$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-C6CovDA9akULYRX840MDznIv0w.roa File: -C6CovDA9akULYRX840MDznIv0w.roa (raw, json) Hash identifier: x9fwiLuWBg4FsxYGYISoz/eXB7/Ob2ZNSkQuWS9piks= Subject key identifier: F8:2E:82:A2:F0:C0:F5:A9:14:2D:84:57:F3:8D:0C:0F:39:C8:BF:4C Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B1B Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-C6CovDA9akULYRX840MDznIv0w.roa Signing time: Fri 01 Sep 2023 10:09:51 +0000 ROA not before: Fri 01 Sep 2023 10:09:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11035 (0x2b1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F82E82A2F0C0F5A9142D8457F38D0C0F39C8BF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:de:33:cd:b8:95:25:74:ef:77:20:cb:53: 91:c7:5b:36:f7:47:1d:35:36:f4:81:4b:9e:54:ff: fd:4c:8c:8b:c6:e0:80:1e:64:76:5a:5b:58:5c:9c: 70:46:64:a2:ad:47:72:f5:a7:44:33:31:83:c4:f6: 92:9e:58:b4:8b:e5:82:e1:fd:83:fd:82:06:30:9e: da:7e:51:6e:6f:d2:e1:24:b0:05:42:73:40:3d:12: 80:4e:f8:38:a6:db:7f:51:fc:45:c8:5e:76:9d:e7: 5c:29:c2:71:ce:93:73:1b:3e:ac:1e:a4:2c:d6:16: c6:e6:5c:70:42:bb:96:85:13:2b:1b:c7:7c:83:09: a9:81:ff:6d:c0:e4:4f:13:d7:9f:81:1d:fc:67:6e: 5a:7f:33:d2:be:00:02:38:4a:df:62:3e:22:2c:06: c3:71:36:47:03:aa:da:19:91:24:96:df:0b:47:5a: 3a:08:ac:96:07:04:da:53:9c:51:c1:66:ec:cc:5b: 42:89:f6:3b:8a:3f:0e:ec:c1:36:88:82:f3:de:dc: fb:f8:bf:51:30:01:c4:65:b9:cf:16:67:f6:3d:86: 32:56:a2:fc:81:e0:85:1c:94:15:51:79:89:af:c4: 67:76:de:67:9b:68:06:fe:ee:b7:7d:ab:f5:5a:f7: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2E:82:A2:F0:C0:F5:A9:14:2D:84:57:F3:8D:0C:0F:39:C8:BF:4C X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-C6CovDA9akULYRX840MDznIv0w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.136.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:02:d9:22:24:0e:a3:2e:00:37:4f:ec:fe:e4:74:ea:bd:3a: fc:28:56:bc:42:0c:d2:9a:ff:30:89:d9:7b:4c:7b:04:13:d4: 65:a4:ae:d6:5c:e9:e1:5d:2f:4d:e5:fd:29:f8:f5:e6:ad:ba: 15:e9:d1:14:36:9d:83:cc:90:82:89:c8:07:6d:2f:0e:60:63: 34:72:09:17:87:18:b3:5f:dc:35:4a:1d:cf:3a:8a:e2:0e:2b: 0d:a9:3f:8d:c4:2f:42:5f:03:d8:3e:b9:dd:23:a4:10:fe:a5: a0:1d:b6:d1:43:0d:47:af:6c:c5:6e:51:52:26:cc:95:11:a9: b8:00:c2:a2:0c:8f:93:b0:ac:7f:40:f1:dd:a5:30:88:f4:ec: 67:12:ce:66:41:6d:3e:17:9b:bb:a8:4d:b4:f5:cd:49:00:64: 02:98:b4:3a:22:e2:68:90:ba:94:6e:56:bb:39:d9:46:95:e7: 14:02:6d:b1:3b:c6:50:9d:1c:a2:24:1e:a0:a2:4d:6f:48:03: f9:f3:7b:7b:13:d7:ef:5e:5d:08:4c:af:2d:c1:c6:27:1e:ba: 39:2b:5b:f0:41:77:a8:ab:f4:60:aa:8e:d9:a1:03:50:b7:c9: d0:71:51:07:b6:bd:23:3e:63:61:08:62:c4:0e:96:2e:13:f0: 15:81:59:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY4MkU4MkEyRjBDMEY1 QTkxNDJEODQ1N0YzOEQwQzBGMzlDOEJGNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBrd4zzbiVJXTvdyDLU5HHWzb3Rx01NvSBS55U//1MjIvG4IAe ZHZaW1hcnHBGZKKtR3L1p0QzMYPE9pKeWLSL5YLh/YP9ggYwntp+UW5v0uEksAVC c0A9EoBO+Dim239R/EXIXnad51wpwnHOk3MbPqwepCzWFsbmXHBCu5aFEysbx3yD CamB/23A5E8T15+BHfxnblp/M9K+AAI4St9iPiIsBsNxNkcDqtoZkSSW3wtHWjoI rJYHBNpTnFHBZuzMW0KJ9juKPw7swTaIgvPe3Pv4v1EwAcRluc8WZ/Y9hjJWovyB 4IUclBVReYmvxGd23mebaAb+7rd9q/Va91D/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+C6CovDA9akULYRX840MDznIv0wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1DNkNvdkRBOWFrVUxZUlg4 NDBNRHpuSXYwdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sIgwDQYJKoZIhvcNAQELBQADggEBAAwC2SIkDqMuADdP7P7kdOq9OvwoVrxCDNKa /zCJ2XtMewQT1GWkrtZc6eFdL03l/Sn49eatuhXp0RQ2nYPMkIKJyAdtLw5gYzRy CReHGLNf3DVKHc86iuIOKw2pP43EL0JfA9g+ud0jpBD+paAdttFDDUevbMVuUVIm zJURqbgAwqIMj5OwrH9A8d2lMIj07GcSzmZBbT4Xm7uoTbT1zUkAZAKYtDoi4miQ upRuVrs52UaV5xQCbbE7xlCdHKIkHqCiTW9IA/nze3sT1+9eXQhMry3Bxiceujkr W/BBd6ir9GCqjtmhA1C3ydBxUQe2vSM+Y2EIYsQOli4T8BWBWZA= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:28 2024 by rpki-client on console-fra.rpki-client.org