$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa File: tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa (raw, json) Hash identifier: Ms4jeLEt9Tvm8FmPI6/BIbPJ2Xyt28fGZFVHUGvFCgo= Subject key identifier: B7:3E:65:00:A8:48:07:58:27:2C:AB:4F:FA:DD:EF:24:DE:9B:08:D9 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 318B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa Signing time: Mon 26 Aug 2024 05:30:34 +0000 ROA not before: Mon 26 Aug 2024 05:30:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12683 (0x318b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B73E6500A8480758272CAB4FFADDEF24DE9B08D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:e4:0b:e6:5e:a6:4f:5a:d6:58:71:db:18: 31:b8:b2:ed:7e:80:15:0c:3e:72:0b:04:04:6f:62: db:3e:fb:73:97:28:a3:26:dd:1f:3f:69:8d:07:35: c6:91:73:6c:45:2e:e9:9e:25:02:b2:4c:6c:e7:5d: 67:0a:6c:cd:5f:be:09:bc:1f:4a:74:e9:e7:30:f2: b9:01:49:1d:21:3f:b9:aa:c5:91:e8:59:56:88:69: 5e:53:ef:85:da:e0:57:8e:2a:c3:42:a1:c7:84:6b: 62:36:d5:16:2f:ce:ee:c6:b9:d7:3f:40:b0:49:ea: c0:b5:4f:20:f6:5d:14:15:c7:3f:e1:33:d5:29:83: 69:70:c7:b8:da:1e:cb:f1:ef:0b:4b:f8:37:83:87: db:5d:91:34:4c:e5:2a:3b:e3:57:aa:b2:aa:4d:ce: 9b:76:fd:f8:74:56:0d:c6:b1:45:dd:40:0e:f9:7b: e1:93:a9:d6:43:94:2d:5f:fd:61:39:21:06:bd:0f: 28:81:9f:9b:a8:bd:e3:4d:e3:58:e9:93:1b:ca:b8: 07:1c:5b:7a:cd:c1:5b:f9:39:a1:ab:84:0a:73:f7: e4:7b:88:1a:bd:2e:03:aa:1c:76:99:93:43:f1:7d: 9f:33:01:7c:4f:9e:b4:ab:91:2d:ed:58:a4:27:b8: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3E:65:00:A8:48:07:58:27:2C:AB:4F:FA:DD:EF:24:DE:9B:08:D9 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.12.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:a6:50:ee:51:2e:55:12:8b:33:b1:be:4e:9b:81:ab:62:d2: 2a:8e:0e:0f:1f:1c:8f:b4:82:3f:11:e0:c8:39:75:39:b3:cb: 28:63:29:8e:2b:cb:cf:99:a5:69:2b:7d:50:28:fb:db:15:87: 18:6e:65:4d:85:f9:9b:11:41:48:b4:af:df:d4:5d:f2:56:0c: 4b:d4:4a:40:ee:cd:39:70:c0:76:44:00:a4:5b:1b:1a:0f:06: e8:90:e8:45:a6:fb:f6:19:56:0c:16:9a:37:3f:0c:5a:85:87: e8:d0:14:3e:30:a9:40:e1:15:b4:34:52:7a:69:00:cb:45:5d: 7f:88:97:d3:6a:34:d8:a0:fc:30:45:42:a9:0e:74:81:7c:fe: 8f:65:42:e7:65:04:28:33:bf:7a:7d:6d:3e:61:fd:5a:d7:d4: 1e:d5:76:1f:14:89:54:38:b6:12:d4:31:bb:24:d7:fa:49:1e: 5a:df:d1:72:ab:86:3e:71:04:97:c5:bf:84:ae:63:30:c3:91: 3f:0c:fe:05:cc:ba:b7:ca:e9:59:77:de:a5:00:e9:f0:26:55: c9:0f:65:1a:53:41:5e:04:cb:74:5e:94:16:ed:84:5e:20:8b: af:1a:e7:4e:b1:56:77:80:be:42:48:1c:73:6e:3d:46:cf:df: 6f:da:ce:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3M0U2NTAwQTg0ODA3 NTgyNzJDQUI0RkZBRERFRjI0REU5QjA4RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClR+QL5l6mT1rWWHHbGDG4su1+gBUMPnILBARvYts++3OXKKMm 3R8/aY0HNcaRc2xFLumeJQKyTGznXWcKbM1fvgm8H0p06ecw8rkBSR0hP7mqxZHo WVaIaV5T74Xa4FeOKsNCoceEa2I21RYvzu7Gudc/QLBJ6sC1TyD2XRQVxz/hM9Up g2lwx7jaHsvx7wtL+DeDh9tdkTRM5So741eqsqpNzpt2/fh0Vg3GsUXdQA75e+GT qdZDlC1f/WE5IQa9DyiBn5uoveNN41jpkxvKuAccW3rNwVv5OaGrhApz9+R7iBq9 LgOqHHaZk0PxfZ8zAXxPnrSrkS3tWKQnuON9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtz5lAKhIB1gnLKtP+t3vJN6bCNkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R6NWxBS2hJQjFnbkxLdFAt dDN2Sk42YkNOay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wwwwDQYJKoZIhvcNAQELBQADggEBADumUO5RLlUSizOxvk6bgati0iqODg8fHI+0 gj8R4Mg5dTmzyyhjKY4ry8+ZpWkrfVAo+9sVhxhuZU2F+ZsRQUi0r9/UXfJWDEvU SkDuzTlwwHZEAKRbGxoPBuiQ6EWm+/YZVgwWmjc/DFqFh+jQFD4wqUDhFbQ0Unpp AMtFXX+Il9NqNNig/DBFQqkOdIF8/o9lQudlBCgzv3p9bT5h/VrX1B7Vdh8UiVQ4 thLUMbsk1/pJHlrf0XKrhj5xBJfFv4SuYzDDkT8M/gXMurfK6Vl33qUA6fAmVckP ZRpTQV4Ey3RelBbthF4gi68a506xVneAvkJIHHNuPUbP32/azrY= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:40 2024 by rpki-client on console-fra.rpki-client.org