$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xqyKgsKABRp30cnU3D3MhOpMhwA.roa File: xqyKgsKABRp30cnU3D3MhOpMhwA.roa (raw, json) Hash identifier: 4okOliieYyZ9pE/+Dp1HgOmrtFiPmy46UX+C/xbdAj4= Subject key identifier: C6:AC:8A:82:C2:80:05:1A:77:D1:C9:D4:DC:3D:CC:84:EA:4C:87:00 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30E8 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xqyKgsKABRp30cnU3D3MhOpMhwA.roa Signing time: Mon 26 Aug 2024 05:29:56 +0000 ROA not before: Mon 26 Aug 2024 05:29:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12520 (0x30e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C6AC8A82C280051A77D1C9D4DC3DCC84EA4C8700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1f:43:24:3f:8d:65:24:db:f3:39:87:56:b8: 1e:1d:7b:42:e1:6b:3d:f6:cc:2d:b9:df:de:07:b3: 61:08:e7:fe:29:bb:23:e3:65:c1:ae:7a:49:11:f1: 8e:a6:bb:b3:e8:af:7e:c7:71:d5:0d:c6:d4:98:b1: 91:0c:56:70:dc:3a:2c:5b:b7:0d:ef:7c:db:8a:e7: fc:d7:a0:09:dd:5f:9f:16:3c:43:fa:0d:c2:44:58: 2d:d2:ef:70:48:18:35:fc:11:17:c9:a3:fb:a0:78: 18:b0:54:15:95:b7:c7:f8:7a:3a:a0:fb:a7:dd:4f: fe:bc:ec:46:ff:e0:4a:02:73:6f:a4:52:49:b2:c4: 55:06:49:ff:de:75:55:6a:d0:2a:18:e9:26:e8:d9: e5:a5:39:90:63:54:18:78:57:18:ca:5d:06:b2:7b: d5:85:19:b3:79:09:ac:a8:26:a8:94:3c:8d:a8:b6: b2:da:8f:c8:5b:d2:14:03:1b:29:81:81:c5:7b:dc: ab:51:f1:1a:23:0f:0b:71:eb:5d:1f:12:35:18:61: b8:1f:ed:bd:69:b0:44:5b:a7:de:05:7b:fa:62:78: 20:e6:e5:99:df:99:32:aa:86:94:db:c0:21:f5:5c: 92:31:49:09:d6:9e:a1:55:04:d7:1c:62:ee:34:9c: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AC:8A:82:C2:80:05:1A:77:D1:C9:D4:DC:3D:CC:84:EA:4C:87:00 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xqyKgsKABRp30cnU3D3MhOpMhwA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.230.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:ce:ca:ca:ae:5a:3c:67:92:e1:97:7e:aa:86:b2:f6:e8:78: da:be:3e:ad:ac:1d:a5:7b:25:c5:24:b4:7b:70:b9:3f:35:6f: 61:ce:33:cd:b4:92:98:83:de:61:5d:06:52:9f:b9:d6:4e:5b: aa:21:03:88:55:ba:03:73:69:b0:c1:18:fd:6b:b9:fc:d3:92: fb:7a:e9:62:8a:13:ff:0d:ed:60:50:59:6c:8c:75:8a:d1:8e: d3:4e:8a:16:6c:3b:41:c2:4c:c2:20:7f:d5:fb:5c:f6:93:27: 42:f1:ca:c9:c3:32:14:fa:d1:17:47:2e:84:ed:9f:8c:20:12: 91:ed:ed:18:51:a6:eb:04:8d:4d:10:d9:05:da:da:0f:93:ce: f1:fc:c4:cf:c2:83:f1:e7:fe:22:6d:87:2d:0d:ce:f0:78:e5: 1d:a1:86:2c:c0:41:c5:2d:72:83:1f:a9:db:55:21:a9:a2:26: a6:32:92:67:db:37:c2:7c:c3:da:2e:62:38:09:65:39:71:9c: 05:5a:98:94:bb:54:2c:6a:bc:af:89:e0:a6:ea:5c:3a:43:40: 0e:1d:45:59:dc:9f:8b:85:ed:62:1e:24:a1:8a:f3:91:76:11: 27:8e:03:38:e3:78:fc:97:27:a5:5d:7b:d3:eb:d6:a8:d7:8a: 27:2d:e4:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2QUM4QTgyQzI4MDA1 MUE3N0QxQzlENERDM0RDQzg0RUE0Qzg3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlH0MkP41lJNvzOYdWuB4de0Lhaz32zC25394Hs2EI5/4puyPj ZcGuekkR8Y6mu7Por37HcdUNxtSYsZEMVnDcOixbtw3vfNuK5/zXoAndX58WPEP6 DcJEWC3S73BIGDX8ERfJo/ugeBiwVBWVt8f4ejqg+6fdT/687Eb/4EoCc2+kUkmy xFUGSf/edVVq0CoY6Sbo2eWlOZBjVBh4VxjKXQaye9WFGbN5CayoJqiUPI2otrLa j8hb0hQDGymBgcV73KtR8RojDwtx610fEjUYYbgf7b1psERbp94Fe/pieCDm5Znf mTKqhpTbwCH1XJIxSQnWnqFVBNccYu40nI8TAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxqyKgsKABRp30cnU3D3MhOpMhwAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hxeUtnc0tBQlJwMzBjblUz RDNNaE9wTWh3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6eYwDQYJKoZIhvcNAQELBQADggEBADvOysquWjxnkuGXfqqGsvboeNq+Pq2sHaV7 JcUktHtwuT81b2HOM820kpiD3mFdBlKfudZOW6ohA4hVugNzabDBGP1rufzTkvt6 6WKKE/8N7WBQWWyMdYrRjtNOihZsO0HCTMIgf9X7XPaTJ0LxysnDMhT60RdHLoTt n4wgEpHt7RhRpusEjU0Q2QXa2g+TzvH8xM/Cg/Hn/iJthy0NzvB45R2hhizAQcUt coMfqdtVIamiJqYykmfbN8J8w9ouYjgJZTlxnAVamJS7VCxqvK+J4KbqXDpDQA4d RVncn4uF7WIeJKGK85F2ESeOAzjjePyXJ6Vde9Pr1qjXiict5OA= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org