$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vTbq53o2D3zC96jtYO1c1FC_hSw.roa File: vTbq53o2D3zC96jtYO1c1FC_hSw.roa (raw, json) Hash identifier: 6WwqK1c/JuKkWK3ZHA05VZcO0pSykpDQw7nn8AmdDns= Subject key identifier: BD:36:EA:E7:7A:36:0F:7C:C2:F7:A8:ED:60:ED:5C:D4:50:BF:85:2C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32CF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vTbq53o2D3zC96jtYO1c1FC_hSw.roa Signing time: Mon 26 Aug 2024 05:32:02 +0000 ROA not before: Mon 26 Aug 2024 05:32:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13007 (0x32cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BD36EAE77A360F7CC2F7A8ED60ED5CD450BF852C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:34:8d:d4:57:4d:ea:e5:ca:96:9c:63:b4: b2:85:b0:69:96:e4:f5:24:29:b3:8e:a2:68:7d:37: 68:cd:66:14:b5:6a:4e:99:07:24:52:57:59:20:24: 17:c4:70:33:60:da:9e:76:3d:4b:db:2e:b5:c0:f8: 26:b7:88:64:2c:ec:43:7a:9c:15:82:77:3d:e6:cc: f8:90:a2:e7:fc:4a:46:d9:d0:66:ed:1d:f6:8a:54: 84:25:3b:1e:db:8e:ff:a5:60:e9:1e:8d:83:af:fe: 91:ed:f8:55:36:52:20:e7:1c:0c:a0:75:d5:7d:45: 6a:80:cd:0c:3e:a0:7d:8d:1a:40:62:f5:a6:5c:2f: ff:18:1c:58:3f:00:5d:b7:07:45:fb:b6:13:00:da: 00:8c:03:6c:7b:97:5e:77:78:60:a7:c1:1b:a2:62: 78:10:ec:44:11:5f:88:87:71:9c:c3:16:d4:15:0e: 90:85:0b:cb:58:bd:26:af:66:f0:a4:0f:05:59:15: bc:4b:63:bc:7e:d2:9a:67:95:28:01:5d:5b:11:be: be:6e:44:7d:1b:17:3e:13:73:f7:5f:8d:2e:c6:60: 27:be:90:b2:86:fd:2c:a3:2a:85:ee:70:29:39:03: 90:93:76:2a:a0:d7:3a:0f:6f:d0:9c:70:27:eb:f3: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:EA:E7:7A:36:0F:7C:C2:F7:A8:ED:60:ED:5C:D4:50:BF:85:2C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vTbq53o2D3zC96jtYO1c1FC_hSw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.172.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:dc:7d:54:ff:cb:14:2f:13:58:f0:3d:b5:85:77:30:ec:8d: 17:21:3c:42:f3:b0:0c:b9:8f:d6:85:0f:30:82:3f:f7:ba:32: eb:8e:06:72:59:86:fc:a7:cc:2e:41:e5:e2:7b:a8:89:75:78: 2e:2e:8d:82:4e:f1:be:8b:1d:f2:cc:14:d9:67:07:4a:f8:fd: 4f:cd:e5:01:6a:aa:57:17:61:95:b1:72:30:8a:e9:9a:ad:7f: d9:ff:04:02:c6:3a:18:1d:10:80:9f:13:bb:6f:aa:e1:67:3f: 4b:af:aa:c7:6c:50:31:7d:0a:61:bf:4a:00:38:2e:1e:d0:4f: 59:8e:4b:ee:ad:c9:c4:3b:f5:60:08:23:bb:93:14:e8:e0:de: c0:c3:36:a2:c0:6f:51:56:12:d9:73:3c:da:ac:05:78:f1:04: 48:ec:fb:bf:d4:f0:ac:47:95:cf:a3:0c:9b:44:28:25:28:f0: 1c:47:df:30:51:4f:82:11:02:da:30:f4:ea:d3:5b:1d:23:c9: 66:96:2b:ae:99:2f:9c:3d:b2:3e:ae:81:4f:89:3e:05:aa:1f: 24:72:23:ca:ad:d9:dc:0b:ce:25:33:13:0d:d9:2e:3c:ec:4e: c7:31:1a:73:7a:f0:e7:09:74:52:7f:1f:ad:58:c0:82:3a:88: 3c:40:bd:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJEMzZFQUU3N0EzNjBG N0NDMkY3QThFRDYwRUQ1Q0Q0NTBCRjg1MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR/jSN1FdN6uXKlpxjtLKFsGmW5PUkKbOOomh9N2jNZhS1ak6Z ByRSV1kgJBfEcDNg2p52PUvbLrXA+Ca3iGQs7EN6nBWCdz3mzPiQouf8SkbZ0Gbt HfaKVIQlOx7bjv+lYOkejYOv/pHt+FU2UiDnHAygddV9RWqAzQw+oH2NGkBi9aZc L/8YHFg/AF23B0X7thMA2gCMA2x7l153eGCnwRuiYngQ7EQRX4iHcZzDFtQVDpCF C8tYvSavZvCkDwVZFbxLY7x+0ppnlSgBXVsRvr5uRH0bFz4Tc/dfjS7GYCe+kLKG /SyjKoXucCk5A5CTdiqg1zoPb9CccCfr85KbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvTbq53o2D3zC96jtYO1c1FC/hSwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZUYnE1M28yRDN6Qzk2anRZ TzFjMUZDX2hTdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w6wwDQYJKoZIhvcNAQELBQADggEBAJzcfVT/yxQvE1jwPbWFdzDsjRchPELzsAy5 j9aFDzCCP/e6MuuOBnJZhvynzC5B5eJ7qIl1eC4ujYJO8b6LHfLMFNlnB0r4/U/N 5QFqqlcXYZWxcjCK6Zqtf9n/BALGOhgdEICfE7tvquFnP0uvqsdsUDF9CmG/SgA4 Lh7QT1mOS+6tycQ79WAII7uTFOjg3sDDNqLAb1FWEtlzPNqsBXjxBEjs+7/U8KxH lc+jDJtEKCUo8BxH3zBRT4IRAtow9OrTWx0jyWaWK66ZL5w9sj6ugU+JPgWqHyRy I8qt2dwLziUzEw3ZLjzsTscxGnN68OcJdFJ/H61YwII6iDxAvag= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org