$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z31LBCJS1HLMPBiZA_PqmLcLihA.roa File: z31LBCJS1HLMPBiZA_PqmLcLihA.roa (raw, json) Hash identifier: 5RD/PWbeMruttm5QrBbBje3+6WvVCj6CqU1iA3DFkVc= Subject key identifier: CF:7D:4B:04:22:52:D4:72:CC:3C:18:99:03:F3:EA:98:B7:0B:8A:10 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 303B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z31LBCJS1HLMPBiZA_PqmLcLihA.roa Signing time: Mon 26 Aug 2024 05:29:16 +0000 ROA not before: Mon 26 Aug 2024 05:29:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 211.76.113.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12347 (0x303b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CF7D4B042252D472CC3C189903F3EA98B70B8A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:b7:5d:4f:f2:e5:98:35:14:a2:3e:df:02: 8e:ae:f2:3d:08:2c:c5:b5:3d:ee:ef:bb:d3:1a:51: 29:f2:76:e4:0a:54:d9:f5:f0:63:8d:e7:21:24:1e: ca:ae:73:d3:40:59:df:30:6d:5b:95:15:1c:ca:ec: 2b:70:a2:60:a7:51:d4:39:50:99:2e:3e:bc:ad:21: 61:8b:29:63:e8:bd:b1:61:13:23:e5:3f:cc:54:d0: df:0e:7f:4e:6b:43:d1:10:1a:6a:eb:e4:35:73:78: e6:01:b1:a2:24:95:90:88:be:61:28:05:59:20:cc: 44:27:48:d1:50:fc:f6:61:ea:83:74:a7:4c:03:38: 2a:41:85:2a:a5:62:83:c1:f7:94:78:8e:e8:95:a5: f0:b8:98:1d:e9:61:15:73:e5:59:d7:00:46:37:04: ea:ca:36:0b:40:4d:70:32:7e:81:3f:e8:c9:50:e5: ca:c6:4c:3d:4f:39:7e:fc:d8:88:1f:e2:f5:06:98: ab:39:58:f4:78:d6:75:dd:ac:8e:f0:7f:3d:19:12: 15:c9:4c:3d:a1:3d:85:19:a2:66:f0:a4:32:3c:45: 1a:0e:87:a8:2b:91:dd:d3:b4:36:5b:74:c9:63:07: 7e:56:a5:db:f4:cd:98:d8:a9:d8:4f:ec:f6:8c:cf: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7D:4B:04:22:52:D4:72:CC:3C:18:99:03:F3:EA:98:B7:0B:8A:10 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z31LBCJS1HLMPBiZA_PqmLcLihA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.113.128/25 Signature Algorithm: sha256WithRSAEncryption b3:b6:68:65:24:c3:09:00:4a:d6:5e:b2:f9:94:8b:0b:3d:7f: ef:40:7e:e4:69:1d:99:97:a7:5c:19:0c:63:4d:dd:4c:ad:07: ba:d8:ce:ba:ae:4e:9e:ff:10:b4:90:a7:79:3b:c7:ae:a0:5b: 6d:4a:89:cb:9c:3c:2f:a8:8b:bc:58:17:86:c4:09:02:84:1f: 5a:b4:1a:f6:10:b2:10:7a:41:de:69:ca:5a:35:42:03:56:59: b3:e2:25:3f:71:88:c5:d8:b2:49:08:3f:db:99:64:8a:dc:de: 9a:8d:96:13:d7:f9:15:85:f6:8f:7d:e0:9e:15:2c:65:38:3c: 44:9b:8f:08:d6:c4:24:29:b2:16:c7:b6:18:2c:29:dc:12:01: bb:f3:64:42:bb:fb:a1:64:60:ac:67:78:60:0d:63:c3:f2:1d: ae:68:ef:98:d5:5b:75:55:ec:af:a8:5f:2f:7a:30:c4:1c:2c: bd:b8:38:f6:60:23:8d:c9:97:aa:5e:05:3b:12:9d:2e:0b:d2: 14:a0:c7:44:58:88:ea:2c:5e:36:3a:db:35:93:ac:e2:e7:1b: 52:ef:89:30:03:ef:9a:f5:ec:71:03:86:7a:ba:c7:f7:f4:8d: a0:04:54:24:96:37:66:28:aa:7e:b0:c0:de:eb:85:e5:57:bf: 99:12:b5:c5 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICMDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGN0Q0QjA0MjI1MkQ0 NzJDQzNDMTg5OTAzRjNFQTk4QjcwQjhBMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx37ddT/LlmDUUoj7fAo6u8j0ILMW1Pe7vu9MaUSnyduQKVNn1 8GON5yEkHsquc9NAWd8wbVuVFRzK7CtwomCnUdQ5UJkuPrytIWGLKWPovbFhEyPl P8xU0N8Of05rQ9EQGmrr5DVzeOYBsaIklZCIvmEoBVkgzEQnSNFQ/PZh6oN0p0wD OCpBhSqlYoPB95R4juiVpfC4mB3pYRVz5VnXAEY3BOrKNgtATXAyfoE/6MlQ5crG TD1POX782Igf4vUGmKs5WPR41nXdrI7wfz0ZEhXJTD2hPYUZombwpDI8RRoOh6gr kd3TtDZbdMljB35Wpdv0zZjYqdhP7PaMz9hbAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUz31LBCJS1HLMPBiZA/PqmLcLihAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ozMUxCQ0pTMUhMTVBCaVpB X1BxbUxjTGloQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT THGAMA0GCSqGSIb3DQEBCwUAA4IBAQCztmhlJMMJAErWXrL5lIsLPX/vQH7kaR2Z l6dcGQxjTd1MrQe62M66rk6e/xC0kKd5O8euoFttSonLnDwvqIu8WBeGxAkChB9a tBr2ELIQekHeacpaNUIDVlmz4iU/cYjF2LJJCD/bmWSK3N6ajZYT1/kVhfaPfeCe FSxlODxEm48I1sQkKbIWx7YYLCncEgG782RCu/uhZGCsZ3hgDWPD8h2uaO+Y1Vt1 VeyvqF8vejDEHCy9uDj2YCONyZeqXgU7Ep0uC9IUoMdEWIjqLF42Ots1k6zi5xtS 74kwA++a9exxA4Z6usf39I2gBFQkljdmKKp+sMDe64XlV7+ZErXF -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org