$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x6wAk4coRhTRvlSeO7rrnEYPKb8.roa File: x6wAk4coRhTRvlSeO7rrnEYPKb8.roa (raw, json) Hash identifier: u1PZTCgxPQVolqM07st53sgFJpf3grJZB55BHnR157U= Subject key identifier: C7:AC:00:93:87:28:46:14:D1:BE:54:9E:3B:BA:EB:9C:46:0F:29:BF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2FA4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x6wAk4coRhTRvlSeO7rrnEYPKb8.roa Signing time: Mon 26 Aug 2024 05:28:42 +0000 ROA not before: Mon 26 Aug 2024 05:28:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12196 (0x2fa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C7AC009387284614D1BE549E3BBAEB9C460F29BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:3e:5d:ac:6d:e4:eb:b2:68:60:cd:c0:31: 2e:8b:f3:8f:12:80:ab:f6:76:48:fb:b8:51:8e:ec: 3f:6d:e1:ae:b2:75:a1:1b:f8:99:bb:35:15:06:d6: 0d:e9:ff:b9:d5:6e:40:c7:aa:19:7f:7f:1a:70:d8: ba:32:af:7d:c7:9e:6c:f0:dd:6e:9d:41:96:4c:78: fc:2c:ea:e7:43:11:73:8d:f7:f4:4c:5e:c7:90:60: b2:de:95:ba:42:20:f1:36:c2:56:0b:3a:64:16:02: d3:da:88:9b:e0:b9:14:97:3a:52:12:5b:28:83:1a: 85:6d:09:96:0b:e5:4b:9c:2e:81:3d:a3:db:92:c5: e6:e5:8e:5c:b8:37:dd:f2:3d:df:2f:d7:3a:8c:08: e5:7c:bf:8f:c3:30:f8:f8:32:c2:1f:1a:be:4f:fd: 03:02:a1:dc:5a:8e:e0:4a:3b:c1:a9:32:84:e7:ff: ba:6b:64:c7:c4:dc:3a:97:b0:3e:51:07:7d:e6:41: c0:bb:b8:ce:e1:39:ee:3e:4c:7e:aa:75:b8:44:73: 35:6c:ed:8b:e4:11:5b:7a:bc:2e:94:ef:ad:14:97: d2:e9:5d:c0:89:e9:04:2a:47:cb:22:ce:db:0c:01: 18:df:6f:9d:85:0e:09:65:d3:93:bd:dd:36:f6:d9: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:00:93:87:28:46:14:D1:BE:54:9E:3B:BA:EB:9C:46:0F:29:BF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x6wAk4coRhTRvlSeO7rrnEYPKb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.152.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:a4:4b:aa:f7:71:9a:05:a9:b4:11:2c:fa:c7:23:f2:df:57: f7:db:b1:45:d6:52:d6:ee:3a:48:89:37:96:ac:d8:5e:eb:f0: 18:de:72:dc:34:96:66:3f:fe:c8:73:99:b5:d8:86:bd:b3:7b: 63:09:75:db:67:45:ee:31:88:27:3c:7a:8b:a5:a0:40:ff:fa: 9e:7d:c0:8d:c9:b7:20:02:fc:72:e1:e7:d4:09:72:6e:de:33: 17:83:e2:89:b2:1d:2a:cf:12:30:2e:06:72:48:da:26:41:0d: d4:a9:4c:f5:93:10:01:b9:e6:87:07:5c:f9:1f:37:8d:4b:9e: 68:6f:36:e0:ed:e5:fe:a0:88:0c:a7:23:e8:fa:d0:46:19:28: 58:69:4a:ee:f7:d2:27:8f:02:6d:12:68:1d:57:10:5a:ee:02: c2:5a:ee:8c:0a:3e:e9:6c:f9:98:d1:90:af:ed:2e:86:ef:ce: ff:de:f2:87:29:7a:9e:5c:d6:87:1e:5b:68:4f:a7:5f:6d:ae: c4:bc:06:34:2f:cd:39:20:ec:13:a0:54:09:7c:b6:aa:95:51: 4e:95:d3:56:a9:f8:e8:2d:e0:16:51:b6:e8:70:22:20:6d:a5: 0a:5c:28:71:93:e7:8d:ad:ef:3a:87:f5:0c:34:b2:73:ac:5a: 04:85:d2:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3QUMwMDkzODcyODQ2 MTREMUJFNTQ5RTNCQkFFQjlDNDYwRjI5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfbj5drG3k67JoYM3AMS6L848SgKv2dkj7uFGO7D9t4a6ydaEb +Jm7NRUG1g3p/7nVbkDHqhl/fxpw2Loyr33Hnmzw3W6dQZZMePws6udDEXON9/RM XseQYLLelbpCIPE2wlYLOmQWAtPaiJvguRSXOlISWyiDGoVtCZYL5UucLoE9o9uS xebljly4N93yPd8v1zqMCOV8v4/DMPj4MsIfGr5P/QMCodxajuBKO8GpMoTn/7pr ZMfE3DqXsD5RB33mQcC7uM7hOe4+TH6qdbhEczVs7YvkEVt6vC6U760Ul9LpXcCJ 6QQqR8siztsMARjfb52FDgll05O93Tb22Zt1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUx6wAk4coRhTRvlSeO7rrnEYPKb8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3g2d0FrNGNvUmhUUnZsU2VP N3JybkVZUEtiOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 wZgwDQYJKoZIhvcNAQELBQADggEBAEukS6r3cZoFqbQRLPrHI/LfV/fbsUXWUtbu OkiJN5as2F7r8Bjectw0lmY//shzmbXYhr2ze2MJddtnRe4xiCc8eouloED/+p59 wI3JtyAC/HLh59QJcm7eMxeD4omyHSrPEjAuBnJI2iZBDdSpTPWTEAG55ocHXPkf N41LnmhvNuDt5f6giAynI+j60EYZKFhpSu730iePAm0SaB1XEFruAsJa7owKPuls +ZjRkK/tLobvzv/e8ocpep5c1oceW2hPp19trsS8BjQvzTkg7BOgVAl8tqqVUU6V 01ap+Ogt4BZRtuhwIiBtpQpcKHGT542t7zqH9Qw0snOsWgSF0mU= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org