$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xn-ad5mUSJkziijuCC00-ABJrc8.roa File: xn-ad5mUSJkziijuCC00-ABJrc8.roa (raw, json) Hash identifier: C0fNaupkpoirtqP0+qqLFlKLJ7Dh9W+1/Gd4+M1fVPk= Subject key identifier: C6:7F:9A:77:99:94:48:99:33:8A:28:EE:08:2D:34:F8:00:49:AD:CF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3166 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xn-ad5mUSJkziijuCC00-ABJrc8.roa Signing time: Mon 26 Aug 2024 05:30:25 +0000 ROA not before: Mon 26 Aug 2024 05:30:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12646 (0x3166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:30:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C67F9A7799944899338A28EE082D34F80049ADCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:56:08:fe:db:20:33:eb:e4:73:9f:b8:16: 4f:9b:a2:39:9e:46:21:55:4e:51:97:b3:39:93:08: 62:2b:f5:57:80:a0:1d:60:a8:f5:78:fc:d5:76:8a: 90:fb:cf:ec:7e:6b:eb:d6:9d:d3:27:09:fc:6f:52: a6:98:ae:2f:b3:55:6e:73:cb:b8:a6:dd:af:ab:d3: 3f:64:c0:98:4d:c3:c3:56:02:ef:1d:ab:14:ab:a1: ea:43:80:8b:fc:a4:9b:2e:9c:99:fa:9b:1f:1e:fc: 5c:a2:ad:e4:4a:15:53:c2:2f:48:46:57:98:0f:a8: 33:ec:41:1e:b7:72:1f:f8:81:16:06:cc:bb:cb:6b: 49:9e:58:19:55:a8:59:b7:00:4d:2b:05:78:2f:b9: c7:91:81:85:d6:4d:c1:9f:64:66:14:ac:92:f6:3a: 58:51:53:88:31:60:37:4c:82:29:9e:61:0e:e8:4c: 5d:5f:28:dc:48:1a:ab:93:2c:71:2d:77:7e:24:72: dd:e0:05:c2:b7:81:c1:f7:43:12:ff:82:4c:08:67: d4:b3:25:e8:96:2b:09:b8:6e:fe:da:32:e5:d3:f2: 90:7f:55:b6:56:48:09:df:6f:5e:e3:2f:70:41:db: a2:c6:a3:80:ff:2b:73:dc:a7:9e:cd:35:e6:95:3e: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7F:9A:77:99:94:48:99:33:8A:28:EE:08:2D:34:F8:00:49:AD:CF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xn-ad5mUSJkziijuCC00-ABJrc8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.123.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:78:b4:4c:98:ef:09:b9:da:5c:2b:a8:64:9f:59:dc:61:28: 98:35:5b:ef:da:a1:e5:c8:97:e7:26:2d:56:f8:9c:a5:c9:ed: d1:da:e4:14:af:61:57:b3:16:0e:a9:09:60:dc:04:3b:b2:37: 36:e4:4e:c3:63:27:38:ce:5c:e1:99:e4:7d:75:cb:69:c2:fd: a5:e8:96:e2:a4:1a:8e:41:3b:92:79:e9:97:47:25:42:25:0d: a6:67:dd:fc:0f:c2:70:29:5e:c3:f1:d3:c7:24:54:0a:2a:df: 84:eb:5e:ee:4e:1d:15:6e:10:27:b4:85:f3:3a:04:b5:57:35: 70:d1:bf:79:d8:74:cf:1e:b4:c3:b0:d6:c9:4d:71:db:24:6b: c7:ed:23:f6:b3:4a:02:ef:79:99:48:66:35:d3:aa:77:2f:60: 2a:84:4f:20:1d:ab:dc:d6:f0:27:f2:5c:70:c7:ef:e0:0c:03: 65:8d:82:b3:fb:fe:0e:8a:ac:f0:ad:7a:e3:f9:f2:8d:41:18: b1:5e:af:8f:96:fe:49:81:5f:40:1c:34:99:77:ac:1e:13:14: c8:f7:70:bf:af:33:8e:a3:11:06:fb:6e:34:d6:8b:42:50:79: fd:ca:28:ec:ab:12:3c:89:f8:3e:55:7e:22:95:50:e1:ba:19: 75:1d:f9:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMwMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2N0Y5QTc3OTk5NDQ4 OTkzMzhBMjhFRTA4MkQzNEY4MDA0OUFEQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/WVYI/tsgM+vkc5+4Fk+bojmeRiFVTlGXszmTCGIr9VeAoB1g qPV4/NV2ipD7z+x+a+vWndMnCfxvUqaYri+zVW5zy7im3a+r0z9kwJhNw8NWAu8d qxSroepDgIv8pJsunJn6mx8e/FyireRKFVPCL0hGV5gPqDPsQR63ch/4gRYGzLvL a0meWBlVqFm3AE0rBXgvuceRgYXWTcGfZGYUrJL2OlhRU4gxYDdMgimeYQ7oTF1f KNxIGquTLHEtd34kct3gBcK3gcH3QxL/gkwIZ9SzJeiWKwm4bv7aMuXT8pB/VbZW SAnfb17jL3BB26LGo4D/K3Pcp57NNeaVPlxbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxn+ad5mUSJkziijuCC00+ABJrc8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3huLWFkNW1VU0premlpanVD QzAwLUFCSnJjOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THswDQYJKoZIhvcNAQELBQADggEBABp4tEyY7wm52lwrqGSfWdxhKJg1W+/aoeXI l+cmLVb4nKXJ7dHa5BSvYVezFg6pCWDcBDuyNzbkTsNjJzjOXOGZ5H11y2nC/aXo luKkGo5BO5J56ZdHJUIlDaZn3fwPwnApXsPx08ckVAoq34TrXu5OHRVuECe0hfM6 BLVXNXDRv3nYdM8etMOw1slNcdska8ftI/azSgLveZlIZjXTqncvYCqETyAdq9zW 8CfyXHDH7+AMA2WNgrP7/g6KrPCteuP58o1BGLFer4+W/kmBX0AcNJl3rB4TFMj3 cL+vM46jEQb7bjTWi0JQef3KKOyrEjyJ+D5VfiKVUOG6GXUd+cc= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org