$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wzmeOX2ehuJ1u6fOFSKiKAj3ugI.roa File: wzmeOX2ehuJ1u6fOFSKiKAj3ugI.roa (raw, json) Hash identifier: T55VxVWQWmGVG6VWQfsUiViu17kqpn6oCmvNQQnaXC4= Subject key identifier: C3:39:9E:39:7D:9E:86:E2:75:BB:A7:CE:15:22:A2:28:08:F7:BA:02 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3262 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wzmeOX2ehuJ1u6fOFSKiKAj3ugI.roa Signing time: Mon 26 Aug 2024 05:31:37 +0000 ROA not before: Mon 26 Aug 2024 05:31:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.194.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12898 (0x3262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C3399E397D9E86E275BBA7CE1522A22808F7BA02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:e9:35:d3:df:8f:fa:d2:55:06:67:77:5c: 92:b6:8f:de:ce:a0:8b:78:b3:5d:99:0c:90:12:e1: d6:80:ec:a1:fd:d3:64:11:9a:c0:6d:9c:be:f0:0b: f3:a4:ed:da:19:61:6e:53:79:0d:f7:e0:3e:3d:eb: 28:25:ef:db:09:69:4d:9d:cc:ce:65:48:c1:df:da: c2:4c:8b:98:29:16:25:08:25:b1:0f:ce:fd:7b:d5: d7:b9:74:0e:44:de:05:33:2f:4c:24:44:9f:d9:5d: 2f:48:46:44:0d:7f:65:89:82:1f:45:18:95:35:a6: fa:a1:04:b2:28:d4:c4:03:13:2b:b2:95:a6:a2:9a: 18:0c:93:cb:80:19:3d:05:ed:4c:41:7c:07:83:4d: 95:90:d3:18:17:1e:5f:9c:ff:b3:a3:1c:de:e5:b6: 3f:4d:18:a6:00:76:19:37:00:f0:0e:71:19:93:bb: 82:de:7a:76:01:17:e3:f8:2a:c0:11:28:8b:0a:95: 3e:81:14:25:d4:5f:4b:1b:b5:4e:6e:85:da:49:71: d6:56:52:48:b4:51:bc:b2:29:16:b7:79:06:61:44: e3:ea:31:3c:d5:3a:b2:db:2c:a5:a9:0b:08:2d:90: 8f:b2:45:ea:be:33:dd:71:37:49:81:1c:b1:1f:7c: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:9E:39:7D:9E:86:E2:75:BB:A7:CE:15:22:A2:28:08:F7:BA:02 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wzmeOX2ehuJ1u6fOFSKiKAj3ugI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.194.148.0/22 Signature Algorithm: sha256WithRSAEncryption b8:f1:46:51:80:83:e9:3f:e8:3f:7f:f3:a2:6d:31:c3:27:73: 0d:8d:24:ae:85:59:65:c1:fe:23:3b:df:e4:4c:10:09:37:63: 2e:c2:0b:fe:11:4c:da:c6:f3:12:d7:61:2c:66:25:e6:4b:36: 0b:d9:98:ec:34:1e:27:cb:91:eb:10:59:8f:c6:2a:83:c1:b4: 26:09:44:15:2e:6e:68:6a:a7:65:98:40:07:90:b5:62:38:7a: 6c:96:4d:39:a4:cf:b4:99:df:82:ad:2d:c8:e7:7e:c9:d2:39: 79:cc:b6:7e:6a:ae:0c:e9:35:86:4e:4a:68:02:5c:ed:d3:b1: 48:df:62:ac:e1:70:c8:be:a4:8a:7a:42:14:39:6e:8f:c5:05: 3e:bc:8f:46:8c:97:fe:df:e4:b4:41:d0:d4:5f:3f:7c:64:b3: c0:d9:fd:d6:8b:ed:dc:db:0e:6d:3c:18:96:b2:c5:d5:fd:6d: f4:e5:7f:d3:cf:2d:3a:4a:23:95:68:65:bd:c9:9c:d1:b3:0b: 18:1e:c8:42:e9:d5:f6:b1:e4:91:04:b6:d2:fc:27:3e:f0:ce: 7e:6d:3a:83:7d:2d:4b:66:bd:e4:9e:1f:3f:75:2f:5e:b4:a5: 37:78:38:e0:41:fc:17:90:c6:c7:13:13:11:28:5f:9b:59:85: 57:30:ec:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMzMzk5RTM5N0Q5RTg2 RTI3NUJCQTdDRTE1MjJBMjI4MDhGN0JBMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC28ek109+P+tJVBmd3XJK2j97OoIt4s12ZDJAS4daA7KH902QR msBtnL7wC/Ok7doZYW5TeQ334D496ygl79sJaU2dzM5lSMHf2sJMi5gpFiUIJbEP zv171de5dA5E3gUzL0wkRJ/ZXS9IRkQNf2WJgh9FGJU1pvqhBLIo1MQDEyuylaai mhgMk8uAGT0F7UxBfAeDTZWQ0xgXHl+c/7OjHN7ltj9NGKYAdhk3APAOcRmTu4Le enYBF+P4KsARKIsKlT6BFCXUX0sbtU5uhdpJcdZWUki0UbyyKRa3eQZhROPqMTzV OrLbLKWpCwgtkI+yReq+M91xN0mBHLEffPHVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwzmeOX2ehuJ1u6fOFSKiKAj3ugIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3d6bWVPWDJlaHVKMXU2Zk9G U0tpS0FqM3VnSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wpQwDQYJKoZIhvcNAQELBQADggEBALjxRlGAg+k/6D9/86JtMcMncw2NJK6FWWXB /iM73+RMEAk3Yy7CC/4RTNrG8xLXYSxmJeZLNgvZmOw0HifLkesQWY/GKoPBtCYJ RBUubmhqp2WYQAeQtWI4emyWTTmkz7SZ34KtLcjnfsnSOXnMtn5qrgzpNYZOSmgC XO3TsUjfYqzhcMi+pIp6QhQ5bo/FBT68j0aMl/7f5LRB0NRfP3xks8DZ/daL7dzb Dm08GJayxdX9bfTlf9PPLTpKI5VoZb3JnNGzCxgeyELp1fax5JEEttL8Jz7wzn5t OoN9LUtmveSeHz91L160pTd4OOBB/BeQxscTExEoX5tZhVcw7JU= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org