$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJj057362GP5OSgtveZkYsBx2y0.roa File: yJj057362GP5OSgtveZkYsBx2y0.roa (raw, json) Hash identifier: ibj9d00o/PwzaW51s99Hn3kCbMTczBnPYU1OBn6Sy0s= Subject key identifier: C8:98:F4:E7:BD:FA:D8:63:F9:39:28:2D:BD:E6:64:62:C0:71:DB:2D Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 30DE Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJj057362GP5OSgtveZkYsBx2y0.roa Signing time: Mon 26 Aug 2024 05:29:54 +0000 ROA not before: Mon 26 Aug 2024 05:29:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.193.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12510 (0x30de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C898F4E7BDFAD863F939282DBDE66462C071DB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:fd:37:78:c8:14:01:d5:67:5b:27:78:82: 44:67:ca:bf:0e:c6:b9:84:1e:af:03:c7:6c:02:99: 65:da:26:52:13:2d:73:0f:4a:5e:43:8f:09:48:14: 43:3a:28:c1:bb:a0:62:31:2e:71:f0:ea:2e:0b:00: f4:49:73:aa:1a:1e:b7:ae:4a:c6:2f:cc:a4:df:82: 18:c3:8c:4e:2f:a2:84:ae:59:64:f8:a2:e8:54:8e: e4:90:ab:5a:2a:07:a2:b0:ce:84:03:5f:17:64:dc: d2:84:b4:a5:21:21:49:09:af:ab:ce:2d:f4:79:f2: b6:f4:50:6b:99:76:e1:2e:a6:72:73:7c:b3:9b:bc: 23:fd:72:11:de:57:4e:01:23:1b:f1:da:27:8f:4c: f7:15:7f:e5:17:b6:05:46:bd:61:d8:f4:56:5a:9f: 4f:69:81:02:1a:5e:0c:f6:63:8c:30:d2:33:af:d2: aa:28:b3:a6:eb:23:c5:96:c6:81:cf:6d:85:3a:10: 8b:88:dc:6d:48:fb:f3:16:30:24:08:b5:da:a1:ff: bc:75:9d:92:03:79:c8:87:6f:b5:26:af:c8:0d:df: 95:cf:f2:bd:0d:94:f4:3b:23:51:70:18:0a:52:a7: ac:66:ea:a4:01:d1:44:32:2f:0c:c8:aa:1a:65:8a: 19:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:98:F4:E7:BD:FA:D8:63:F9:39:28:2D:BD:E6:64:62:C0:71:DB:2D X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJj057362GP5OSgtveZkYsBx2y0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.160.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:0b:8a:8a:ce:7d:33:84:57:e0:f8:b1:aa:01:74:d5:1a:79: 94:31:a3:46:95:f1:3c:ed:38:91:b4:97:72:b6:d5:10:38:d2: 7a:ea:4c:28:13:38:f5:c9:1a:0b:b9:33:f2:76:89:a4:90:41: cc:a1:6c:c9:3f:dc:47:f9:cd:4b:24:24:02:7c:d5:43:c4:82: a4:5c:59:a4:79:c3:af:06:5b:5b:d3:c8:05:ec:a5:85:00:5e: 6c:1d:59:18:5b:fc:88:7a:6f:17:36:7e:4e:5e:13:f3:05:ee: 33:fe:c5:f5:87:0f:20:70:51:32:54:e4:a6:15:09:55:19:ff: cf:84:f2:a6:62:d9:47:3b:4a:b1:bc:3a:2d:a1:38:4c:72:a0: d3:8e:8d:58:c2:c4:d8:12:58:7d:f8:18:6e:1e:ad:82:51:0b: 9f:c5:64:e7:b8:d8:30:15:4c:1d:8a:bb:39:82:2a:95:e6:cd: c7:2a:fa:66:8d:50:28:64:26:7a:61:ea:91:ce:0d:46:2c:39: 69:79:24:ad:35:e8:11:db:4f:12:28:7c:7d:81:2a:52:51:68: c9:8f:52:f2:0a:c1:f3:14:ee:fa:7d:6a:3d:a7:0c:4d:b9:e5: 95:99:7d:df:0a:79:ec:94:3c:4a:55:a4:f9:20:bc:e2:f6:5f: f2:28:2f:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4OThGNEU3QkRGQUQ4 NjNGOTM5MjgyREJERTY2NDYyQzA3MURCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSvv03eMgUAdVnWyd4gkRnyr8OxrmEHq8Dx2wCmWXaJlITLXMP Sl5DjwlIFEM6KMG7oGIxLnHw6i4LAPRJc6oaHreuSsYvzKTfghjDjE4vooSuWWT4 ouhUjuSQq1oqB6KwzoQDXxdk3NKEtKUhIUkJr6vOLfR58rb0UGuZduEupnJzfLOb vCP9chHeV04BIxvx2iePTPcVf+UXtgVGvWHY9FZan09pgQIaXgz2Y4ww0jOv0qoo s6brI8WWxoHPbYU6EIuI3G1I+/MWMCQItdqh/7x1nZIDeciHb7Umr8gN35XP8r0N lPQ7I1FwGApSp6xm6qQB0UQyLwzIqhplihmhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyJj057362GP5OSgtveZkYsBx2y0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lKajA1NzM2MkdQNU9TZ3R2 ZVprWXNCeDJ5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 waAwDQYJKoZIhvcNAQELBQADggEBAA4LiorOfTOEV+D4saoBdNUaeZQxo0aV8Tzt OJG0l3K21RA40nrqTCgTOPXJGgu5M/J2iaSQQcyhbMk/3Ef5zUskJAJ81UPEgqRc WaR5w68GW1vTyAXspYUAXmwdWRhb/Ih6bxc2fk5eE/MF7jP+xfWHDyBwUTJU5KYV CVUZ/8+E8qZi2Uc7SrG8Oi2hOExyoNOOjVjCxNgSWH34GG4erYJRC5/FZOe42DAV TB2KuzmCKpXmzccq+maNUChkJnph6pHODUYsOWl5JK016BHbTxIofH2BKlJRaMmP UvIKwfMU7vp9aj2nDE255ZWZfd8KeeyUPEpVpPkgvOL2X/IoL7o= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org