$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yaT3iGvIJ8kGMcJXmwOMoz3D-XM.roa File: yaT3iGvIJ8kGMcJXmwOMoz3D-XM.roa (raw, json) Hash identifier: jjZG0FScjr1chbxTJrqsxZ4Hyhho+kE1QOQtB6Dvucc= Subject key identifier: C9:A4:F7:88:6B:C8:27:C9:06:31:C2:57:9B:03:8C:A3:3D:C3:F9:73 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 324A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yaT3iGvIJ8kGMcJXmwOMoz3D-XM.roa Signing time: Mon 26 Aug 2024 05:31:31 +0000 ROA not before: Mon 26 Aug 2024 05:31:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.233.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12874 (0x324a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C9A4F7886BC827C90631C2579B038CA33DC3F973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:de:6a:cb:e0:5f:2f:91:26:30:78:91:0f: 83:b3:27:a7:4e:11:c7:15:f2:7b:13:3e:cb:53:bf: 91:db:73:68:89:19:d0:ca:62:a0:5c:86:90:2c:79: c2:83:ca:25:fb:0b:14:6a:d0:14:66:9f:60:42:6d: d9:7c:9b:be:31:e0:93:a3:7d:fe:11:c6:43:78:61: 63:24:37:bd:43:65:50:46:52:60:50:89:e2:93:93: dd:f7:d8:1b:89:e7:d8:f1:d4:8d:b4:0c:12:3e:44: eb:d9:fb:9e:8d:1c:10:53:de:d1:25:88:dd:30:61: 09:c4:ad:9b:26:de:a9:e1:93:14:93:03:c3:3b:3e: 55:48:f5:82:c1:43:da:26:1b:95:e4:67:1d:12:db: ee:66:e6:ff:27:b2:16:5b:bc:5d:e9:51:bd:a5:f7: f8:e1:f3:96:61:00:16:a8:b5:9e:0c:a6:a1:60:3c: 3f:1a:80:6e:10:7e:9e:aa:b3:47:a3:e6:f7:e9:55: 85:61:c9:4f:a8:57:be:83:64:bb:9f:6a:b3:4c:79: 33:4e:e9:1d:cd:a8:20:5f:28:3d:cb:82:de:d4:f2: ea:96:14:2c:25:46:fa:bc:db:11:13:c8:e9:93:4f: 0e:6a:26:38:9d:30:b1:b6:c9:3e:6c:c7:c6:8d:6a: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A4:F7:88:6B:C8:27:C9:06:31:C2:57:9B:03:8C:A3:3D:C3:F9:73 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yaT3iGvIJ8kGMcJXmwOMoz3D-XM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.64.0/20 Signature Algorithm: sha256WithRSAEncryption 30:3d:39:c6:51:8f:2b:78:7e:88:34:18:c0:4d:44:1e:5a:07: 7a:5f:9a:70:23:71:5f:60:94:75:d4:f4:12:bb:6c:ae:cb:15: 2c:db:1a:65:fd:8d:6f:b1:cd:05:40:be:68:e8:99:48:e6:10: cf:5c:9c:bd:71:28:f2:08:29:ff:e7:54:54:e0:f1:17:ab:30: 1e:65:2e:34:b8:49:86:8c:5a:d8:22:a8:27:87:89:18:de:96: d6:55:b9:94:8e:98:24:84:0f:69:a5:62:69:83:cc:3f:d4:ed: 10:e1:24:01:b3:e9:ea:38:74:9c:92:83:d1:0d:cb:e6:20:e7: 71:8e:d1:be:e8:f5:6c:b9:e0:53:c5:fa:a7:6c:8b:a8:44:76: ef:30:c1:f0:b9:f8:e8:1d:81:5e:8b:85:b3:3e:b7:53:28:4a: 73:15:04:4e:21:3c:59:d5:0f:4d:50:e8:20:24:54:94:04:b7: 56:53:21:16:12:75:d9:ad:24:f2:96:41:18:f8:09:fb:1f:a4: ae:0d:f3:87:23:34:3b:cc:0b:7d:88:51:e9:39:3d:93:e8:b2: 29:39:23:68:2b:13:dd:67:23:a1:c6:f7:e9:0e:4c:54:ce:46: e7:30:2e:9a:a8:fa:f0:4d:f7:2b:b9:73:fd:cd:81:60:80:12: 75:77:b4:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM5QTRGNzg4NkJDODI3 QzkwNjMxQzI1NzlCMDM4Q0EzM0RDM0Y5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWf95qy+BfL5EmMHiRD4OzJ6dOEccV8nsTPstTv5Hbc2iJGdDK YqBchpAsecKDyiX7CxRq0BRmn2BCbdl8m74x4JOjff4RxkN4YWMkN71DZVBGUmBQ ieKTk9332BuJ59jx1I20DBI+ROvZ+56NHBBT3tEliN0wYQnErZsm3qnhkxSTA8M7 PlVI9YLBQ9omG5XkZx0S2+5m5v8nshZbvF3pUb2l9/jh85ZhABaotZ4MpqFgPD8a gG4Qfp6qs0ej5vfpVYVhyU+oV76DZLufarNMeTNO6R3NqCBfKD3Lgt7U8uqWFCwl Rvq82xETyOmTTw5qJjidMLG2yT5sx8aNatGVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyaT3iGvIJ8kGMcJXmwOMoz3D+XMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lhVDNpR3ZJSjhrR01jSlht d09Nb3ozRC1YTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR2 6UAwDQYJKoZIhvcNAQELBQADggEBADA9OcZRjyt4fog0GMBNRB5aB3pfmnAjcV9g lHXU9BK7bK7LFSzbGmX9jW+xzQVAvmjomUjmEM9cnL1xKPIIKf/nVFTg8RerMB5l LjS4SYaMWtgiqCeHiRjeltZVuZSOmCSED2mlYmmDzD/U7RDhJAGz6eo4dJySg9EN y+Yg53GO0b7o9Wy54FPF+qdsi6hEdu8wwfC5+OgdgV6LhbM+t1MoSnMVBE4hPFnV D01Q6CAkVJQEt1ZTIRYSddmtJPKWQRj4CfsfpK4N84cjNDvMC32IUek5PZPosik5 I2grE91nI6HG9+kOTFTORucwLpqo+vBN9yu5c/3NgWCAEnV3tII= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org