$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgKQTCn4-eD3MZtV6L7rzemlIzE.roa File: vgKQTCn4-eD3MZtV6L7rzemlIzE.roa (raw, json) Hash identifier: tjUtnxJWVKIhN7IZ1Y8kQvijAyuuKtDotWUqHBE4Cr0= Subject key identifier: BE:02:90:4C:29:F8:F9:E0:F7:31:9B:55:E8:BE:EB:CD:E9:A5:23:31 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3015 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgKQTCn4-eD3MZtV6L7rzemlIzE.roa Signing time: Mon 26 Aug 2024 05:29:07 +0000 ROA not before: Mon 26 Aug 2024 05:29:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12309 (0x3015) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BE02904C29F8F9E0F7319B55E8BEEBCDE9A52331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:2e:f6:7e:0a:0d:6a:80:3a:e1:ac:a5:b5: 0a:e5:10:45:2d:20:d2:b3:38:17:30:1e:be:13:a2: 2a:f5:ae:b1:c3:d7:33:3d:dd:f8:7f:a6:89:03:70: a4:32:a9:63:21:0a:0e:d1:fe:68:86:f8:97:9a:39: 5b:e9:e8:53:3a:d0:8b:05:1d:31:5a:95:76:ca:9e: 17:00:ec:87:72:29:8e:16:b5:83:1e:8b:6c:98:c2: e3:67:40:4a:dc:4a:f2:b1:36:32:35:94:d6:37:b6: dd:94:f0:37:1a:e7:61:68:20:b9:a8:f9:2c:e5:ab: bb:d3:24:5b:e1:93:df:69:d9:da:d5:52:01:20:eb: 28:b6:0e:e8:3e:10:15:3a:d3:b2:f6:bd:80:f5:d6: b1:ef:44:b5:81:b0:bc:1b:dd:a1:4c:e1:93:e3:d1: 11:03:8a:cb:5b:57:cd:b4:02:86:f4:63:8f:e1:4b: fd:c7:15:c0:c9:fc:a4:8a:81:9d:9c:1a:06:dd:f1: 4a:a4:64:29:26:21:55:8e:e6:a1:5f:62:e9:7a:dd: 89:ab:4c:b9:c5:67:fb:c7:fc:af:3b:b3:1a:a8:48: 1a:79:fd:39:16:76:eb:f2:9c:03:33:33:a9:96:b0: 59:46:a8:8c:62:29:d9:1f:ce:36:c0:e8:f0:00:88: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:02:90:4C:29:F8:F9:E0:F7:31:9B:55:E8:BE:EB:CD:E9:A5:23:31 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgKQTCn4-eD3MZtV6L7rzemlIzE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.104.0/22 Signature Algorithm: sha256WithRSAEncryption 03:c8:e5:dc:2b:5b:7d:9f:f4:35:32:22:e5:8f:51:13:e0:58: b0:ee:b1:35:1c:27:9f:39:26:0f:f6:91:b8:8a:6c:ee:06:8d: 40:41:25:e4:22:98:78:cd:f4:6b:08:52:00:ee:af:49:92:c5: 3d:c3:bb:7e:ef:25:98:2f:7c:1c:df:98:2e:62:f0:7e:8b:b7: 19:98:8d:75:ff:39:ab:68:62:26:bb:c9:9e:9d:6b:9c:c6:df: 63:fb:fa:7e:f0:95:ce:77:ed:aa:03:20:10:aa:79:0d:bd:08: 62:1a:76:ac:70:87:0c:25:ac:02:79:f6:e5:07:09:70:d5:63: cf:d7:d2:5e:29:df:15:19:8c:48:3d:05:3c:fd:a8:ff:a1:1c: 89:1a:f2:fc:96:07:d0:9c:1b:c5:fc:12:cb:95:70:e6:b7:8d: 35:e8:b2:79:a6:b0:0c:15:70:e9:1b:e1:30:0d:2a:ad:20:e5: 0f:ed:a6:75:3c:8a:6e:8a:e9:3b:bf:52:01:87:aa:1f:90:d4: 22:11:38:9d:80:25:b5:cd:1c:fb:da:c4:2a:d4:a1:ab:13:3f: 68:5e:93:4f:1e:80:e1:9e:08:ec:fa:50:cc:b7:22:2c:7b:e6: f0:79:15:86:ad:6c:ff:27:77:32:5c:d3:a4:2e:70:79:e3:24: d8:2d:96:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJFMDI5MDRDMjlGOEY5 RTBGNzMxOUI1NUU4QkVFQkNERTlBNTIzMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqCi72fgoNaoA64ayltQrlEEUtINKzOBcwHr4Toir1rrHD1zM9 3fh/pokDcKQyqWMhCg7R/miG+JeaOVvp6FM60IsFHTFalXbKnhcA7IdyKY4WtYMe i2yYwuNnQErcSvKxNjI1lNY3tt2U8Dca52FoILmo+Szlq7vTJFvhk99p2drVUgEg 6yi2Dug+EBU607L2vYD11rHvRLWBsLwb3aFM4ZPj0REDistbV820Aob0Y4/hS/3H FcDJ/KSKgZ2cGgbd8UqkZCkmIVWO5qFfYul63YmrTLnFZ/vH/K87sxqoSBp5/TkW duvynAMzM6mWsFlGqIxiKdkfzjbA6PAAiJIlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvgKQTCn4+eD3MZtV6L7rzemlIzEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZnS1FUQ240LWVEM01adFY2 TDdyemVtbEl6RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wGgwDQYJKoZIhvcNAQELBQADggEBAAPI5dwrW32f9DUyIuWPURPgWLDusTUcJ585 Jg/2kbiKbO4GjUBBJeQimHjN9GsIUgDur0mSxT3Du37vJZgvfBzfmC5i8H6LtxmY jXX/OatoYia7yZ6da5zG32P7+n7wlc537aoDIBCqeQ29CGIadqxwhwwlrAJ59uUH CXDVY8/X0l4p3xUZjEg9BTz9qP+hHIka8vyWB9CcG8X8EsuVcOa3jTXosnmmsAwV cOkb4TANKq0g5Q/tpnU8im6K6Tu/UgGHqh+Q1CIROJ2AJbXNHPvaxCrUoasTP2he k08egOGeCOz6UMy3Iix75vB5FYatbP8ndzJc06QucHnjJNgtluQ= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:55 2024 by rpki-client on console-fra.rpki-client.org