$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wg4nKMeXCdPQwP2dB65ouhhGNSk.roa File: wg4nKMeXCdPQwP2dB65ouhhGNSk.roa (raw, json) Hash identifier: LRPOgz2AB5tI0QDPZNUg0QedZXmHmAm4vmcSFawf348= Subject key identifier: C2:0E:27:28:C7:97:09:D3:D0:C0:FD:9D:07:AE:68:BA:18:46:35:29 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 32FF Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wg4nKMeXCdPQwP2dB65ouhhGNSk.roa Signing time: Mon 26 Aug 2024 05:32:12 +0000 ROA not before: Mon 26 Aug 2024 05:32:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.195.238.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13055 (0x32ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:32:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C20E2728C79709D3D0C0FD9D07AE68BA18463529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:61:5c:f2:45:62:6d:84:ba:41:4d:04:a2: c2:c6:17:8e:90:ae:7c:a0:31:03:6f:39:fa:2c:07: ec:fd:98:e1:27:38:4f:9c:ca:46:5d:19:bb:6b:c2: dc:dd:78:59:63:67:03:90:63:a0:4d:cd:a3:86:a7: 2f:97:1b:b5:60:46:53:52:74:39:fb:ac:12:38:32: a4:8b:31:bf:03:27:bd:85:2b:1b:cf:e2:a0:36:51: 6c:ac:20:12:e0:c9:0e:47:4f:8f:2a:09:db:78:0b: 3a:6c:66:f4:39:2d:41:fe:09:99:cb:40:ec:88:88: 56:73:0a:76:65:f8:f9:7f:c3:20:15:18:e1:67:fb: 63:10:b1:24:5d:eb:6b:86:36:9b:b9:b2:3c:1c:5a: 16:73:76:38:0f:9e:21:bb:b1:7d:ec:46:4d:2a:45: 74:e8:12:ba:f6:20:cb:a0:af:f1:28:9f:e8:65:30: ec:c8:bd:4f:8e:ab:1f:8e:db:63:f2:cd:44:ec:05: 40:56:2c:e5:6a:04:a5:78:20:e2:72:9f:cd:23:79: b8:e3:86:33:c1:38:c8:3c:af:00:05:64:03:0a:2d: 48:ae:4e:67:c8:74:be:4f:09:53:c3:c2:b4:a9:a1: ff:af:81:09:84:60:92:dc:a3:48:cb:54:d8:fc:72: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0E:27:28:C7:97:09:D3:D0:C0:FD:9D:07:AE:68:BA:18:46:35:29 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wg4nKMeXCdPQwP2dB65ouhhGNSk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.238.128/25 Signature Algorithm: sha256WithRSAEncryption 49:2e:1e:f6:d5:f5:50:d4:3d:be:13:20:1c:02:1d:e6:93:f1: 02:1a:b4:7f:a2:1d:1c:59:2c:b4:14:9e:ba:fe:20:4f:e7:84: 00:7a:83:b1:d1:dc:d2:aa:6a:67:6a:de:26:1f:c0:86:91:9e: 31:81:41:48:3e:5c:21:9b:f5:e7:3a:48:94:5e:1b:4f:8f:19: 92:5f:c4:c7:a4:87:1e:1f:81:f1:7f:56:5a:04:97:3a:b7:f4: e4:50:30:6e:89:f8:39:af:09:f0:5c:16:c7:e2:68:35:2b:5e: 5c:50:00:5c:ff:ea:70:15:33:71:b7:31:02:17:96:e1:b3:56: bd:57:1f:6c:18:12:2f:91:96:59:67:cb:08:91:ca:52:75:d3: 19:bc:ee:22:2c:57:db:99:0c:c7:e6:c8:0e:ce:36:af:7f:09: 04:b7:55:9c:98:3a:b4:09:61:bb:0d:d1:4a:12:15:cf:a3:b0: bc:33:3d:4f:10:24:6b:44:90:15:70:ce:f9:2c:eb:5b:0c:c8: 79:87:8f:94:8b:d8:5d:90:2f:f4:7f:b9:45:00:d9:36:e2:00: fa:4e:7e:58:c4:23:ea:52:9a:7e:70:57:4a:2e:4a:bb:69:48: c8:66:83:42:68:7b:34:ca:38:af:50:73:4e:bb:8d:2d:7f:87: 12:14:8f:36 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMyMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyMEUyNzI4Qzc5NzA5 RDNEMEMwRkQ5RDA3QUU2OEJBMTg0NjM1MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvMGFc8kVibYS6QU0EosLGF46QrnygMQNvOfosB+z9mOEnOE+c ykZdGbtrwtzdeFljZwOQY6BNzaOGpy+XG7VgRlNSdDn7rBI4MqSLMb8DJ72FKxvP 4qA2UWysIBLgyQ5HT48qCdt4CzpsZvQ5LUH+CZnLQOyIiFZzCnZl+Pl/wyAVGOFn +2MQsSRd62uGNpu5sjwcWhZzdjgPniG7sX3sRk0qRXToErr2IMugr/Eon+hlMOzI vU+Oqx+O22PyzUTsBUBWLOVqBKV4IOJyn80jebjjhjPBOMg8rwAFZAMKLUiuTmfI dL5PCVPDwrSpof+vgQmEYJLco0jLVNj8cpyfAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUwg4nKMeXCdPQwP2dB65ouhhGNSkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dnNG5LTWVYQ2RQUXdQMmRC NjVvdWhoR05Tay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7 w+6AMA0GCSqGSIb3DQEBCwUAA4IBAQBJLh721fVQ1D2+EyAcAh3mk/ECGrR/oh0c WSy0FJ66/iBP54QAeoOx0dzSqmpnat4mH8CGkZ4xgUFIPlwhm/XnOkiUXhtPjxmS X8THpIceH4Hxf1ZaBJc6t/TkUDBuifg5rwnwXBbH4mg1K15cUABc/+pwFTNxtzEC F5bhs1a9Vx9sGBIvkZZZZ8sIkcpSddMZvO4iLFfbmQzH5sgOzjavfwkEt1WcmDq0 CWG7DdFKEhXPo7C8Mz1PECRrRJAVcM75LOtbDMh5h4+Ui9hdkC/0f7lFANk24gD6 Tn5YxCPqUpp+cFdKLkq7aUjIZoNCaHs0yjivUHNOu40tf4cSFI82 -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:41 2024 by rpki-client on console-fra.rpki-client.org