$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r1Wn5PsPHTzNeoWXTH9asqhs63o.roa File: r1Wn5PsPHTzNeoWXTH9asqhs63o.roa (raw, json) Hash identifier: CAZu3OWzBtJeacqJOIzYUQkq8UOJ+RgJiy5IIRQPe+s= Subject key identifier: AF:55:A7:E4:FB:0F:1D:3C:CD:7A:85:97:4C:7F:5A:B2:A8:6C:EB:7A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3004 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r1Wn5PsPHTzNeoWXTH9asqhs63o.roa Signing time: Mon 26 Aug 2024 05:29:03 +0000 ROA not before: Mon 26 Aug 2024 05:29:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12292 (0x3004) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AF55A7E4FB0F1D3CCD7A85974C7F5AB2A86CEB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:72:93:93:3d:59:10:2a:28:1b:12:c0:02:5e: 54:98:c5:53:e6:07:dc:ae:31:bc:55:9b:e3:96:ff: 92:ce:21:3b:bf:be:ee:e8:f9:c2:98:57:9d:a2:aa: a3:cc:7b:30:6a:72:9c:84:c0:c2:d6:04:b8:29:96: a5:7d:09:06:2d:81:3f:d9:a6:a6:d7:ad:05:5a:cd: 00:a9:07:6d:27:2a:27:ca:9b:54:e4:62:df:49:77: e5:b4:b0:93:e3:b8:d9:84:1f:cc:f2:3e:c2:f5:cb: 38:18:03:8a:a7:7d:78:fd:77:35:64:b4:ae:5a:20: 8a:32:a3:a2:35:20:40:b8:99:0c:b5:28:43:2a:41: 3b:70:81:7e:3c:77:42:8e:08:78:08:5b:91:1d:4f: ce:2c:cb:68:53:66:53:d1:a3:76:94:f3:a8:f8:c3: cd:a9:a6:22:96:c6:eb:36:68:80:a5:1e:06:92:ff: 5d:47:df:07:53:36:7d:98:81:8f:46:7d:52:83:7d: b3:88:78:21:48:52:e0:ac:86:90:f6:ac:86:f1:29: 96:03:10:1d:1b:bb:b8:21:1d:af:c4:27:ab:01:b5: 4e:de:44:55:f9:27:4f:8c:53:f3:95:42:32:0c:a9: 12:ef:ec:55:77:a3:33:31:ce:17:ec:c3:1f:0a:f4: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:55:A7:E4:FB:0F:1D:3C:CD:7A:85:97:4C:7F:5A:B2:A8:6C:EB:7A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r1Wn5PsPHTzNeoWXTH9asqhs63o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.200.0/22 Signature Algorithm: sha256WithRSAEncryption 72:84:33:e1:f9:1e:47:59:15:f5:4c:32:ac:91:ae:e6:f9:99: b7:56:0b:3f:d0:b3:69:29:7d:62:ba:0c:dd:01:1c:ae:40:49: a7:e1:4f:9a:35:96:1c:45:af:f3:24:98:22:0c:7c:9d:57:74: dd:93:7b:d9:7e:35:f8:43:b0:0a:36:1d:ed:a3:e2:73:8c:43: 3f:09:7a:8e:02:b4:f9:2a:66:58:0f:28:00:fb:3b:6d:15:11: 03:2a:33:6c:2f:b2:fe:b4:b0:53:9b:a5:87:59:51:50:88:49: 1b:fa:36:60:11:fa:22:87:49:7d:ca:72:dd:dc:89:e3:98:80: a7:17:0a:98:49:22:ed:8a:9d:30:9a:cd:61:0f:41:1f:6c:f3: 1f:46:cd:c7:a2:7a:5f:ba:8d:f2:49:7a:3e:34:6f:e8:51:01: c9:40:4e:e4:0f:2a:99:e0:1a:db:12:e2:19:26:4c:2b:02:34: 99:55:40:ee:3e:92:87:4c:9d:de:5c:88:23:78:b0:4a:a7:d7: bc:b3:b5:58:91:16:83:70:cb:e0:af:b7:d3:39:59:63:7f:67: 0f:68:01:40:09:b3:75:6e:e5:a9:fa:99:83:ca:b8:4f:dd:95: 0f:16:66:25:2d:8b:08:68:03:b0:88:4e:f0:41:77:32:15:29: 42:62:94:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFGNTVBN0U0RkIwRjFE M0NDRDdBODU5NzRDN0Y1QUIyQTg2Q0VCN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqcpOTPVkQKigbEsACXlSYxVPmB9yuMbxVm+OW/5LOITu/vu7o +cKYV52iqqPMezBqcpyEwMLWBLgplqV9CQYtgT/ZpqbXrQVazQCpB20nKifKm1Tk Yt9Jd+W0sJPjuNmEH8zyPsL1yzgYA4qnfXj9dzVktK5aIIoyo6I1IEC4mQy1KEMq QTtwgX48d0KOCHgIW5EdT84sy2hTZlPRo3aU86j4w82ppiKWxus2aIClHgaS/11H 3wdTNn2YgY9GfVKDfbOIeCFIUuCshpD2rIbxKZYDEB0bu7ghHa/EJ6sBtU7eRFX5 J0+MU/OVQjIMqRLv7FV3ozMxzhfswx8K9CzDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUr1Wn5PsPHTzNeoWXTH9asqhs63owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3IxV241UHNQSFR6TmVvV1hU SDlhc3FoczYzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wsgwDQYJKoZIhvcNAQELBQADggEBAHKEM+H5HkdZFfVMMqyRrub5mbdWCz/Qs2kp fWK6DN0BHK5ASafhT5o1lhxFr/MkmCIMfJ1XdN2Te9l+NfhDsAo2He2j4nOMQz8J eo4CtPkqZlgPKAD7O20VEQMqM2wvsv60sFObpYdZUVCISRv6NmAR+iKHSX3Kct3c ieOYgKcXCphJIu2KnTCazWEPQR9s8x9Gzceiel+6jfJJej40b+hRAclATuQPKpng GtsS4hkmTCsCNJlVQO4+kodMnd5ciCN4sEqn17yztViRFoNwy+Cvt9M5WWN/Zw9o AUAJs3Vu5an6mYPKuE/dlQ8WZiUtiwhoA7CITvBBdzIVKUJilIM= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org