$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa File: x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa (raw, json) Hash identifier: Y69uANA1ZuSFTpHJ13FvbA8tfguYo6PZ3oD/MKtXimA= Subject key identifier: C7:B2:15:73:3E:50:65:22:6E:80:9F:72:0A:CE:20:40:1F:C8:EA:6B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3110 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa Signing time: Mon 26 Aug 2024 05:30:04 +0000 ROA not before: Mon 26 Aug 2024 05:30:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00:fd02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12560 (0x3110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C7B215733E5065226E809F720ACE20401FC8EA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:dc:30:2a:fc:fb:39:e0:1f:f0:0b:26:fc: 5b:cc:a4:db:7d:e5:85:a2:60:8d:37:47:5d:08:a1: 9a:54:d5:6d:17:d5:10:68:76:af:05:6f:69:4b:3e: 2f:79:04:3c:c2:91:85:6d:a8:f0:1f:38:0c:46:51: 0b:3e:dc:48:7a:21:7a:e5:b0:03:f9:44:93:89:72: d6:56:20:fe:0c:e8:c5:28:b2:b2:6b:f7:44:ef:8b: 57:84:84:92:b9:e5:d7:f5:25:77:6e:1d:22:82:03: f4:8a:a3:ff:b1:0c:19:5f:c0:89:e3:f9:7c:07:04: a8:cb:2d:00:9d:c4:71:67:4c:ca:01:cc:26:b7:8f: d6:f6:85:79:ca:20:89:92:78:c8:cc:58:ed:22:f8: 48:12:55:e7:17:8b:4f:f6:89:76:88:15:2c:ea:83: 3a:2a:eb:62:f0:ff:e1:71:cb:08:df:b3:48:dd:ef: 14:8d:78:cf:6b:98:f7:08:5d:33:af:eb:da:82:2f: 8d:a8:74:66:12:11:9d:9e:ae:3d:93:28:a6:be:fd: 3a:57:ce:88:52:87:fa:6f:4b:f4:2b:4a:55:d3:46: a3:7b:94:a8:ab:e6:68:22:99:ae:ca:a5:21:47:56: 96:96:dd:74:5b:9a:f9:3e:8d:97:19:1b:f3:26:76: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B2:15:73:3E:50:65:22:6E:80:9F:72:0A:CE:20:40:1F:C8:EA:6B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:fd02::/48 Signature Algorithm: sha256WithRSAEncryption b6:13:ef:0e:66:80:5a:a8:50:f6:e1:27:99:99:56:a0:8e:03: e4:e2:3a:0e:50:45:49:0b:6b:e7:de:ce:ca:51:59:32:2c:7e: 7a:b2:e8:84:b2:ec:a7:4c:fa:d5:cc:15:d1:a9:41:3c:22:08: d9:e7:bd:07:8d:8a:62:78:31:2e:12:d5:24:a2:ad:2e:5f:36: 11:7b:d3:1b:d0:d5:73:0b:e4:51:4e:89:07:c4:6b:6e:b4:6b: fa:32:c1:42:0f:13:11:3d:82:d9:fe:48:83:01:69:8d:5f:55: 2b:e9:b7:72:21:a9:54:67:49:76:1d:47:88:f5:70:03:4d:89: b1:7b:fd:c8:56:51:5e:2f:43:c2:71:b0:e7:74:94:0e:7a:38: 53:c9:59:14:42:f9:26:3e:50:fd:4b:26:dd:ba:a8:25:61:90: 64:d9:b3:c4:15:17:45:db:70:c3:7c:17:eb:ca:6f:f4:98:ec: cc:ee:26:85:81:a8:0b:b5:3a:09:fa:a9:07:1f:8d:4e:25:a2: ab:80:1b:4f:23:ea:1c:e4:3d:f0:e7:c6:45:f5:04:2c:70:41: 9b:9f:aa:0e:69:7a:cc:2b:b0:44:af:87:00:02:40:15:1d:84: 74:51:fd:3e:48:d8:6a:d4:e9:ab:9b:2a:7b:a7:7b:ea:73:8b: 7b:21:f6:ab -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICMRAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3QjIxNTczM0U1MDY1 MjI2RTgwOUY3MjBBQ0UyMDQwMUZDOEVBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyydwwKvz7OeAf8Asm/FvMpNt95YWiYI03R10IoZpU1W0X1RBo dq8Fb2lLPi95BDzCkYVtqPAfOAxGUQs+3Eh6IXrlsAP5RJOJctZWIP4M6MUosrJr 90Tvi1eEhJK55df1JXduHSKCA/SKo/+xDBlfwInj+XwHBKjLLQCdxHFnTMoBzCa3 j9b2hXnKIImSeMjMWO0i+EgSVecXi0/2iXaIFSzqgzoq62Lw/+Fxywjfs0jd7xSN eM9rmPcIXTOv69qCL42odGYSEZ2erj2TKKa+/TpXzohSh/pvS/QrSlXTRqN7lKir 5mgima7KpSFHVpaW3XRbmvk+jZcZG/MmdpijAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUx7IVcz5QZSJugJ9yCs4gQB/I6mswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3g3SVZjejVRWlNKdWdKOXlD czRnUUJfSTZtcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/QIwDQYJKoZIhvcNAQELBQADggEBALYT7w5mgFqoUPbhJ5mZVqCOA+TiOg5Q RUkLa+fezspRWTIsfnqy6ISy7KdM+tXMFdGpQTwiCNnnvQeNimJ4MS4S1SSirS5f NhF70xvQ1XML5FFOiQfEa260a/oywUIPExE9gtn+SIMBaY1fVSvpt3IhqVRnSXYd R4j1cANNibF7/chWUV4vQ8JxsOd0lA56OFPJWRRC+SY+UP1LJt26qCVhkGTZs8QV F0XbcMN8F+vKb/SY7MzuJoWBqAu1Ogn6qQcfjU4loquAG08j6hzkPfDnxkX1BCxw QZufqg5peswrsESvhwACQBUdhHRR/T5I2GrU6aubKnune+pzi3sh9qs= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org