$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa File: wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa (raw, json) Hash identifier: xlx/IMpevi6Rx7CjDHqDh8F1TqH4/snJlqUc7mwr+4A= Subject key identifier: C1:36:D8:DC:44:3D:90:75:52:EE:69:68:EA:41:D3:B3:52:BF:02:32 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3042 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa Signing time: Mon 26 Aug 2024 05:29:17 +0000 ROA not before: Mon 26 Aug 2024 05:29:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 123.193.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12354 (0x3042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C136D8DC443D907552EE6968EA41D3B352BF0232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5f:6c:2f:4f:57:70:a8:5c:26:07:c8:d3:9e: e2:43:0d:76:9c:28:3a:12:09:40:12:67:3e:22:f8: 3c:22:0a:0f:3c:05:f8:cb:dd:7c:3b:16:22:be:b5: cc:ef:b5:02:ad:a0:04:d5:d6:94:ac:a7:cc:6e:04: a2:bf:d5:2a:fe:29:78:36:53:53:4d:c0:a3:59:40: f6:81:9a:ad:85:bf:92:b4:05:94:e6:70:f7:7d:4b: 73:21:c0:c4:29:57:4a:b8:9e:3f:f8:d2:4a:df:46: 86:c2:89:11:db:10:c2:c0:9a:6d:30:7c:52:1c:5a: 0a:ac:df:c0:ed:e0:1b:b3:bf:46:bc:1e:99:73:29: fb:b6:ba:56:6d:ac:ee:7b:8f:e5:3b:4b:0a:0f:4f: 9c:c7:79:8a:2f:32:21:d4:90:2b:f1:80:cd:8e:35: 1a:34:0f:20:0d:f7:e3:da:c9:98:6f:1b:20:02:15: 19:3e:0a:31:36:33:c3:e1:2f:30:e6:4a:37:2f:6c: 5b:bf:72:72:cf:65:b7:f9:f8:76:4c:c7:40:ae:95: 9f:bd:1a:10:75:1c:f9:8f:9f:0e:37:7c:0a:79:8f: 57:9e:93:dc:92:9c:33:10:9a:bd:27:cb:2e:46:35: e5:49:24:1b:4f:b7:64:de:9f:62:e7:bb:2e:1b:0a: 11:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:D8:DC:44:3D:90:75:52:EE:69:68:EA:41:D3:B3:52:BF:02:32 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.64.0/19 Signature Algorithm: sha256WithRSAEncryption a7:70:70:37:e9:11:4b:ee:c2:fd:8d:33:50:a8:5b:64:c5:f0: 2a:16:af:d7:37:89:0d:62:7a:04:11:ad:95:d7:ef:74:04:1a: 2f:af:00:46:d9:e7:2a:83:15:2a:98:02:7d:76:6f:6e:69:55: 50:50:1a:09:3f:01:45:b0:a3:1a:7f:7c:5f:17:9d:00:a7:01: d7:11:b5:1c:06:ec:19:73:15:a6:b1:18:9d:7d:89:d2:cf:19: 3b:59:df:b4:32:2f:7a:b0:7f:3e:fd:4e:bc:06:11:d3:4e:72: f1:1e:cf:17:a7:8c:3a:b9:43:18:09:7b:df:ab:19:65:b2:a5: 53:a4:01:9b:6f:5c:da:bc:75:1a:ca:f3:6b:48:cd:f5:9e:74: 58:b4:5a:05:01:59:71:cd:9a:bd:d4:38:38:98:fe:df:13:0b: 49:e3:6d:2e:6a:7a:51:8c:31:37:de:8d:40:90:d8:06:ae:27: 81:d7:98:ef:2d:a4:fd:fe:ed:c4:2c:ae:e6:a1:ef:57:ed:bf: 90:ab:2d:17:6b:0d:ea:11:8f:17:65:fa:9a:b9:83:83:2a:34: 27:4b:2b:b1:d4:0f:b9:ed:c6:ec:b3:67:eb:13:3f:7d:42:57: f9:5e:60:e5:84:6f:10:34:5d:b3:f4:26:33:60:13:2e:30:b2: 62:d1:d8:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxMzZEOERDNDQzRDkw NzU1MkVFNjk2OEVBNDFEM0IzNTJCRjAyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzX2wvT1dwqFwmB8jTnuJDDXacKDoSCUASZz4i+DwiCg88BfjL 3Xw7FiK+tczvtQKtoATV1pSsp8xuBKK/1Sr+KXg2U1NNwKNZQPaBmq2Fv5K0BZTm cPd9S3MhwMQpV0q4nj/40krfRobCiRHbEMLAmm0wfFIcWgqs38Dt4Buzv0a8Hplz Kfu2ulZtrO57j+U7SwoPT5zHeYovMiHUkCvxgM2ONRo0DyAN9+PayZhvGyACFRk+ CjE2M8PhLzDmSjcvbFu/cnLPZbf5+HZMx0CulZ+9GhB1HPmPnw43fAp5j1eek9yS nDMQmr0nyy5GNeVJJBtPt2Ten2Lnuy4bChHJAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwTbY3EQ9kHVS7mlo6kHTs1K/AjIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dUYlkzRVE5a0hWUzdtbG82 a0hUczFLX0FqSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7 wUAwDQYJKoZIhvcNAQELBQADggEBAKdwcDfpEUvuwv2NM1CoW2TF8CoWr9c3iQ1i egQRrZXX73QEGi+vAEbZ5yqDFSqYAn12b25pVVBQGgk/AUWwoxp/fF8XnQCnAdcR tRwG7BlzFaaxGJ19idLPGTtZ37QyL3qwfz79TrwGEdNOcvEezxenjDq5QxgJe9+r GWWypVOkAZtvXNq8dRrK82tIzfWedFi0WgUBWXHNmr3UODiY/t8TC0njbS5qelGM MTfejUCQ2AauJ4HXmO8tpP3+7cQsruah71ftv5CrLRdrDeoRjxdl+pq5g4MqNCdL K7HUD7ntxuyzZ+sTP31CV/leYOWEbxA0XbP0JjNgEy4wsmLR2EU= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:23 2024 by rpki-client on console-ams.rpki-client.org