$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xZzAo9G026IUFSPG8OUt-derZ9Q.roa File: xZzAo9G026IUFSPG8OUt-derZ9Q.roa (raw, json) Hash identifier: lRyf/MkB7iQjRqE1CFrnGw07zGW16rec9Q5bQnpAcS0= Subject key identifier: C5:9C:C0:A3:D1:B4:DB:A2:14:15:23:C6:F0:E5:2D:F9:D7:AB:67:D4 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3265 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xZzAo9G026IUFSPG8OUt-derZ9Q.roa Signing time: Mon 26 Aug 2024 05:31:37 +0000 ROA not before: Mon 26 Aug 2024 05:31:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12901 (0x3265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C59CC0A3D1B4DBA2141523C6F0E52DF9D7AB67D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:67:ac:a1:00:56:4c:80:e4:3a:b7:36:aa:fd: e8:c7:15:d3:bc:b8:e8:08:db:7c:ae:b1:c4:38:c2: 5b:ae:4c:d4:57:ed:5c:9d:17:b7:32:74:05:d1:84: 26:8c:ce:20:25:06:4a:a6:18:43:ab:21:1b:97:e9: b6:4f:c8:a8:3a:cf:96:fd:4b:f9:38:93:5a:f1:99: fc:f5:6e:6d:59:c2:9a:39:e8:5a:8a:d3:bf:db:8e: f5:c3:4c:db:bf:da:f9:19:d1:32:69:44:22:b8:fe: bf:d1:54:0e:94:c7:e8:9d:91:3a:ed:a2:b4:92:56: 5c:2a:7f:cc:fd:3a:51:9f:08:24:c8:1c:49:49:cf: 97:ea:bf:8d:1b:dc:75:f6:a3:c9:e5:d5:2a:79:3c: 60:b6:7c:fc:69:2b:b2:6d:1c:26:a0:21:30:e2:0d: 57:32:f8:37:a9:57:e6:bf:1b:01:ff:16:f5:30:2e: 77:47:bf:87:7e:0c:70:bd:f2:63:8b:b7:63:e0:2a: 11:48:f9:64:58:83:fa:fd:e1:1e:c1:a0:ed:6f:e8: 4c:73:43:fa:bf:70:d0:26:e3:2e:4f:76:9d:5a:35: 2b:82:3e:6c:05:73:5b:32:02:f8:e6:4f:b7:58:ba: 43:8b:9c:9e:88:01:2d:a3:e4:c9:e6:79:e4:ca:56: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:C0:A3:D1:B4:DB:A2:14:15:23:C6:F0:E5:2D:F9:D7:AB:67:D4 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xZzAo9G026IUFSPG8OUt-derZ9Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.48.0/20 Signature Algorithm: sha256WithRSAEncryption ac:2d:df:3d:d0:bf:cf:be:1c:d6:72:e7:c4:7b:64:a9:43:14: d1:92:0c:23:91:18:2e:9d:07:27:0f:32:39:74:df:21:6e:59: 73:7f:f1:a2:f3:c9:67:7e:60:22:88:f1:a1:c5:b3:53:c6:56: c3:e4:3c:e3:a3:2d:76:17:bc:e4:54:de:9e:3f:15:1f:8d:76: 57:50:25:6d:3d:e7:26:78:ae:05:91:c1:c2:32:de:3f:c9:0d: ad:99:3c:4b:8f:79:ff:a8:ca:bb:53:ab:c0:bb:33:76:65:cc: 05:7b:5e:ed:2f:d0:01:a2:5b:29:d2:29:84:63:5c:01:04:94: 2b:8f:32:96:03:fb:ea:62:4e:2e:a8:eb:d0:a4:97:95:bd:df: 30:ce:c9:a4:f1:80:50:3f:b6:1c:56:36:b6:d5:fa:1d:a2:87: 63:53:f6:7f:77:5b:78:7c:cd:30:8d:3a:18:b8:57:a0:ac:e7: c3:48:48:df:60:c6:1a:e2:d3:d8:21:fe:c3:95:61:2b:c5:3d: dd:21:86:17:4e:0f:f3:6c:f5:de:d8:b3:2b:a3:1d:0c:49:ea: 5d:34:c6:b4:41:13:6a:59:72:f8:bf:55:96:c4:9e:1a:86:fd: 7e:8a:f7:8b:21:5b:79:7e:85:77:ac:62:d5:21:02:59:ab:c2: 18:0b:84:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1OUNDMEEzRDFCNERC QTIxNDE1MjNDNkYwRTUyREY5RDdBQjY3RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrZ6yhAFZMgOQ6tzaq/ejHFdO8uOgI23yuscQ4wluuTNRX7Vyd F7cydAXRhCaMziAlBkqmGEOrIRuX6bZPyKg6z5b9S/k4k1rxmfz1bm1Zwpo56FqK 07/bjvXDTNu/2vkZ0TJpRCK4/r/RVA6Ux+idkTrtorSSVlwqf8z9OlGfCCTIHElJ z5fqv40b3HX2o8nl1Sp5PGC2fPxpK7JtHCagITDiDVcy+DepV+a/GwH/FvUwLndH v4d+DHC98mOLt2PgKhFI+WRYg/r94R7BoO1v6ExzQ/q/cNAm4y5Pdp1aNSuCPmwF c1syAvjmT7dYukOLnJ6IAS2j5MnmeeTKVhD9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxZzAo9G026IUFSPG8OUt+derZ9QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3haekFvOUcwMjZJVUZTUEc4 T1V0LWRlclo5US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7 wTAwDQYJKoZIhvcNAQELBQADggEBAKwt3z3Qv8++HNZy58R7ZKlDFNGSDCORGC6d BycPMjl03yFuWXN/8aLzyWd+YCKI8aHFs1PGVsPkPOOjLXYXvORU3p4/FR+NdldQ JW095yZ4rgWRwcIy3j/JDa2ZPEuPef+oyrtTq8C7M3ZlzAV7Xu0v0AGiWynSKYRj XAEElCuPMpYD++piTi6o69Ckl5W93zDOyaTxgFA/thxWNrbV+h2ih2NT9n93W3h8 zTCNOhi4V6Cs58NISN9gxhri09gh/sOVYSvFPd0hhhdOD/Ns9d7YsyujHQxJ6l00 xrRBE2pZcvi/VZbEnhqG/X6K94shW3l+hXesYtUhAlmrwhgLhCQ= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org