$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6OszkLs1RxBnnUAl44iLAMbwUA.roa File: w6OszkLs1RxBnnUAl44iLAMbwUA.roa (raw, json) Hash identifier: 00Po5XbcJDamqYG7/aYbme9pc1zCEj/SoGNR8rU1E/c= Subject key identifier: C3:A3:AC:CE:42:EC:D5:1C:41:9E:75:00:97:8E:22:2C:03:1B:C1:40 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FAA Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6OszkLs1RxBnnUAl44iLAMbwUA.roa Signing time: Mon 26 Aug 2024 05:28:43 +0000 ROA not before: Mon 26 Aug 2024 05:28:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 106.1.64.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12202 (0x2faa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C3A3ACCE42ECD51C419E7500978E222C031BC140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:b9:3c:17:84:3e:20:3c:b3:de:90:44:f9: b3:90:7a:5e:54:a1:11:22:e7:11:57:41:e1:0d:3a: d6:29:ef:1d:70:0b:bc:ae:ef:b5:f0:10:f1:c6:00: 87:dd:4f:ed:02:c4:20:ea:7d:cc:d5:d7:94:ac:01: 73:df:85:39:87:08:d7:77:1d:cf:fe:91:5f:2b:21: 5e:f9:df:4b:a6:08:0d:cc:5a:42:be:68:0a:cb:47: f4:71:79:00:4c:21:8b:8a:7b:79:bc:8a:05:20:2b: 19:47:7a:a3:ab:09:b5:6f:39:1e:a0:2e:92:e6:e3: 95:94:c5:80:43:c9:15:24:ee:9a:ee:af:f0:12:43: 71:80:51:ef:1e:ba:cb:ae:62:26:93:06:18:d0:98: 17:40:7d:55:bb:3e:cf:33:d5:f9:39:38:09:91:92: 1d:7d:00:d2:4e:a5:9a:1e:df:7b:e5:38:e4:21:dc: 28:23:55:90:15:a5:bd:fd:2b:53:66:6b:8b:a8:be: 65:f4:76:27:cf:ae:9c:26:47:e0:1c:b3:ef:0e:88: ca:19:fd:24:94:74:21:7d:22:df:c1:89:e5:1a:ff: f6:d6:f4:06:4a:2e:dc:df:15:71:ca:6e:9a:e5:e2: 61:17:e5:df:d1:39:bc:d0:eb:68:77:51:95:8b:14: 9e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A3:AC:CE:42:EC:D5:1C:41:9E:75:00:97:8E:22:2C:03:1B:C1:40 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6OszkLs1RxBnnUAl44iLAMbwUA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.64.0/21 Signature Algorithm: sha256WithRSAEncryption 58:89:fa:14:e1:54:0d:30:ff:87:2e:21:03:58:68:b9:e8:fe: 61:1d:b6:f4:01:8c:e3:e7:95:42:fd:fa:70:69:30:3c:e3:d3: cc:ae:2e:1e:f9:ad:69:8a:93:18:76:1a:2d:6b:74:17:93:0d: 5c:50:c3:8e:27:25:0d:0e:31:66:e6:5d:18:2d:0b:c3:a7:a0: 42:c7:42:14:8c:73:4c:b9:52:40:af:ad:32:5a:d4:7e:d2:0f: b9:ca:18:d1:5c:e0:5c:65:97:d4:61:2b:f0:17:aa:b7:5b:85: 90:5e:0f:22:62:c7:8a:85:64:87:2a:40:69:2c:08:9a:8e:4c: 2a:ee:13:6d:2a:0d:5a:ea:51:5b:5e:38:7b:f7:d2:5f:b6:6d: f7:cf:ae:80:e2:bd:46:f7:44:5b:5b:6c:df:4b:a2:f7:c7:0a: 37:31:bf:d9:ec:9a:f1:7f:88:f4:dc:76:1e:50:99:e3:20:21: 0a:e9:72:11:56:66:f2:78:d0:2d:50:ac:f1:4d:88:d8:53:f3: 72:b3:ca:20:a4:59:40:52:a8:ad:32:a3:fb:78:aa:32:74:c6: 1b:7e:49:b5:c2:3d:70:e0:d9:79:36:48:55:c2:75:4b:c6:6b: 75:5e:6f:bb:ed:de:e5:11:e4:6c:2b:a5:b2:2b:de:fc:2e:76: 16:1e:c4:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMzQTNBQ0NFNDJFQ0Q1 MUM0MTlFNzUwMDk3OEUyMjJDMDMxQkMxNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvK7k8F4Q+IDyz3pBE+bOQel5UoREi5xFXQeENOtYp7x1wC7yu 77XwEPHGAIfdT+0CxCDqfczV15SsAXPfhTmHCNd3Hc/+kV8rIV7530umCA3MWkK+ aArLR/RxeQBMIYuKe3m8igUgKxlHeqOrCbVvOR6gLpLm45WUxYBDyRUk7prur/AS Q3GAUe8eusuuYiaTBhjQmBdAfVW7Ps8z1fk5OAmRkh19ANJOpZoe33vlOOQh3Cgj VZAVpb39K1Nma4uovmX0difPrpwmR+Acs+8OiMoZ/SSUdCF9It/BieUa//bW9AZK LtzfFXHKbprl4mEX5d/RObzQ62h3UZWLFJ6/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUw6OszkLs1RxBnnUAl44iLAMbwUAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3c2T3N6a0xzMVJ4Qm5uVUFs NDRpTEFNYndVQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq AUAwDQYJKoZIhvcNAQELBQADggEBAFiJ+hThVA0w/4cuIQNYaLno/mEdtvQBjOPn lUL9+nBpMDzj08yuLh75rWmKkxh2Gi1rdBeTDVxQw44nJQ0OMWbmXRgtC8OnoELH QhSMc0y5UkCvrTJa1H7SD7nKGNFc4Fxll9RhK/AXqrdbhZBeDyJix4qFZIcqQGks CJqOTCruE20qDVrqUVteOHv30l+2bffProDivUb3RFtbbN9LovfHCjcxv9nsmvF/ iPTcdh5QmeMgIQrpchFWZvJ40C1QrPFNiNhT83KzyiCkWUBSqK0yo/t4qjJ0xht+ SbXCPXDg2Xk2SFXCdUvGa3Veb7vt3uUR5GwrpbIr3vwudhYexHU= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:41 2024 by rpki-client on console-fra.rpki-client.org