$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zEHTeBlKEjWNCsVaftPrd8hV4AE.roa File: zEHTeBlKEjWNCsVaftPrd8hV4AE.roa (raw, json) Hash identifier: pxkSiSe2whghF+WER3WT+DYuW7YDE4fv3V//n1bNC1g= Subject key identifier: CC:41:D3:78:19:4A:12:35:8D:0A:C5:5A:7E:D3:EB:77:C8:55:E0:01 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2F93 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zEHTeBlKEjWNCsVaftPrd8hV4AE.roa Signing time: Mon 26 Aug 2024 05:28:38 +0000 ROA not before: Mon 26 Aug 2024 05:28:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 123.192.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12179 (0x2f93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:28:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CC41D378194A12358D0AC55A7ED3EB77C855E001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:ad:d1:43:66:52:1e:2e:d2:34:e3:53:08: 31:dc:ed:28:4f:d0:ca:12:ce:bb:14:84:b0:92:9e: ab:e4:28:61:a8:9b:ca:54:a0:2b:a2:98:c0:94:a6: af:5a:d8:42:7f:80:b1:6c:63:00:74:2e:8c:be:16: 90:cd:03:12:a4:07:28:44:11:f8:e8:c7:25:5e:c1: fa:f3:54:48:5f:9c:9d:99:de:a2:95:2c:d8:93:1e: cb:3d:db:68:75:07:67:91:a7:50:e1:69:00:24:ab: 73:66:13:e0:fe:29:0d:94:97:f8:52:97:71:72:96: be:e8:74:3b:50:1c:18:a0:da:fa:c8:38:c5:1a:62: 2e:65:bd:fa:9c:5a:a5:2a:be:55:5d:02:31:24:64: 9c:6b:14:3b:3c:2e:54:de:51:57:93:ac:40:9c:a8: 5d:d8:e7:92:39:50:24:6d:2e:fc:47:e4:16:c9:de: 6a:f1:67:1b:b9:26:79:d6:a2:97:2e:7b:82:f9:02: 33:23:0f:ab:7f:02:fe:8e:85:c3:12:97:e7:0a:61: 58:29:9f:e8:fe:aa:7f:47:30:9e:1f:7b:5d:cb:58: 17:17:ec:e2:cc:ed:8e:67:ce:a2:4f:ac:e3:a7:0a: 55:6b:2a:ef:ea:28:d4:d5:03:ac:f0:15:c9:0f:e9: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:D3:78:19:4A:12:35:8D:0A:C5:5A:7E:D3:EB:77:C8:55:E0:01 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zEHTeBlKEjWNCsVaftPrd8hV4AE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.192.164.0/22 Signature Algorithm: sha256WithRSAEncryption ab:78:66:f1:cc:80:02:e9:58:a7:21:be:71:50:9c:b7:d9:f9: 52:97:34:11:d1:60:6f:60:93:99:94:4d:ab:a0:9b:9f:96:12: ba:ef:d5:ec:7a:fa:ef:b7:ac:d2:21:01:c3:55:9c:92:c8:12: a2:89:ee:3d:a6:21:93:ad:cc:27:d4:cf:38:8f:b3:b7:76:c4: 27:06:30:68:ff:ca:75:82:25:3d:f9:e0:47:27:2e:55:c9:02: 43:63:c2:f9:88:57:fa:29:d5:95:b3:cc:26:b1:9a:7f:c8:ce: c4:72:bf:66:4a:fb:0c:b7:3c:63:e9:7b:73:76:81:0c:d4:ec: e4:15:39:30:48:36:59:a9:80:de:74:1b:af:b2:8e:d2:9a:72: fd:0c:12:7a:4b:38:e6:2c:29:78:10:bc:18:6e:03:43:fa:e4: 7b:9a:3c:67:b1:0e:87:c0:a8:17:ad:3d:b6:2b:9e:d9:d9:ca: 7e:5f:09:09:58:80:17:c5:97:d1:cf:33:d8:67:00:20:5f:c0: a4:c2:ee:3b:f6:7b:b0:1a:0b:1c:1e:80:a2:21:ad:d6:04:90: bb:84:d9:83:7d:31:11:f5:6f:3f:58:cb:7e:da:e5:8d:63:bc: 7b:29:bd:1e:8a:25:ed:28:72:fb:9d:ad:89:09:fa:33:a1:93: e4:36:5b:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICL5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI4MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDNDFEMzc4MTk0QTEy MzU4RDBBQzU1QTdFRDNFQjc3Qzg1NUUwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLlq3RQ2ZSHi7SNONTCDHc7ShP0MoSzrsUhLCSnqvkKGGom8pU oCuimMCUpq9a2EJ/gLFsYwB0Loy+FpDNAxKkByhEEfjoxyVewfrzVEhfnJ2Z3qKV LNiTHss922h1B2eRp1DhaQAkq3NmE+D+KQ2Ul/hSl3Fylr7odDtQHBig2vrIOMUa Yi5lvfqcWqUqvlVdAjEkZJxrFDs8LlTeUVeTrECcqF3Y55I5UCRtLvxH5BbJ3mrx Zxu5JnnWopcue4L5AjMjD6t/Av6OhcMSl+cKYVgpn+j+qn9HMJ4fe13LWBcX7OLM 7Y5nzqJPrOOnClVrKu/qKNTVA6zwFckP6RQFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUzEHTeBlKEjWNCsVaftPrd8hV4AEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pFSFRlQmxLRWpXTkNzVmFm dFByZDhoVjRBRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 wKQwDQYJKoZIhvcNAQELBQADggEBAKt4ZvHMgALpWKchvnFQnLfZ+VKXNBHRYG9g k5mUTaugm5+WErrv1ex6+u+3rNIhAcNVnJLIEqKJ7j2mIZOtzCfUzziPs7d2xCcG MGj/ynWCJT354EcnLlXJAkNjwvmIV/op1ZWzzCaxmn/IzsRyv2ZK+wy3PGPpe3N2 gQzU7OQVOTBINlmpgN50G6+yjtKacv0MEnpLOOYsKXgQvBhuA0P65HuaPGexDofA qBetPbYrntnZyn5fCQlYgBfFl9HPM9hnACBfwKTC7jv2e7AaCxwegKIhrdYEkLuE 2YN9MRH1bz9Yy37a5Y1jvHspvR6KJe0ocvudrYkJ+jOhk+Q2W4s= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:56 2024 by rpki-client on console-fra.rpki-client.org