEqHzzzFM619qE/mnLVZC NJSuwzaY+T1MtD1hwGo3RAiJGQ1l7jeGqsaQwG3TJGjaSJuYzpfT3pppq857k9bN zDjrcXfEfLAfRIEQTKfcAzb9TDbV0ZkwzC3iKnloD+i7+iIacrDg0NFKdWe3Ll9w cPuIdptybvm18pmATjp5onKm7PsTXDuKXVaqxJ4agUzCYyBCa6KIpQQXBOtE84Uo fnJnw9GpIkenKjUIdqGDQjD2MdA/ZqD2SPuXag/znDQuLoe3UIOm66J1jeVGoJG+ +BWyU9kliGmnZBdC/48STI23mLKmWjPkEvEA6eQ6LsOpV0q3N6c= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org