$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIPiRY_U49-n54wZpGmMkDO894E.roa File: wIPiRY_U49-n54wZpGmMkDO894E.roa (raw, json) Hash identifier: odypPkk3LEITKHp3o7gYXWln4dNodUCgA3KlL0r7ZMc= Subject key identifier: C0:83:E2:45:8F:D4:E3:DF:A7:E7:8C:19:A4:69:8C:90:33:BC:F7:81 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FBD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIPiRY_U49-n54wZpGmMkDO894E.roa Signing time: Mon 26 Aug 2024 05:28:48 +0000 ROA not before: Mon 26 Aug 2024 05:28:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12221 (0x2fbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C083E2458FD4E3DFA7E78C19A4698C9033BCF781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:2b:5c:e6:48:b8:0f:6c:3d:7b:cf:c7:1c: d9:28:e7:ab:c8:b8:6b:55:6b:1a:ba:ec:76:eb:13: 6e:f9:52:ef:a1:11:1c:ca:a0:2b:65:07:c9:b9:a3: b0:3d:c0:8b:fd:5f:d4:ee:70:ae:94:90:28:3d:1c: 79:43:0a:f3:bb:1a:f4:a8:5a:fb:b1:2e:9e:53:dc: 01:56:66:59:59:32:76:8d:da:9e:14:b5:38:93:7a: 26:6d:9a:2b:de:6a:9f:e0:fa:6a:69:e1:5b:93:1b: 79:0a:6a:ae:69:e0:7c:43:bb:3b:97:ed:93:ff:f1: 4b:ff:4e:df:14:14:67:40:9c:9e:2f:c0:6b:40:6c: e6:97:82:dd:fb:18:03:ce:00:45:9f:04:3c:3a:4c: c4:a9:a7:9b:be:d8:9a:49:62:14:bb:9c:02:c3:87: f9:38:eb:b9:84:96:1b:d4:0a:87:bf:f0:1d:8a:f3: 54:1f:2e:e3:84:b2:2f:77:04:e1:9b:62:75:19:72: a4:bd:d8:a2:84:3c:96:37:f8:16:82:51:ee:a3:52: 75:a7:22:6b:88:ad:42:60:a5:c5:9d:98:2d:52:67: 36:34:62:93:c3:d0:85:1b:4e:30:c6:bc:3b:c7:8d: 1b:d2:49:bd:7a:7a:43:14:ef:c2:82:00:a5:10:dc: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:E2:45:8F:D4:E3:DF:A7:E7:8C:19:A4:69:8C:90:33:BC:F7:81 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wIPiRY_U49-n54wZpGmMkDO894E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.75.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d5:66:9e:16:13:7c:22:26:1d:72:3d:26:11:32:d4:52:7f: 80:1c:d3:cf:0e:c7:30:7b:76:c0:c3:e9:bf:59:29:d5:c9:69: 60:1e:30:9e:32:c9:29:d3:44:22:3e:54:ea:99:01:37:dc:c8: ca:0a:9a:76:e3:8a:56:b2:3c:47:f7:ca:a5:7b:6c:2b:7f:37: 0c:2e:1e:06:f6:35:3e:9a:1e:d8:d7:2f:81:b6:91:d3:71:a1: 6e:9a:fd:ff:59:eb:4d:f3:9d:6a:d5:71:5b:87:cb:dc:ba:10: e8:bc:50:a3:59:86:01:52:c8:e4:30:9a:70:18:59:26:8a:1e: d5:c1:18:2b:37:d5:31:f4:59:62:5b:6f:2c:31:1c:a7:25:c9: 50:31:6e:a4:ae:54:9d:a8:c1:ae:f1:d4:eb:0c:3d:9d:b7:d0: 53:a7:13:46:e2:23:85:6b:e2:62:a4:a3:b9:c9:ef:44:1c:b1: cc:67:a8:8c:f9:41:3b:36:df:fb:38:ed:a7:c2:35:56:44:21: bf:c9:15:17:81:f7:f6:57:ad:aa:72:f1:e7:5b:f4:2f:fe:3a: 67:fc:16:2a:34:10:aa:5c:73:95:c4:eb:92:9f:47:15:71:2e: de:f6:81:2d:e7:51:1e:38:6c:e2:ff:ac:14:55:91:07:ef:b2: 97:46:68:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwODNFMjQ1OEZENEUz REZBN0U3OEMxOUE0Njk4QzkwMzNCQ0Y3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb3Ctc5ki4D2w9e8/HHNko56vIuGtVaxq67HbrE275Uu+hERzK oCtlB8m5o7A9wIv9X9TucK6UkCg9HHlDCvO7GvSoWvuxLp5T3AFWZllZMnaN2p4U tTiTeiZtmiveap/g+mpp4VuTG3kKaq5p4HxDuzuX7ZP/8Uv/Tt8UFGdAnJ4vwGtA bOaXgt37GAPOAEWfBDw6TMSpp5u+2JpJYhS7nALDh/k467mElhvUCoe/8B2K81Qf LuOEsi93BOGbYnUZcqS92KKEPJY3+BaCUe6jUnWnImuIrUJgpcWdmC1SZzY0YpPD 0IUbTjDGvDvHjRvSSb16ekMU78KCAKUQ3FeXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwIPiRY/U49+n54wZpGmMkDO894EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dJUGlSWV9VNDktbjU0d1pw R21Na0RPODk0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 wkswDQYJKoZIhvcNAQELBQADggEBAHHVZp4WE3wiJh1yPSYRMtRSf4Ac088OxzB7 dsDD6b9ZKdXJaWAeMJ4yySnTRCI+VOqZATfcyMoKmnbjilayPEf3yqV7bCt/Nwwu Hgb2NT6aHtjXL4G2kdNxoW6a/f9Z603znWrVcVuHy9y6EOi8UKNZhgFSyOQwmnAY WSaKHtXBGCs31TH0WWJbbywxHKclyVAxbqSuVJ2owa7x1OsMPZ230FOnE0biI4Vr 4mKko7nJ70QcscxnqIz5QTs23/s47afCNVZEIb/JFReB9/ZXrapy8edb9C/+Omf8 Fio0EKpcc5XE65KfRxVxLt72gS3nUR44bOL/rBRVkQfvspdGaIg= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org