$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tUd76j4fGGQSaZXj5rF2-Od7Sb8.roa File: tUd76j4fGGQSaZXj5rF2-Od7Sb8.roa (raw, json) Hash identifier: CJYgaaMqzZUbdiV5qeKlbZwFwwnjXW1mp1DSPYQbE6o= Subject key identifier: B5:47:7B:EA:3E:1F:18:64:12:69:95:E3:E6:B1:76:F8:E7:7B:49:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3167 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tUd76j4fGGQSaZXj5rF2-Od7Sb8.roa Signing time: Mon 26 Aug 2024 05:30:25 +0000 ROA not before: Mon 26 Aug 2024 05:30:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12647 (0x3167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B5477BEA3E1F1864126995E3E6B176F8E77B49BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:1c:b4:66:b1:d6:48:31:cc:f8:a5:d2:3b: 72:8d:f7:40:7e:50:cf:9f:d7:71:cc:f9:88:5d:83: 9c:45:ce:a6:4a:1e:5a:60:cb:dc:29:b3:0a:e5:4b: 43:f5:82:53:d8:98:58:28:a8:2f:e1:b0:f1:75:9e: 9a:55:2e:f9:cd:eb:7c:80:6a:46:46:9e:c5:8a:8d: 95:6b:6f:f7:e4:32:ca:e5:d8:42:de:de:3b:73:2a: 75:90:7b:00:10:45:66:d1:c5:81:ee:65:f0:59:ae: ec:e5:6e:c6:4d:4d:1f:b8:aa:4c:95:b0:6b:8c:0d: 4b:1e:a3:57:56:5e:8d:5b:66:ad:b6:e6:01:8a:91: e7:3c:14:a8:09:bc:c6:79:d9:d0:75:20:e5:5d:8c: 05:10:c3:25:cc:52:3f:d6:fe:11:ce:25:c9:d2:88: ce:35:73:56:20:e8:7f:42:18:50:f5:81:cc:8b:1a: 2e:91:60:75:ef:5a:ee:a4:a3:14:27:ed:f0:4f:43: 7c:ad:4a:b9:4f:f2:65:ba:94:1b:8f:d4:4a:a4:c4: 03:8d:c7:81:00:92:68:5c:64:7e:29:0f:71:47:be: e0:eb:00:ef:a0:a2:34:6a:c6:11:94:d2:16:30:b6: 95:a0:98:e5:ba:40:9c:fb:c2:c6:68:70:df:5e:b6: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:47:7B:EA:3E:1F:18:64:12:69:95:E3:E6:B1:76:F8:E7:7B:49:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tUd76j4fGGQSaZXj5rF2-Od7Sb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.208.0/21 Signature Algorithm: sha256WithRSAEncryption 63:0a:12:59:93:6c:0f:44:e2:da:9b:aa:64:38:54:b0:d9:26: 0f:0a:b6:93:ca:70:ab:34:e7:ef:d3:f6:7c:21:7c:d1:13:4d: f3:45:3c:2e:be:15:dd:b6:40:0e:ed:e1:2a:07:52:be:ac:f9: 85:f3:8d:8a:ce:6c:b3:6f:e9:91:82:1c:23:9f:70:11:73:d2: f0:f6:4f:44:37:14:ed:f8:bf:9d:e5:3b:c9:9f:e4:e9:61:2e: 9b:77:7a:f9:5e:bc:55:d6:63:a8:bb:ac:9c:bc:b2:48:dd:1b: 71:82:b8:99:c4:7f:6e:9e:f0:23:07:19:0f:4b:ab:7e:85:99: 73:a4:91:9d:c0:d6:12:98:2e:e6:f2:72:61:88:59:ff:f6:97: 65:eb:2f:95:7e:2c:83:9f:13:6e:ab:51:55:73:e6:2f:7c:2f: 1e:bb:1f:7f:29:a6:c3:ee:3e:80:87:70:de:ae:9c:81:45:be: 49:fb:0a:c7:53:44:4c:12:0f:74:f3:c4:42:a8:d0:f6:0a:d8: 7a:13:5d:23:ec:07:6d:0c:9e:31:03:be:1a:88:d3:1f:db:c4: 12:2d:68:2e:cd:d9:a6:1d:02:26:f9:2b:65:47:19:8c:79:21: a6:97:b5:6a:80:0a:3a:fc:80:95:04:11:a1:95:05:15:30:df: ca:03:fd:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI1NDc3QkVBM0UxRjE4 NjQxMjY5OTVFM0U2QjE3NkY4RTc3QjQ5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVIRy0ZrHWSDHM+KXSO3KN90B+UM+f13HM+Yhdg5xFzqZKHlpg y9wpswrlS0P1glPYmFgoqC/hsPF1nppVLvnN63yAakZGnsWKjZVrb/fkMsrl2ELe 3jtzKnWQewAQRWbRxYHuZfBZruzlbsZNTR+4qkyVsGuMDUseo1dWXo1bZq225gGK kec8FKgJvMZ52dB1IOVdjAUQwyXMUj/W/hHOJcnSiM41c1Yg6H9CGFD1gcyLGi6R YHXvWu6koxQn7fBPQ3ytSrlP8mW6lBuP1EqkxAONx4EAkmhcZH4pD3FHvuDrAO+g ojRqxhGU0hYwtpWgmOW6QJz7wsZocN9etj8DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtUd76j4fGGQSaZXj5rF2+Od7Sb8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RVZDc2ajRmR0dRU2FaWGo1 ckYyLU9kN1NiOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w9AwDQYJKoZIhvcNAQELBQADggEBAGMKElmTbA9E4tqbqmQ4VLDZJg8KtpPKcKs0 5+/T9nwhfNETTfNFPC6+Fd22QA7t4SoHUr6s+YXzjYrObLNv6ZGCHCOfcBFz0vD2 T0Q3FO34v53lO8mf5OlhLpt3evlevFXWY6i7rJy8skjdG3GCuJnEf26e8CMHGQ9L q36FmXOkkZ3A1hKYLubycmGIWf/2l2XrL5V+LIOfE26rUVVz5i98Lx67H38ppsPu PoCHcN6unIFFvkn7CsdTREwSD3TzxEKo0PYK2HoTXSPsB20MnjEDvhqI0x/bxBIt aC7N2aYdAib5K2VHGYx5IaaXtWqACjr8gJUEEaGVBRUw38oD/Z4= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:40 2024 by rpki-client on console-fra.rpki-client.org