$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uiHuCoSQylYxvec12We33E85q0Q.roa File: uiHuCoSQylYxvec12We33E85q0Q.roa (raw, json) Hash identifier: M19Gv6IAIZ9P+EzAYiUR62RwzRHw14/Wfbfn7ufcxD4= Subject key identifier: BA:21:EE:0A:84:90:CA:56:31:BD:E7:35:D9:67:B7:DC:4F:39:AB:44 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3072 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uiHuCoSQylYxvec12We33E85q0Q.roa Signing time: Mon 26 Aug 2024 05:29:27 +0000 ROA not before: Mon 26 Aug 2024 05:29:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12402 (0x3072) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BA21EE0A8490CA5631BDE735D967B7DC4F39AB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:82:ff:2c:85:c6:21:60:e6:9c:97:a5:9f: 2d:61:05:a6:24:d9:c2:d1:67:f5:a7:b6:31:a3:0f: 12:1f:88:26:8c:39:ea:8d:46:b0:4b:87:1d:0c:b9: 26:79:81:b9:5c:db:25:93:ad:6d:ee:8e:05:71:bc: 51:07:2b:96:57:30:69:62:b1:5f:0a:6d:23:b8:99: 90:a2:8f:fa:2c:40:9e:1a:b6:22:b5:e6:fa:2f:ae: a1:77:cd:ff:e5:c1:d6:ce:21:8e:70:6e:6c:8a:69: 59:b1:d1:bc:62:2c:e3:58:ba:8d:12:25:3d:80:5a: 2a:7a:05:73:67:07:c9:60:b2:25:e8:68:98:c7:a1: bf:ee:b9:6a:6b:53:53:8c:75:cf:e8:c7:9a:ed:fd: ea:a3:bc:a2:de:2d:e6:e7:ee:af:86:eb:90:7c:a9: e3:fa:f9:b4:96:f2:05:ce:aa:35:20:bf:1b:86:64: 20:ad:dd:cc:e9:e5:30:4a:6c:d0:81:f7:0b:49:08: 09:90:75:49:3f:b0:9c:17:86:dd:30:ef:31:1f:5a: d0:ef:e1:58:5f:7d:85:6f:c1:21:a6:2a:bb:0d:6d: 6c:bb:a7:e8:1b:53:a0:a3:fd:c7:25:2e:45:1c:95: f9:4f:68:3f:e2:43:06:11:6c:fd:83:a0:2e:36:04: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:21:EE:0A:84:90:CA:56:31:BD:E7:35:D9:67:B7:DC:4F:39:AB:44 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uiHuCoSQylYxvec12We33E85q0Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:bc:c3:81:a2:90:9d:64:63:08:a8:79:c6:e8:1d:a2:e3:ea: 43:6b:3d:31:92:1d:f4:dd:3f:9c:d2:61:4c:2f:50:c6:2f:2b: 23:fd:ca:9b:b0:40:89:17:51:4d:ab:4a:88:60:cb:8c:36:6b: 6a:dc:57:20:f4:21:f0:82:fd:90:82:c1:81:07:59:28:93:0e: 8e:07:a5:33:b6:e4:4e:70:62:73:55:c5:c2:1a:b7:b7:e9:62: 2c:a9:e6:89:2f:79:79:43:10:40:0a:05:0e:3a:d1:4d:3d:71: ac:ff:77:06:ad:e2:6f:74:cf:94:c6:1d:3d:5e:87:e9:8d:28: dc:60:21:1a:97:cf:31:e7:f9:a9:24:50:ff:fe:50:4c:f0:87: 03:7d:8b:28:17:75:58:e1:72:b0:17:29:2a:e7:07:de:9a:f3: a1:c4:aa:01:2c:2a:05:0b:60:db:89:a5:1b:24:d8:a7:1a:52: 73:2c:d9:55:e7:8a:68:84:04:75:c0:e5:a0:0c:78:10:64:33: a1:3c:cc:ca:63:2e:35:db:59:bd:cd:2d:26:34:9a:bb:fe:c2: 1d:be:8f:01:9d:9f:db:5b:bb:28:85:84:1f:79:e8:88:b2:02: 9f:9e:4a:a1:b7:eb:a0:db:82:78:ea:42:2c:f8:18:8d:79:cf: e9:af:d0:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJBMjFFRTBBODQ5MENB NTYzMUJERTczNUQ5NjdCN0RDNEYzOUFCNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHn4L/LIXGIWDmnJelny1hBaYk2cLRZ/WntjGjDxIfiCaMOeqN RrBLhx0MuSZ5gblc2yWTrW3ujgVxvFEHK5ZXMGlisV8KbSO4mZCij/osQJ4atiK1 5vovrqF3zf/lwdbOIY5wbmyKaVmx0bxiLONYuo0SJT2AWip6BXNnB8lgsiXoaJjH ob/uuWprU1OMdc/ox5rt/eqjvKLeLebn7q+G65B8qeP6+bSW8gXOqjUgvxuGZCCt 3czp5TBKbNCB9wtJCAmQdUk/sJwXht0w7zEfWtDv4VhffYVvwSGmKrsNbWy7p+gb U6Cj/cclLkUclflPaD/iQwYRbP2DoC42BGrXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuiHuCoSQylYxvec12We33E85q0QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VpSHVDb1NReWxZeHZlYzEy V2UzM0U4NXEwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6fgwDQYJKoZIhvcNAQELBQADggEBACy8w4GikJ1kYwioecboHaLj6kNrPTGSHfTd P5zSYUwvUMYvKyP9ypuwQIkXUU2rSohgy4w2a2rcVyD0IfCC/ZCCwYEHWSiTDo4H pTO25E5wYnNVxcIat7fpYiyp5okveXlDEEAKBQ460U09caz/dwat4m90z5TGHT1e h+mNKNxgIRqXzzHn+akkUP/+UEzwhwN9iygXdVjhcrAXKSrnB96a86HEqgEsKgUL YNuJpRsk2KcaUnMs2VXnimiEBHXA5aAMeBBkM6E8zMpjLjXbWb3NLSY0mrv+wh2+ jwGdn9tbuyiFhB956IiyAp+eSqG366DbgnjqQiz4GI15z+mv0JI= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org