$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vKaBUV5FYhioDhsTT2VXhPj_GmY.roa File: vKaBUV5FYhioDhsTT2VXhPj_GmY.roa (raw, json) Hash identifier: mrhnDF7HLLDGVRb79kq6EHmLWdHjx6o2B2HjZ09lk7E= Subject key identifier: BC:A6:81:51:5E:45:62:18:A8:0E:1B:13:4F:65:57:84:F8:FF:1A:66 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FFD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vKaBUV5FYhioDhsTT2VXhPj_GmY.roa Signing time: Mon 26 Aug 2024 05:29:02 +0000 ROA not before: Mon 26 Aug 2024 05:29:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12285 (0x2ffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BCA681515E456218A80E1B134F655784F8FF1A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:e8:12:c5:82:f6:b0:33:5c:a1:33:2e:8a: ea:60:71:e6:47:25:3c:55:69:d7:76:6d:c1:10:6b: e7:d6:61:c4:fb:f2:33:3c:01:36:75:b2:06:65:f6: 0f:27:27:ba:1e:75:87:a1:44:e0:d9:e4:b5:b4:89: 3e:7f:96:4b:3c:ac:a6:20:5a:d2:f2:0f:c3:c4:cc: 32:8a:56:26:a3:e1:e1:4e:99:73:a0:9f:4a:19:4e: 5f:24:6a:e5:df:e1:d1:0c:a7:4f:ba:16:eb:d9:0a: 15:78:4d:05:f8:06:de:64:b7:1b:d7:d5:5e:9b:0a: b2:ce:68:03:01:ce:c4:16:47:98:c4:12:c1:37:9c: 5c:ec:c9:35:07:81:b9:ba:4b:3c:2c:f7:a3:3e:55: 50:5f:48:36:ad:54:01:86:3e:17:97:51:80:78:87: 64:90:3e:79:e5:86:5f:17:e7:dc:35:cb:cc:a5:85: c9:8f:c0:13:9a:65:43:ba:25:c6:52:6e:5b:e8:7d: a3:d1:af:bf:0f:47:e9:5d:cc:62:1d:42:dc:7d:ee: 0a:eb:aa:2f:1b:c3:5d:22:bc:35:cb:37:06:be:d7: 26:b5:7d:96:b3:8d:2b:08:66:f8:32:bb:87:7a:a0: 0f:53:a4:75:50:7d:2c:b1:d7:16:5d:e6:a7:7a:dc: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A6:81:51:5E:45:62:18:A8:0E:1B:13:4F:65:57:84:F8:FF:1A:66 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vKaBUV5FYhioDhsTT2VXhPj_GmY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.168.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:31:1d:87:c7:5a:14:56:8f:ab:40:d6:65:8e:b7:d4:46:f4: 2c:7f:ea:aa:a8:b4:ac:19:5c:64:f4:e0:dd:a2:0c:b7:89:56: a2:54:03:23:93:b8:e3:62:9c:2a:18:d2:51:02:06:a9:23:40: 6e:c5:8a:43:a9:9f:30:5e:5f:16:08:08:ff:31:43:3d:e8:66: 96:3c:5c:c8:a2:30:e5:ac:10:e8:57:b9:8a:b0:be:25:6a:e4: c9:38:0d:dd:1e:87:c2:bf:e2:91:8c:0b:1a:d9:10:15:4e:53: 1b:71:96:49:b1:16:ac:cd:37:e7:c1:5e:b4:d4:82:b8:47:72: 0f:d4:fb:0e:47:e1:03:8c:b7:02:22:14:06:02:bb:32:a9:28: a5:f5:64:99:00:9e:aa:b4:7f:ae:4a:c6:13:b9:5c:6d:46:14: 5a:eb:ae:b0:6d:b5:58:9d:3b:2b:b0:a0:dc:c7:24:93:07:83: a4:f7:dd:92:72:de:64:b2:fb:38:69:ab:b5:37:48:4c:e6:8f: 19:40:51:8a:08:fd:43:01:52:af:87:c7:61:dc:f2:86:f3:fa: d1:9f:16:4f:5a:e5:bc:66:84:35:90:d4:b0:5a:b4:ba:9c:52: 13:77:9c:41:45:25:ef:b0:f4:f0:4a:62:f8:06:d4:03:84:07: dd:88:14:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDQTY4MTUxNUU0NTYy MThBODBFMUIxMzRGNjU1Nzg0RjhGRjFBNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+wOgSxYL2sDNcoTMuiupgceZHJTxVadd2bcEQa+fWYcT78jM8 ATZ1sgZl9g8nJ7oedYehRODZ5LW0iT5/lks8rKYgWtLyD8PEzDKKViaj4eFOmXOg n0oZTl8kauXf4dEMp0+6FuvZChV4TQX4Bt5ktxvX1V6bCrLOaAMBzsQWR5jEEsE3 nFzsyTUHgbm6Szws96M+VVBfSDatVAGGPheXUYB4h2SQPnnlhl8X59w1y8ylhcmP wBOaZUO6JcZSblvofaPRr78PR+ldzGIdQtx97grrqi8bw10ivDXLNwa+1ya1fZaz jSsIZvgyu4d6oA9TpHVQfSyx1xZd5qd63Nw5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvKaBUV5FYhioDhsTT2VXhPj/GmYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZLYUJVVjVGWWhpb0Roc1RU MlZYaFBqX0dtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wqgwDQYJKoZIhvcNAQELBQADggEBAA8xHYfHWhRWj6tA1mWOt9RG9Cx/6qqotKwZ XGT04N2iDLeJVqJUAyOTuONinCoY0lECBqkjQG7FikOpnzBeXxYICP8xQz3oZpY8 XMiiMOWsEOhXuYqwviVq5Mk4Dd0eh8K/4pGMCxrZEBVOUxtxlkmxFqzNN+fBXrTU grhHcg/U+w5H4QOMtwIiFAYCuzKpKKX1ZJkAnqq0f65KxhO5XG1GFFrrrrBttVid OyuwoNzHJJMHg6T33ZJy3mSy+zhpq7U3SEzmjxlAUYoI/UMBUq+Hx2Hc8obz+tGf Fk9a5bxmhDWQ1LBatLqcUhN3nEFFJe+w9PBKYvgG1AOEB92IFHo= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org