$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/va_1_2OP01YzwOwL4R52LKG41wU.roa File: va_1_2OP01YzwOwL4R52LKG41wU.roa (raw, json) Hash identifier: 4T7zYNZhjc69HZsV4psmX+pFEDlQ+9U/5ncqnqozR/c= Subject key identifier: BD:AF:F5:FF:63:8F:D3:56:33:C0:EC:0B:E1:1E:76:2C:A1:B8:D7:05 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3027 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/va_1_2OP01YzwOwL4R52LKG41wU.roa Signing time: Mon 26 Aug 2024 05:29:11 +0000 ROA not before: Mon 26 Aug 2024 05:29:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12327 (0x3027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDAFF5FF638FD35633C0EC0BE11E762CA1B8D705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:ec:df:85:52:b6:d5:3d:d5:aa:3a:1e:74: b2:88:1b:4e:1f:d0:9f:f8:e1:49:71:46:ed:25:22: 66:f5:22:59:30:f6:83:71:42:b3:cb:c7:5e:6a:02: 9c:df:c3:b3:55:64:56:31:a7:66:2b:4f:e3:ab:6e: 53:1d:06:8a:7e:a7:36:f5:5e:e5:ea:d3:37:e4:9f: 1b:f5:7d:1c:55:78:d7:0f:3f:1f:93:80:98:48:67: fc:95:60:71:df:ad:38:3e:84:c9:d8:7b:97:c9:52: 5d:6d:bf:8c:3e:a0:96:bf:67:60:10:a2:fe:ee:ae: bf:61:29:45:8f:26:32:46:5f:fe:cb:86:9f:d2:01: 4a:b1:96:3b:50:75:ee:b1:48:42:ef:52:cb:02:a1: ac:91:48:78:ec:40:eb:91:9f:a2:b8:02:5b:54:70: 25:2f:2b:da:b3:5b:04:67:8b:6a:fa:ea:65:38:fb: 1d:e5:10:de:96:17:a9:62:32:d6:b1:d4:a8:a1:b7: 12:03:ff:cd:67:4a:72:15:c7:11:6c:b1:f7:6f:5c: a9:81:d8:49:cc:d6:f8:40:40:dc:e8:35:b3:d0:ab: 9a:c0:44:fa:6f:bf:a7:0d:33:91:23:15:c9:73:64: ec:d5:c9:e2:6d:bd:87:2e:a0:6a:f3:87:74:ee:57: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AF:F5:FF:63:8F:D3:56:33:C0:EC:0B:E1:1E:76:2C:A1:B8:D7:05 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/va_1_2OP01YzwOwL4R52LKG41wU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.80.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:d0:a7:02:fa:c4:91:b8:00:d2:42:d9:0b:95:46:4e:dc:13: cb:41:e6:79:5d:25:66:2c:21:fa:5c:57:79:0d:4a:85:c3:ff: 30:75:03:d3:17:2a:67:a8:00:87:54:5f:b0:b4:65:e9:e7:15: 9a:7c:ea:c5:10:2f:e9:49:98:08:68:a4:d5:6a:e4:d4:dc:64: a3:8a:d3:a5:72:fa:f1:77:f8:97:43:3b:19:da:72:18:e1:3c: 24:ce:c7:50:72:8d:0c:4b:d2:94:bb:32:3b:28:95:d2:9e:e7: 8e:4a:11:d0:31:f8:92:57:0e:f8:2f:c2:0d:ed:42:8f:1e:cb: d5:9f:62:fa:8d:da:06:32:ad:5d:06:bf:d8:21:47:aa:02:1a: 23:9b:31:fc:80:2f:ad:21:a0:8e:28:a9:1d:bb:94:fe:4e:fa: db:17:2e:79:c2:a9:95:c9:7a:6c:b2:fb:ba:2b:1f:1f:77:72: f2:4b:14:92:41:ed:32:b2:96:bd:c1:15:9d:1e:fb:ed:8c:02: f0:00:3d:c9:44:7a:ed:ef:67:94:87:1c:79:c6:a7:82:00:88: 11:40:ff:30:12:6c:63:bf:91:e1:cc:65:84:46:93:00:76:ae: 2b:51:f4:d8:78:59:65:82:d2:f4:c5:f4:bc:ba:e8:cd:80:6a: f5:15:c0:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJEQUZGNUZGNjM4RkQz NTYzM0MwRUMwQkUxMUU3NjJDQTFCOEQ3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWaezfhVK21T3VqjoedLKIG04f0J/44UlxRu0lImb1Ilkw9oNx QrPLx15qApzfw7NVZFYxp2YrT+OrblMdBop+pzb1XuXq0zfknxv1fRxVeNcPPx+T gJhIZ/yVYHHfrTg+hMnYe5fJUl1tv4w+oJa/Z2AQov7urr9hKUWPJjJGX/7Lhp/S AUqxljtQde6xSELvUssCoayRSHjsQOuRn6K4AltUcCUvK9qzWwRni2r66mU4+x3l EN6WF6liMtax1KihtxID/81nSnIVxxFssfdvXKmB2EnM1vhAQNzoNbPQq5rARPpv v6cNM5EjFclzZOzVyeJtvYcuoGrzh3TuV/6RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUva/1/2OP01YzwOwL4R52LKG41wUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZhXzFfMk9QMDFZendPd0w0 UjUyTEtHNDF3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6FAwDQYJKoZIhvcNAQELBQADggEBAHrQpwL6xJG4ANJC2QuVRk7cE8tB5nldJWYs IfpcV3kNSoXD/zB1A9MXKmeoAIdUX7C0ZennFZp86sUQL+lJmAhopNVq5NTcZKOK 06Vy+vF3+JdDOxnachjhPCTOx1ByjQxL0pS7MjsoldKe545KEdAx+JJXDvgvwg3t Qo8ey9WfYvqN2gYyrV0Gv9ghR6oCGiObMfyAL60hoI4oqR27lP5O+tsXLnnCqZXJ emyy+7orHx93cvJLFJJB7TKylr3BFZ0e++2MAvAAPclEeu3vZ5SHHHnGp4IAiBFA /zASbGO/keHMZYRGkwB2ritR9Nh4WWWC0vTF9Ly66M2AavUVwPg= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org