$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMNQzOAzxO0wpSuRYHdYEi10AWA.roa File: tMNQzOAzxO0wpSuRYHdYEi10AWA.roa (raw, json) Hash identifier: w9SaXSXwdUzwZosDnjuTRz1ZdL+0kxR5fpfdMb4MHOI= Subject key identifier: B4:C3:50:CC:E0:33:C4:ED:30:A5:2B:91:60:77:58:12:2D:74:01:60 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3191 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMNQzOAzxO0wpSuRYHdYEi10AWA.roa Signing time: Mon 26 Aug 2024 05:30:35 +0000 ROA not before: Mon 26 Aug 2024 05:30:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12689 (0x3191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B4C350CCE033C4ED30A52B91607758122D740160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:59:9b:5e:6e:34:17:2e:39:06:53:7c:c0: 89:b1:3b:a6:e2:13:94:be:9b:df:99:61:fc:c2:1f: b6:e0:2b:4a:0f:7e:25:3d:13:5d:38:c9:ad:fd:c2: 32:43:76:ed:de:c8:8b:f9:e4:4d:25:87:0a:cf:74: 17:ca:18:dc:60:26:6f:7b:d8:bc:8e:67:e7:6c:22: 7b:81:e9:57:ff:68:82:aa:0f:60:68:59:03:b8:39: 5e:e5:2e:1d:55:f8:a0:d5:5d:9e:6c:2f:87:11:d3: 02:81:03:18:d7:f3:dc:e5:12:32:4a:cd:08:61:9a: 77:af:fb:c5:8c:e5:c4:5a:f2:5b:2c:6a:e8:82:3f: 53:27:9a:7d:36:ad:d4:4a:53:cd:c5:fe:e7:1d:b6: 6b:f7:f5:a9:82:76:60:e8:7d:1b:bd:9f:ed:d3:49: 84:b7:7a:7f:91:23:4e:bb:9a:98:94:ce:07:95:5d: 1c:10:2c:d2:d4:6c:e0:5a:03:b2:06:98:9a:13:ba: f1:52:9d:c2:30:f4:b5:83:d1:4e:9c:cc:e3:fe:cb: 14:a4:5b:f3:24:f0:8e:db:e4:a7:ed:97:18:95:5b: 99:06:8f:85:cd:da:1c:0c:62:29:5c:e5:0e:17:f7: 24:94:23:1d:0c:f4:56:e6:79:ba:a5:5c:fe:3f:6d: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C3:50:CC:E0:33:C4:ED:30:A5:2B:91:60:77:58:12:2D:74:01:60 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMNQzOAzxO0wpSuRYHdYEi10AWA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.48.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:c6:6d:30:a7:46:6f:f7:84:fc:eb:4a:2d:08:81:36:37:a7: ea:d5:60:41:93:00:f3:e3:36:11:06:95:7c:f4:49:3c:fe:27: 29:cf:67:04:f6:b9:b4:3e:ad:63:cc:23:66:59:ce:ff:93:ca: bb:0e:bf:37:65:1c:e1:65:61:c0:28:7c:ff:a4:dd:c9:31:d5: b3:18:48:7d:9a:77:35:c2:26:b5:68:08:00:5e:aa:6f:3d:d6: c1:f9:67:f0:3b:7b:9a:fb:da:b0:2c:89:3c:33:01:b1:2c:5b: 47:b6:9a:25:3b:a5:a4:b8:4b:e4:6d:c9:6c:ec:07:5a:bc:bd: 74:ce:80:a7:13:20:db:76:46:cc:f7:5d:d0:ba:be:de:cf:85: ad:8d:47:ba:dd:43:a1:3b:62:13:0e:0a:3d:39:0a:c7:e0:18: 28:25:cb:40:e1:02:bd:c3:2d:de:2e:9d:46:bf:21:b1:09:99: d6:92:aa:29:ca:85:18:fd:e5:d7:06:1a:49:6b:d5:45:28:7a: 30:08:d9:c8:8d:7d:03:ea:f2:96:a9:bb:d3:5a:49:45:dc:2a: e5:a5:ef:3c:2a:b8:33:ba:5e:f9:32:c9:03:25:cc:f5:d5:e4: 32:9d:52:6e:80:25:04:29:ef:95:d3:b9:e2:b5:7f:ab:15:2c: be:3d:6b:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0QzM1MENDRTAzM0M0 RUQzMEE1MkI5MTYwNzc1ODEyMkQ3NDAxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDfFmbXm40Fy45BlN8wImxO6biE5S+m9+ZYfzCH7bgK0oPfiU9 E104ya39wjJDdu3eyIv55E0lhwrPdBfKGNxgJm972LyOZ+dsInuB6Vf/aIKqD2Bo WQO4OV7lLh1V+KDVXZ5sL4cR0wKBAxjX89zlEjJKzQhhmnev+8WM5cRa8lssauiC P1Mnmn02rdRKU83F/ucdtmv39amCdmDofRu9n+3TSYS3en+RI067mpiUzgeVXRwQ LNLUbOBaA7IGmJoTuvFSncIw9LWD0U6czOP+yxSkW/Mk8I7b5KftlxiVW5kGj4XN 2hwMYilc5Q4X9ySUIx0M9FbmebqlXP4/bak7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtMNQzOAzxO0wpSuRYHdYEi10AWAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RNTlF6T0F6eE8wd3BTdVJZ SGRZRWkxMEFXQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wDAwDQYJKoZIhvcNAQELBQADggEBAHrGbTCnRm/3hPzrSi0IgTY3p+rVYEGTAPPj NhEGlXz0STz+JynPZwT2ubQ+rWPMI2ZZzv+TyrsOvzdlHOFlYcAofP+k3ckx1bMY SH2adzXCJrVoCABeqm891sH5Z/A7e5r72rAsiTwzAbEsW0e2miU7paS4S+RtyWzs B1q8vXTOgKcTINt2Rsz3XdC6vt7Pha2NR7rdQ6E7YhMOCj05CsfgGCgly0DhAr3D Ld4unUa/IbEJmdaSqinKhRj95dcGGklr1UUoejAI2ciNfQPq8papu9NaSUXcKuWl 7zwquDO6XvkyyQMlzPXV5DKdUm6AJQQp75XTueK1f6sVLL49a6c= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:23 2024 by rpki-client on console-ams.rpki-client.org