$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u4idfxRy7LIaWYRps349aOWuwXI.roa File: u4idfxRy7LIaWYRps349aOWuwXI.roa (raw, json) Hash identifier: 7P/LMkUq3UNnmapUf6bWYMFJFMwzQ7wRZkysG29ZV/8= Subject key identifier: BB:88:9D:7F:14:72:EC:B2:1A:59:84:69:B3:7E:3D:68:E5:AE:C1:72 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FD4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u4idfxRy7LIaWYRps349aOWuwXI.roa Signing time: Mon 26 Aug 2024 05:28:53 +0000 ROA not before: Mon 26 Aug 2024 05:28:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12244 (0x2fd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BB889D7F1472ECB21A598469B37E3D68E5AEC172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:8a:65:aa:a3:ef:7f:7a:75:c5:bc:17:90: 9b:b6:d1:d5:3d:b9:b8:d9:5d:6c:b0:57:4b:fd:8f: 72:f9:33:a3:ef:f5:ad:ac:fc:5b:5b:98:ca:95:12: 21:1b:6a:b5:f1:02:45:7a:a4:c9:1f:2c:e3:48:61: d5:ef:c8:9c:3c:19:ef:2d:3a:d4:d1:16:cb:47:89: e1:3e:0c:eb:fc:27:2b:a4:dd:c6:db:6f:03:7c:ef: 36:5a:ed:18:dc:81:44:3a:12:67:7d:60:62:27:ba: 6d:e9:5d:ac:3f:63:bb:a6:c6:da:f6:95:11:ac:28: 03:99:4f:f1:8d:d6:23:b3:b5:72:59:45:b0:20:55: 7b:f7:54:5e:43:49:35:67:5c:9b:06:7f:5f:51:95: 85:04:6c:b4:f7:dc:05:ee:37:ea:8c:78:06:29:db: a6:fc:c0:d2:0d:3f:8c:60:4d:cf:3e:8f:23:94:75: 6d:4b:fa:fc:01:ec:bd:ba:f4:4f:e3:ba:3f:c0:74: f5:91:13:d1:67:0f:51:b6:c3:e0:ca:8d:91:38:43: 94:05:9c:1e:1c:03:c7:bc:e5:99:f0:77:ac:53:a1: fc:a4:ec:5c:be:cb:d0:f3:cd:6d:ce:95:08:12:c5: 40:e7:73:67:a1:5b:56:c3:1c:c2:4f:c5:46:0a:c6: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:9D:7F:14:72:EC:B2:1A:59:84:69:B3:7E:3D:68:E5:AE:C1:72 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u4idfxRy7LIaWYRps349aOWuwXI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.32.0/22 Signature Algorithm: sha256WithRSAEncryption 60:9c:e7:39:75:c6:60:30:ad:1e:ba:cc:d4:22:53:ad:c3:18: 9b:b9:43:ca:e4:63:e6:d0:78:f1:d2:55:bf:0e:c4:9e:af:ad: 84:bb:31:39:dc:b3:15:2d:5f:37:e0:46:ac:c4:11:d4:c2:a0: b8:6f:0c:62:a2:08:d3:c6:6c:cc:62:26:d2:55:ea:fa:c5:a0: 23:9a:e8:a9:60:c3:a0:aa:f6:c4:3a:1b:fb:29:b4:66:9c:06: 21:0a:ee:33:af:b2:a6:30:67:76:18:a5:a9:75:43:86:2f:08: 13:cf:a6:34:33:3c:44:73:a1:ec:ae:00:c8:64:35:29:91:cc: 04:9d:95:20:d4:79:30:31:bb:cb:b7:4a:f2:e0:4e:c3:13:93: 93:1f:b5:92:bc:dc:7f:1c:d4:90:ad:4e:e1:9b:c7:2e:a0:a7: 8b:4d:59:e7:e7:55:f8:d5:ef:eb:60:99:a4:66:68:3c:39:67: 03:28:a2:6f:d5:13:45:d0:47:1f:08:0b:36:6f:62:3c:c5:af: d1:cd:7b:49:bd:4b:75:43:5b:25:89:1e:61:d1:b6:21:55:41: ea:c4:9a:c3:58:14:dd:df:6c:7b:b5:db:44:9e:c6:a2:34:e2: f5:5f:a0:37:e8:05:80:a0:59:3f:a4:33:02:68:cd:47:e4:bd: 85:25:ab:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJCODg5RDdGMTQ3MkVD QjIxQTU5ODQ2OUIzN0UzRDY4RTVBRUMxNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzN4plqqPvf3p1xbwXkJu20dU9ubjZXWywV0v9j3L5M6Pv9a2s /FtbmMqVEiEbarXxAkV6pMkfLONIYdXvyJw8Ge8tOtTRFstHieE+DOv8Jyuk3cbb bwN87zZa7RjcgUQ6Emd9YGInum3pXaw/Y7umxtr2lRGsKAOZT/GN1iOztXJZRbAg VXv3VF5DSTVnXJsGf19RlYUEbLT33AXuN+qMeAYp26b8wNINP4xgTc8+jyOUdW1L +vwB7L269E/juj/AdPWRE9FnD1G2w+DKjZE4Q5QFnB4cA8e85Znwd6xTofyk7Fy+ y9DzzW3OlQgSxUDnc2ehW1bDHMJPxUYKxhodAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUu4idfxRy7LIaWYRps349aOWuwXIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3U0aWRmeFJ5N0xJYVdZUnBz MzQ5YU9XdXdYSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wyAwDQYJKoZIhvcNAQELBQADggEBAGCc5zl1xmAwrR66zNQiU63DGJu5Q8rkY+bQ ePHSVb8OxJ6vrYS7MTncsxUtXzfgRqzEEdTCoLhvDGKiCNPGbMxiJtJV6vrFoCOa 6Klgw6Cq9sQ6G/sptGacBiEK7jOvsqYwZ3YYpal1Q4YvCBPPpjQzPERzoeyuAMhk NSmRzASdlSDUeTAxu8u3SvLgTsMTk5MftZK83H8c1JCtTuGbxy6gp4tNWefnVfjV 7+tgmaRmaDw5ZwMoom/VE0XQRx8ICzZvYjzFr9HNe0m9S3VDWyWJHmHRtiFVQerE msNYFN3fbHu120SexqI04vVfoDfoBYCgWT+kMwJozUfkvYUlq9Q= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org