$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wicW79TzZlWD7I6dJDGP3e9CxPM.roa File: wicW79TzZlWD7I6dJDGP3e9CxPM.roa (raw, json) Hash identifier: 2CXArREvhM5HceHWGsrEgpliheFthPrCR6WgVKJj9kw= Subject key identifier: C2:27:16:EF:D4:F3:66:55:83:EC:8E:9D:24:31:8F:DD:EF:42:C4:F3 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3271 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wicW79TzZlWD7I6dJDGP3e9CxPM.roa Signing time: Mon 26 Aug 2024 05:31:40 +0000 ROA not before: Mon 26 Aug 2024 05:31:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12913 (0x3271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C22716EFD4F3665583EC8E9D24318FDDEF42C4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:da:10:67:c7:05:85:81:99:2e:1c:48:e7: 74:2a:8f:7f:29:35:7b:20:29:e5:22:28:e5:0a:22: 42:03:00:73:cc:18:e7:90:ea:bc:9a:ff:e6:94:b2: 0d:5b:f9:90:bc:b8:bd:0a:b1:55:40:42:6e:d3:c2: 2c:b6:0d:07:f2:0d:e6:60:b8:66:41:9f:6d:69:2e: aa:9e:81:a2:f3:48:9c:2d:c1:5b:c3:a9:09:07:d3: 4d:81:30:04:28:45:8e:f8:e2:04:64:2e:37:33:3e: ad:28:4c:3a:98:fb:ba:dc:78:7c:67:53:bf:93:a8: 64:6e:71:89:86:44:90:7e:a6:cc:fe:9e:e7:76:1b: c8:6e:06:f6:62:3e:92:2d:b1:1f:f4:08:a1:51:32: e7:46:d9:c9:e8:74:91:42:b4:cc:92:3b:37:ab:0f: 9e:fc:da:d9:95:bf:cb:57:44:9f:10:1d:90:5c:6c: 76:c7:f0:52:e8:40:7d:75:56:27:de:f2:a0:a0:61: 79:30:95:40:dc:e4:37:35:30:ff:05:30:5e:d1:54: f7:ca:77:f3:eb:78:49:30:aa:77:32:d9:ab:6f:e4: 9c:98:70:b2:eb:92:9c:67:81:a3:9d:1b:bb:61:b5: 58:b5:31:3b:f5:cb:99:25:7f:f9:50:ae:8d:3e:c5: b6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:16:EF:D4:F3:66:55:83:EC:8E:9D:24:31:8F:DD:EF:42:C4:F3 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wicW79TzZlWD7I6dJDGP3e9CxPM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.156.0/22 Signature Algorithm: sha256WithRSAEncryption 80:fb:6a:62:5c:92:dc:ab:f6:9f:8c:c6:ac:67:48:6c:4d:d7: d7:fe:84:4d:cc:77:8e:4e:e5:58:25:74:7b:28:99:25:82:a4: ea:21:d2:16:d8:75:a2:cb:cf:5b:36:84:75:ef:73:dd:6c:d8: a7:81:0e:15:42:1e:67:3f:38:d7:b3:02:30:1d:17:03:3b:fa: 86:58:a3:8b:69:6f:54:c7:3f:2f:1d:43:76:39:37:94:fb:af: 8e:8f:41:d9:19:00:d3:e0:16:b4:bd:bd:bd:c8:af:19:64:93: 3b:30:ab:70:5b:b5:e6:1d:63:2b:61:5d:da:29:d8:64:59:fb: 5e:de:ba:15:fa:8a:bc:dd:37:9b:5b:ce:27:c8:83:c3:2f:66: 10:ec:ef:0c:96:63:46:ca:e9:c1:c8:32:b9:ef:69:c2:21:5f: 15:4d:6b:a7:0c:9c:b5:a3:e2:7a:bf:bb:1f:4e:d7:fd:3c:53: dd:da:db:5a:03:1f:a9:ea:11:2b:62:d5:f3:e5:3b:2e:ac:aa: ba:2c:fa:b0:65:f2:dc:36:39:c7:59:38:a2:72:0c:1c:8d:c3: c2:c3:34:fd:ff:e7:9e:04:5b:2e:98:aa:85:94:5e:e9:3a:0b: 12:e6:8e:52:12:52:eb:ae:ec:a1:a2:f5:a4:4a:6d:34:c3:9c: 8e:44:85:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyMjcxNkVGRDRGMzY2 NTU4M0VDOEU5RDI0MzE4RkRERUY0MkM0RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/J9oQZ8cFhYGZLhxI53Qqj38pNXsgKeUiKOUKIkIDAHPMGOeQ 6rya/+aUsg1b+ZC8uL0KsVVAQm7Twiy2DQfyDeZguGZBn21pLqqegaLzSJwtwVvD qQkH002BMAQoRY744gRkLjczPq0oTDqY+7rceHxnU7+TqGRucYmGRJB+psz+nud2 G8huBvZiPpItsR/0CKFRMudG2cnodJFCtMySOzerD5782tmVv8tXRJ8QHZBcbHbH 8FLoQH11Vife8qCgYXkwlUDc5Dc1MP8FMF7RVPfKd/PreEkwqncy2atv5JyYcLLr kpxngaOdG7thtVi1MTv1y5klf/lQro0+xbYZAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwicW79TzZlWD7I6dJDGP3e9CxPMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dpY1c3OVR6WmxXRDdJNmRK REdQM2U5Q3hQTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wJwwDQYJKoZIhvcNAQELBQADggEBAID7amJcktyr9p+MxqxnSGxN19f+hE3Md45O 5VgldHsomSWCpOoh0hbYdaLLz1s2hHXvc91s2KeBDhVCHmc/ONezAjAdFwM7+oZY o4tpb1THPy8dQ3Y5N5T7r46PQdkZANPgFrS9vb3Irxlkkzswq3BbteYdYythXdop 2GRZ+17euhX6irzdN5tbzifIg8MvZhDs7wyWY0bK6cHIMrnvacIhXxVNa6cMnLWj 4nq/ux9O1/08U93a21oDH6nqESti1fPlOy6sqros+rBl8tw2OcdZOKJyDByNw8LD NP3/554EWy6YqoWUXuk6CxLmjlISUuuu7KGi9aRKbTTDnI5EhS8= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org