$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rQc4ezk9ApLqyyPR21z5o_u0kmU.roa File: rQc4ezk9ApLqyyPR21z5o_u0kmU.roa (raw, json) Hash identifier: fgC0/OBtSejXTmDww6O1X52xAp64/uDJ0bkBdv8Yi3k= Subject key identifier: AD:07:38:7B:39:3D:02:92:EA:CB:23:D1:DB:5C:F9:A3:FB:B4:92:65 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 31E6 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rQc4ezk9ApLqyyPR21z5o_u0kmU.roa Signing time: Mon 26 Aug 2024 05:31:04 +0000 ROA not before: Mon 26 Aug 2024 05:31:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12774 (0x31e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AD07387B393D0292EACB23D1DB5CF9A3FBB49265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:38:41:56:c9:98:f2:a3:9e:eb:89:9a:6c: 85:3d:b4:1f:12:87:5c:10:98:71:b6:7b:99:06:d8: 2a:73:b6:22:23:b7:61:f6:a1:57:07:d4:5e:ab:0d: 1e:db:10:0d:41:e9:f0:40:55:53:3e:1f:ec:45:54: c5:76:c1:54:bc:30:a8:c2:29:eb:36:53:c3:fd:39: 26:e5:b0:86:ee:fc:d8:2f:d2:62:d2:8c:01:c4:e5: f9:fe:dd:4c:86:f7:f6:79:9f:77:a9:e7:98:ba:81: 9b:e7:f7:fb:46:91:00:da:e4:0d:65:0c:27:b6:21: 60:7a:6d:6f:e0:7d:76:b3:73:d0:2f:3c:a9:ae:d6: 0d:4c:aa:0f:5a:63:12:ab:7a:a9:e6:15:26:5a:32: 1b:a6:eb:04:02:d3:f2:9f:73:49:5e:38:76:e3:58: ff:eb:8a:52:53:38:a4:fe:f4:37:50:e7:a3:66:34: 80:34:b9:48:1f:59:17:16:c1:1b:3d:67:fe:13:1b: a0:4e:b0:54:79:5f:0e:9b:6b:1e:1f:55:e6:d0:9d: ad:f1:61:c5:a3:71:f4:e6:3f:f9:9e:55:66:28:c0: 23:f6:74:73:29:89:4d:c6:a9:57:da:7a:a1:71:dd: f9:94:36:99:2b:d2:dd:cc:92:a0:b7:71:da:17:1d: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:07:38:7B:39:3D:02:92:EA:CB:23:D1:DB:5C:F9:A3:FB:B4:92:65 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rQc4ezk9ApLqyyPR21z5o_u0kmU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.72.0/21 Signature Algorithm: sha256WithRSAEncryption 73:04:93:41:a1:88:32:dc:1f:3c:d7:cb:59:ef:fa:8a:71:26: 34:5b:0f:31:06:88:8f:c2:81:c2:c6:da:ae:98:85:16:ef:37: b7:c8:4e:b8:13:af:c9:f8:c7:5d:ca:45:92:40:ea:38:5a:1e: 69:c8:a8:6e:3c:00:c0:52:8f:dd:6c:80:62:bc:a4:cc:26:19: 82:96:5a:fc:c0:81:92:77:ff:dd:a5:9e:b4:ab:11:44:d6:4b: 83:4b:81:b7:36:ab:42:4d:99:b2:b4:ff:a5:71:08:00:8b:4e: 84:45:b8:fb:2b:bf:22:f9:32:12:fd:e0:2a:2d:31:f2:05:30: e8:c9:0f:e6:09:da:75:82:dc:9c:83:41:f9:a8:36:21:75:65: 39:09:48:d3:b5:f2:09:61:5b:d9:1b:51:d6:9e:c6:b4:76:6c: 40:7f:84:c1:73:4c:63:f6:c0:20:b8:b1:25:ff:3f:f8:68:80: 1c:63:ad:58:9d:b2:0d:a9:92:da:8e:fb:09:0d:2c:5c:ef:ac: 57:db:fb:8b:d2:a0:00:31:73:cb:ac:a8:5f:c4:1e:47:f6:93: 30:e5:4c:ce:2b:bc:57:a3:51:f1:bc:8b:b2:60:76:39:4e:c1: 35:7f:ce:ae:c5:11:0c:2f:b0:91:31:ec:61:8d:cc:45:4d:2a: 2f:1b:73:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFEMDczODdCMzkzRDAy OTJFQUNCMjNEMURCNUNGOUEzRkJCNDkyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDlDhBVsmY8qOe64mabIU9tB8Sh1wQmHG2e5kG2CpztiIjt2H2 oVcH1F6rDR7bEA1B6fBAVVM+H+xFVMV2wVS8MKjCKes2U8P9OSblsIbu/Ngv0mLS jAHE5fn+3UyG9/Z5n3ep55i6gZvn9/tGkQDa5A1lDCe2IWB6bW/gfXazc9AvPKmu 1g1Mqg9aYxKreqnmFSZaMhum6wQC0/Kfc0leOHbjWP/rilJTOKT+9DdQ56NmNIA0 uUgfWRcWwRs9Z/4TG6BOsFR5Xw6bax4fVebQna3xYcWjcfTmP/meVWYowCP2dHMp iU3GqVfaeqFx3fmUNpkr0t3MkqC3cdoXHY4XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrQc4ezk9ApLqyyPR21z5o/u0kmUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JRYzRlems5QXBMcXl5UFIy MXo1b191MGttVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wUgwDQYJKoZIhvcNAQELBQADggEBAHMEk0GhiDLcHzzXy1nv+opxJjRbDzEGiI/C gcLG2q6YhRbvN7fITrgTr8n4x13KRZJA6jhaHmnIqG48AMBSj91sgGK8pMwmGYKW WvzAgZJ3/92lnrSrEUTWS4NLgbc2q0JNmbK0/6VxCACLToRFuPsrvyL5MhL94Cot MfIFMOjJD+YJ2nWC3JyDQfmoNiF1ZTkJSNO18glhW9kbUdaexrR2bEB/hMFzTGP2 wCC4sSX/P/hogBxjrVidsg2pktqO+wkNLFzvrFfb+4vSoAAxc8usqF/EHkf2kzDl TM4rvFejUfG8i7JgdjlOwTV/zq7FEQwvsJEx7GGNzEVNKi8bc5k= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org