$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v8ngL5MNkiTxOegIBYfNFAurVh0.roa File: v8ngL5MNkiTxOegIBYfNFAurVh0.roa (raw, json) Hash identifier: XR27ZZBfbBlVxDx8dNGu2+Pafdd+XEZZmGDfrLcJyXQ= Subject key identifier: BF:C9:E0:2F:93:0D:92:24:F1:39:E8:08:05:87:CD:14:0B:AB:56:1D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3215 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v8ngL5MNkiTxOegIBYfNFAurVh0.roa Signing time: Mon 26 Aug 2024 05:31:14 +0000 ROA not before: Mon 26 Aug 2024 05:31:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12821 (0x3215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BFC9E02F930D9224F139E8080587CD140BAB561D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:14:7b:fd:10:60:5a:04:87:82:f6:6f:73: 5a:8a:9f:60:b3:e6:af:2b:4b:10:53:02:a7:72:95: 9c:50:09:8a:6f:ab:e2:4d:fd:c7:8a:ae:21:b3:9e: 02:ea:83:1d:80:f7:e7:b4:c7:a5:34:e5:2f:ea:e7: ca:85:12:d8:ee:85:37:38:71:be:f1:00:51:f2:1c: ae:be:1e:c5:4f:a6:52:6f:b3:67:81:48:6a:ec:07: c8:ab:37:ab:c9:b5:f6:a9:9d:7a:2f:5f:bf:db:17: 23:c9:12:4a:aa:68:35:4c:5b:21:8f:65:76:0b:12: c3:fd:bb:40:42:64:06:47:b4:a4:45:75:d1:2d:1c: 44:61:87:e9:1d:b3:82:32:26:1f:91:d8:bb:61:b2: 03:7f:7e:36:ad:2f:7c:7b:4e:3c:68:eb:5d:09:76: d4:ef:65:95:de:28:69:03:70:15:53:bc:9f:44:90: af:1a:1b:4f:fe:2b:37:19:61:06:a8:f5:5c:d6:45: 06:ac:04:88:b1:02:bc:3f:1b:b7:c8:26:f1:f6:31: 7a:cd:29:f5:7f:f9:48:1a:23:e5:84:07:bc:1e:c4: da:4c:6d:4e:29:c5:c4:f5:bf:7e:77:95:87:32:17: f3:86:ba:6b:02:1b:a2:fa:7b:2a:8c:b5:39:6b:7b: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C9:E0:2F:93:0D:92:24:F1:39:E8:08:05:87:CD:14:0B:AB:56:1D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v8ngL5MNkiTxOegIBYfNFAurVh0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.112.0/21 Signature Algorithm: sha256WithRSAEncryption 21:9f:6b:78:a5:8e:ac:fb:8b:04:94:26:30:18:b1:68:20:f6: 50:2b:41:79:b5:08:7d:8a:37:f4:e3:dc:f6:f0:03:e8:33:57: ee:14:ca:67:5e:82:ed:32:50:9b:7a:d6:a9:a7:97:28:f2:7e: fe:49:d6:8f:6e:f2:37:9c:7e:09:d3:af:b3:9d:25:c4:ea:17: 34:e4:c0:44:c3:29:7e:ef:38:31:6d:fa:e5:7d:5f:3f:fe:c5: 2c:c7:d1:56:80:65:fc:74:ff:51:70:49:b7:fe:11:c2:c4:17: 9d:c4:bc:f3:e7:36:11:e9:d4:8c:7c:3a:8d:7b:63:93:91:c0: bc:66:e9:92:85:b9:63:31:4a:0e:d8:41:3f:20:26:02:72:7e: 1e:31:8c:91:a5:c3:7c:09:1a:4c:19:eb:12:ca:e3:07:4b:e0: 23:3e:10:aa:11:ce:55:fa:dd:50:6f:4d:6d:f0:ec:80:65:f8: 73:1a:8b:1a:f8:54:47:7b:07:c1:79:80:4b:3e:8a:38:92:a8: 8d:59:5a:43:86:26:c3:38:f2:f8:cb:74:cb:b7:f3:93:36:9d: 16:c9:d0:0f:82:4b:a7:e9:bc:87:11:2f:30:7a:65:93:a2:69: c0:7b:8d:64:02:b7:12:c7:54:f0:ad:1f:fe:e3:ec:19:fb:4a: cb:7e:b7:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGQzlFMDJGOTMwRDky MjRGMTM5RTgwODA1ODdDRDE0MEJBQjU2MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWexR7/RBgWgSHgvZvc1qKn2Cz5q8rSxBTAqdylZxQCYpvq+JN /ceKriGzngLqgx2A9+e0x6U05S/q58qFEtjuhTc4cb7xAFHyHK6+HsVPplJvs2eB SGrsB8irN6vJtfapnXovX7/bFyPJEkqqaDVMWyGPZXYLEsP9u0BCZAZHtKRFddEt HERhh+kds4IyJh+R2LthsgN/fjatL3x7Tjxo610JdtTvZZXeKGkDcBVTvJ9EkK8a G0/+KzcZYQao9VzWRQasBIixArw/G7fIJvH2MXrNKfV/+UgaI+WEB7wexNpMbU4p xcT1v353lYcyF/OGumsCG6L6eyqMtTlre4xnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUv8ngL5MNkiTxOegIBYfNFAurVh0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Y4bmdMNU1Oa2lUeE9lZ0lC WWZORkF1clZoMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w3AwDQYJKoZIhvcNAQELBQADggEBACGfa3iljqz7iwSUJjAYsWgg9lArQXm1CH2K N/Tj3PbwA+gzV+4Uymdegu0yUJt61qmnlyjyfv5J1o9u8jecfgnTr7OdJcTqFzTk wETDKX7vODFt+uV9Xz/+xSzH0VaAZfx0/1FwSbf+EcLEF53EvPPnNhHp1Ix8Oo17 Y5ORwLxm6ZKFuWMxSg7YQT8gJgJyfh4xjJGlw3wJGkwZ6xLK4wdL4CM+EKoRzlX6 3VBvTW3w7IBl+HMaixr4VEd7B8F5gEs+ijiSqI1ZWkOGJsM48vjLdMu385M2nRbJ 0A+CS6fpvIcRLzB6ZZOiacB7jWQCtxLHVPCtH/7j7Bn7Sst+t+Y= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org