$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tUa2o8bOJ0EmvnkMnGE88ahArwk.roa File: tUa2o8bOJ0EmvnkMnGE88ahArwk.roa (raw, json) Hash identifier: +XP4Z5reRO844/8sUXaWan79mx6p030CrVi9xeeCLdM= Subject key identifier: B5:46:B6:A3:C6:CE:27:41:26:BE:79:0C:9C:61:3C:F1:A8:40:AF:09 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3258 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tUa2o8bOJ0EmvnkMnGE88ahArwk.roa Signing time: Mon 26 Aug 2024 05:31:34 +0000 ROA not before: Mon 26 Aug 2024 05:31:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12888 (0x3258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B546B6A3C6CE274126BE790C9C613CF1A840AF09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:dc:b7:91:19:33:b5:de:17:13:30:5f:9a: 49:23:fa:a4:31:84:52:fc:46:ad:b1:9f:01:e6:0b: e6:17:9f:54:4c:ae:31:12:83:4f:58:80:e0:4f:58: 5f:28:f7:33:2b:b1:95:40:76:21:e7:17:b6:13:7a: 7f:9e:2b:56:fd:8e:f7:1c:69:57:79:f3:5f:e3:30: 71:49:c0:c2:30:f0:73:b5:02:b3:85:aa:7a:9c:bc: 00:5b:bb:a5:bd:59:cc:60:7c:b4:3d:4c:45:b2:5f: 2b:7a:02:ef:ee:3b:24:71:07:5b:5e:88:d8:d9:44: 72:84:fe:89:a2:2b:e9:1a:cc:23:45:f4:40:ad:88: 30:1f:13:f3:89:95:b6:12:3a:8c:f5:42:57:a7:ff: 4d:d7:50:76:1f:af:1f:da:84:f3:61:31:db:fc:25: d4:5b:56:c6:4c:8a:59:d6:64:63:3c:98:59:b5:ff: 63:89:c8:db:58:a2:e4:0a:fd:84:31:45:a1:c6:a4: e6:08:f0:65:88:f9:dd:84:9d:96:1a:62:76:7d:fa: 6e:4a:32:8a:a4:c0:d1:7f:bf:d2:53:4c:43:74:f3: 9c:b5:77:7a:66:ae:38:ce:6b:45:d7:88:1a:fd:33: e7:42:90:5d:8a:cf:c3:86:7e:6f:a3:cb:51:4e:6e: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:46:B6:A3:C6:CE:27:41:26:BE:79:0C:9C:61:3C:F1:A8:40:AF:09 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tUa2o8bOJ0EmvnkMnGE88ahArwk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.172.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:86:76:be:63:cf:fc:eb:53:b2:91:05:8f:59:40:8b:42:f6: 0c:df:e7:54:be:5c:43:dd:e5:fc:e6:90:d5:f4:63:91:fa:14: c9:c2:c6:3d:98:e5:eb:53:7d:f4:2c:6d:a7:15:8d:85:07:85: fc:2f:36:b1:79:4c:1e:37:79:80:31:f7:15:03:fd:02:ce:f8: 7c:b6:0a:ce:56:93:9b:02:95:be:ff:47:73:8e:65:69:f3:3e: 9a:8b:9d:84:88:8c:b4:b3:8a:51:9a:11:18:d3:ca:55:58:fc: ba:85:6e:3a:9a:64:b9:cc:0c:fd:9d:9e:26:32:43:9e:94:b7: 7b:b2:e2:f0:5c:4d:2b:c6:a7:e6:c7:ae:a9:dc:f1:f2:a0:0e: bb:a4:3c:04:ca:0f:0d:80:75:a3:de:96:85:41:88:ce:00:28: 27:41:dc:dd:2a:5f:b0:15:7c:85:e2:a7:4e:76:68:75:92:0c: 7c:ed:9c:21:d9:4e:9b:10:dd:4b:da:59:38:05:2e:9c:9a:e8: 02:4a:8f:11:54:9c:5b:08:29:1a:a2:c7:16:55:2e:17:d0:3f: f9:44:34:ce:cb:32:4d:71:93:97:a1:ab:6e:54:1d:ae:8e:0d: 9d:c9:ee:63:02:77:c8:ba:fc:fc:f8:25:2b:6f:cf:3b:93:f2: 38:36:f4:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI1NDZCNkEzQzZDRTI3 NDEyNkJFNzkwQzlDNjEzQ0YxQTg0MEFGMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzgNy3kRkztd4XEzBfmkkj+qQxhFL8Rq2xnwHmC+YXn1RMrjES g09YgOBPWF8o9zMrsZVAdiHnF7YTen+eK1b9jvccaVd581/jMHFJwMIw8HO1ArOF qnqcvABbu6W9WcxgfLQ9TEWyXyt6Au/uOyRxB1teiNjZRHKE/omiK+kazCNF9ECt iDAfE/OJlbYSOoz1Qlen/03XUHYfrx/ahPNhMdv8JdRbVsZMilnWZGM8mFm1/2OJ yNtYouQK/YQxRaHGpOYI8GWI+d2EnZYaYnZ9+m5KMoqkwNF/v9JTTEN085y1d3pm rjjOa0XXiBr9M+dCkF2Kz8OGfm+jy1FObv6tAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtUa2o8bOJ0EmvnkMnGE88ahArwkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RVYTJvOGJPSjBFbXZua01u R0U4OGFoQXJ3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wqwwDQYJKoZIhvcNAQELBQADggEBAH6Gdr5jz/zrU7KRBY9ZQItC9gzf51S+XEPd 5fzmkNX0Y5H6FMnCxj2Y5etTffQsbacVjYUHhfwvNrF5TB43eYAx9xUD/QLO+Hy2 Cs5Wk5sClb7/R3OOZWnzPpqLnYSIjLSzilGaERjTylVY/LqFbjqaZLnMDP2dniYy Q56Ut3uy4vBcTSvGp+bHrqnc8fKgDrukPATKDw2AdaPeloVBiM4AKCdB3N0qX7AV fIXip052aHWSDHztnCHZTpsQ3UvaWTgFLpya6AJKjxFUnFsIKRqixxZVLhfQP/lE NM7LMk1xk5ehq25UHa6ODZ3J7mMCd8i6/Pz4JStvzzuT8jg29P0= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org