$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tLIiBWXRK_hLkXPzV35PFDQ9Klg.roa File: tLIiBWXRK_hLkXPzV35PFDQ9Klg.roa (raw, json) Hash identifier: 6BSJBNzv8GgxEN6Zrkp6IuYKA7PgACgWe3S4a7GjOk8= Subject key identifier: B4:B2:22:05:65:D1:2B:F8:4B:91:73:F3:57:7E:4F:14:34:3D:2A:58 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3079 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tLIiBWXRK_hLkXPzV35PFDQ9Klg.roa Signing time: Mon 26 Aug 2024 05:29:29 +0000 ROA not before: Mon 26 Aug 2024 05:29:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12409 (0x3079) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B4B2220565D12BF84B9173F3577E4F14343D2A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:dc:58:52:b7:70:81:29:2f:d0:29:7c:7f: 02:b0:a2:f3:3a:61:55:30:7a:34:cb:42:cf:12:47: d0:7c:13:fa:d1:f8:c3:f1:28:4f:08:0d:a1:5b:e2: 41:a7:08:8d:e5:27:81:f9:73:8c:f5:5d:cf:08:e9: 0b:95:8b:bb:3b:1c:65:e6:79:44:53:af:a4:0a:39: da:6e:7d:1f:66:9f:0f:25:00:00:60:85:f6:aa:69: 0a:f2:3c:2e:a4:6b:70:0a:e8:8b:c6:31:6d:78:dd: b6:74:31:3f:e0:94:84:dc:69:31:39:4e:e3:da:66: d8:8d:d4:c4:de:95:41:06:bc:b8:46:68:7d:e9:93: c3:74:1e:fc:c4:86:54:94:c9:58:23:85:72:3e:39: b0:76:fe:81:19:e4:24:e1:7b:11:a9:f3:55:e1:87: df:fc:7b:43:78:64:db:c0:7e:e7:3a:bd:64:64:1d: cc:dd:c6:58:78:95:41:e8:3c:da:5a:2d:a4:58:2e: cc:f9:76:ba:bf:d2:fd:90:de:a4:af:05:0d:15:aa: 60:70:66:20:c5:9c:1f:e8:d7:d7:27:c6:09:58:13: 57:db:df:d8:52:b7:d9:81:f2:cc:41:90:9f:15:79: 02:1a:41:f6:91:39:f8:83:1b:d2:45:0f:3c:44:04: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B2:22:05:65:D1:2B:F8:4B:91:73:F3:57:7E:4F:14:34:3D:2A:58 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tLIiBWXRK_hLkXPzV35PFDQ9Klg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.68.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:6d:e4:69:1c:7e:5f:7b:62:03:6c:16:a0:27:7e:39:ad:0a: 35:fa:36:46:56:22:fb:ce:98:21:67:28:22:6e:19:8c:47:97: 65:e4:99:81:98:3b:59:1f:56:6f:6e:65:63:69:79:40:e8:6e: 09:3b:1f:2b:30:a9:d1:2f:e8:1d:1f:f7:8a:23:7b:e8:d7:59: d2:ed:5a:f6:dc:ea:ca:f0:c2:55:f7:e5:46:cf:56:f3:db:32: 70:a5:82:55:27:c7:d3:8d:79:76:6a:f9:5b:fb:cb:b8:bd:8e: a7:4a:5f:0d:1e:46:c0:f7:49:fb:fc:ef:62:45:86:79:f6:b8: b3:92:8e:bf:48:41:93:83:a9:5c:9c:52:09:df:62:c2:27:fc: be:d3:3a:1d:02:17:6f:31:5a:1a:0e:89:e1:b5:77:ee:49:d3: d3:dd:b5:be:6b:56:e2:47:c1:0d:cc:52:23:68:58:83:83:34: af:fb:09:f8:1e:70:9c:19:07:cf:54:72:d2:ea:a6:f1:90:1b: 4a:c7:0d:a6:3a:57:35:13:f6:2d:01:b6:cf:bf:29:4c:82:8c: b3:a6:ee:ee:0f:2e:17:60:7d:05:89:0f:75:1e:fd:b3:a5:b2: 18:85:da:b1:d7:06:15:bc:45:ba:1c:9c:80:d3:b2:73:97:90: ed:5a:36:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0QjIyMjA1NjVEMTJC Rjg0QjkxNzNGMzU3N0U0RjE0MzQzRDJBNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLmtxYUrdwgSkv0Cl8fwKwovM6YVUwejTLQs8SR9B8E/rR+MPx KE8IDaFb4kGnCI3lJ4H5c4z1Xc8I6QuVi7s7HGXmeURTr6QKOdpufR9mnw8lAABg hfaqaQryPC6ka3AK6IvGMW143bZ0MT/glITcaTE5TuPaZtiN1MTelUEGvLhGaH3p k8N0HvzEhlSUyVgjhXI+ObB2/oEZ5CThexGp81Xhh9/8e0N4ZNvAfuc6vWRkHczd xlh4lUHoPNpaLaRYLsz5drq/0v2Q3qSvBQ0VqmBwZiDFnB/o19cnxglYE1fb39hS t9mB8sxBkJ8VeQIaQfaROfiDG9JFDzxEBN+PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtLIiBWXRK/hLkXPzV35PFDQ9KlgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RMSWlCV1hSS19oTGtYUHpW MzVQRkRROUtsZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wUQwDQYJKoZIhvcNAQELBQADggEBACpt5Gkcfl97YgNsFqAnfjmtCjX6NkZWIvvO mCFnKCJuGYxHl2XkmYGYO1kfVm9uZWNpeUDobgk7HyswqdEv6B0f94oje+jXWdLt Wvbc6srwwlX35UbPVvPbMnClglUnx9ONeXZq+Vv7y7i9jqdKXw0eRsD3Sfv872JF hnn2uLOSjr9IQZODqVycUgnfYsIn/L7TOh0CF28xWhoOieG1d+5J09Pdtb5rVuJH wQ3MUiNoWIODNK/7CfgecJwZB89UctLqpvGQG0rHDaY6VzUT9i0Bts+/KUyCjLOm 7u4PLhdgfQWJD3Ue/bOlshiF2rHXBhW8RbocnIDTsnOXkO1aNrc= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:23 2024 by rpki-client on console-ams.rpki-client.org