$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa File: qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa (raw, json) Hash identifier: UNlTg2y+YGL21hBpMgjw4PWQiGCAnQn4N5Ey5Zm+Vuk= Subject key identifier: A9:E0:BC:13:60:6C:4B:FF:7F:4C:83:2E:B8:9B:67:DE:16:22:42:8E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3237 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa Signing time: Mon 26 Aug 2024 05:31:25 +0000 ROA not before: Mon 26 Aug 2024 05:31:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12855 (0x3237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A9E0BC13606C4BFF7F4C832EB89B67DE1622428E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:86:81:8e:cc:e7:49:ee:c7:af:ea:00:01: 96:79:20:9d:b5:3a:2f:41:15:88:5e:2a:08:cf:98: 3b:6a:51:44:70:2a:10:62:a5:9d:e3:75:a3:f6:13: 91:19:d9:f9:03:e5:4d:25:09:21:74:8c:61:59:b8: 49:e8:76:c3:f7:d8:87:31:fa:c0:4d:6f:e7:21:44: 36:d7:69:1e:c7:52:37:d1:13:dc:ac:2c:8c:68:0d: 2d:b5:7d:f7:3f:91:c1:f6:ff:ee:70:7c:3a:e3:83: 9a:88:91:da:ac:8b:74:31:39:bc:b1:4f:f8:89:ce: c3:d1:15:35:d7:f1:d6:04:29:23:94:1f:c8:43:08: ef:c4:02:a7:8f:28:03:89:86:e5:72:0d:76:d0:1c: 77:90:e2:33:35:74:f4:84:fa:fe:e2:91:19:78:d8: 8d:91:94:b3:6e:24:c9:9e:80:78:84:23:2b:6e:65: a7:e2:dd:e0:e2:7a:17:22:11:05:fc:49:52:d8:25: 12:59:34:e6:e2:28:c4:7e:e1:5f:08:f7:30:7e:03: a7:99:6c:eb:7c:07:bc:8f:e6:a5:4d:8d:e4:2d:c5: 11:b5:9d:b1:b8:91:c9:81:cd:d6:3a:28:96:0e:b0: 54:ad:57:b1:f5:c9:78:9d:34:1d:bc:3a:31:3a:a5: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E0:BC:13:60:6C:4B:FF:7F:4C:83:2E:B8:9B:67:DE:16:22:42:8E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qeC8E2BsS_9_TIMuuJtn3hYiQo4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.160.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:92:d1:af:02:98:9b:a3:f5:b0:58:e0:f0:dd:8f:b6:f0:46: aa:34:04:dc:47:09:2e:58:36:c4:87:02:3f:6b:dc:4c:66:e7: 0a:3d:05:8c:bf:b2:f7:d6:ca:b1:2c:81:5f:81:79:f1:c0:41: 2b:e5:65:f6:87:14:c5:84:53:83:6d:83:a3:d9:f3:b1:06:0e: ea:73:ac:55:12:32:31:9e:a3:0e:a9:e9:76:95:d6:6b:ab:c8: c5:3c:cd:6e:bf:f5:df:b9:7a:ef:8a:f8:31:f8:cf:6c:af:eb: eb:87:c2:80:37:fb:51:59:f7:48:9a:14:48:5c:a0:85:5b:12: 7c:bc:8e:26:9b:d5:41:e9:e5:8c:8c:a0:9a:d4:40:1b:15:f0: d6:c1:19:15:da:d6:9a:5c:57:5e:2d:61:e9:38:fc:00:39:a4: a0:fc:91:d7:0d:8d:ff:ec:d2:58:2f:ce:97:89:90:f4:44:e0: 2c:86:3e:72:ce:98:bb:c1:24:07:a7:32:09:7f:d1:60:f9:78: 1a:85:54:42:6a:37:6f:bb:28:78:48:df:3c:29:cb:8b:aa:15: de:fe:dc:8f:65:02:ea:86:03:5d:2d:67:74:ee:fb:34:2e:bb: 08:5d:23:39:fc:da:d8:83:17:47:6c:ba:b5:11:14:26:7e:cd: 92:2c:0b:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE5RTBCQzEzNjA2QzRC RkY3RjRDODMyRUI4OUI2N0RFMTYyMjQyOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaJoaBjsznSe7Hr+oAAZZ5IJ21Oi9BFYheKgjPmDtqUURwKhBi pZ3jdaP2E5EZ2fkD5U0lCSF0jGFZuEnodsP32Icx+sBNb+chRDbXaR7HUjfRE9ys LIxoDS21ffc/kcH2/+5wfDrjg5qIkdqsi3QxObyxT/iJzsPRFTXX8dYEKSOUH8hD CO/EAqePKAOJhuVyDXbQHHeQ4jM1dPSE+v7ikRl42I2RlLNuJMmegHiEIytuZafi 3eDiehciEQX8SVLYJRJZNObiKMR+4V8I9zB+A6eZbOt8B7yP5qVNjeQtxRG1nbG4 kcmBzdY6KJYOsFStV7H1yXidNB28OjE6pXrHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqeC8E2BsS/9/TIMuuJtn3hYiQo4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FlQzhFMkJzU185X1RJTXV1 SnRuM2hZaVFvNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 w6AwDQYJKoZIhvcNAQELBQADggEBACuS0a8CmJuj9bBY4PDdj7bwRqo0BNxHCS5Y NsSHAj9r3Exm5wo9BYy/svfWyrEsgV+BefHAQSvlZfaHFMWEU4Ntg6PZ87EGDupz rFUSMjGeow6p6XaV1muryMU8zW6/9d+5eu+K+DH4z2yv6+uHwoA3+1FZ90iaFEhc oIVbEny8jiab1UHp5YyMoJrUQBsV8NbBGRXa1ppcV14tYek4/AA5pKD8kdcNjf/s 0lgvzpeJkPRE4CyGPnLOmLvBJAenMgl/0WD5eBqFVEJqN2+7KHhI3zwpy4uqFd7+ 3I9lAuqGA10tZ3Tu+zQuuwhdIzn82tiDF0dsurURFCZ+zZIsC30= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org