$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-SauaHOMq8ES4B6_FJWLZusG9Zs.roa File: -SauaHOMq8ES4B6_FJWLZusG9Zs.roa (raw, json) Hash identifier: T8KK4Ww0YZ02FU5JqmB1+eDbUv0cevOh7PbFBT8Rd4k= Subject key identifier: F9:26:AE:68:73:8C:AB:C1:12:E0:1E:BF:14:95:8B:66:EB:06:F5:9B Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 28E4 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-SauaHOMq8ES4B6_FJWLZusG9Zs.roa Signing time: Fri 01 Sep 2023 10:05:53 +0000 ROA not before: Fri 01 Sep 2023 10:05:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.177.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10468 (0x28e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F926AE68738CABC112E01EBF14958B66EB06F59B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:0a:eb:9d:3d:30:9a:50:30:b7:5d:43:59: f5:3b:de:4c:76:74:92:e9:00:d7:50:9b:42:36:b1: 85:1b:df:47:a5:6c:46:a2:4d:82:30:8e:9e:21:85: 53:75:d4:54:5f:ae:27:31:d8:d1:5b:6d:07:ba:db: ba:99:5c:72:bc:07:56:88:68:a9:e7:d6:40:fc:9f: 8c:3e:d1:11:29:86:51:30:a1:33:d1:84:6a:f2:15: 07:72:0b:49:cb:3a:8a:1d:b6:88:ad:2e:d2:11:d3: 47:f6:2d:88:64:20:87:ff:d6:cb:e7:29:39:1b:1c: 4b:93:bb:07:72:8c:e6:56:0e:59:54:22:91:66:2f: 85:90:9f:df:cf:e3:5f:8d:13:d0:f4:45:51:23:a4: 96:07:52:7c:fa:e5:4f:a7:2b:9e:c5:e9:4d:1f:46: 1c:6b:1d:90:5d:d9:d1:34:67:37:e0:b2:47:0c:6d: ec:18:d3:01:7e:12:fd:b2:d9:0d:86:99:87:8e:81: b8:62:0f:a1:e5:74:e5:c0:2c:dd:7d:f9:b8:08:19: 77:e3:e7:44:37:91:bb:c0:55:0b:a6:38:a2:d4:24: a9:de:9a:27:3d:13:b1:71:4a:9d:db:94:48:d8:7c: 9b:e1:fd:43:86:a1:e6:2d:be:b6:76:d2:13:6b:bf: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:AE:68:73:8C:AB:C1:12:E0:1E:BF:14:95:8B:66:EB:06:F5:9B X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-SauaHOMq8ES4B6_FJWLZusG9Zs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.177.120.0/23 Signature Algorithm: sha256WithRSAEncryption 83:d1:98:c5:12:1e:74:2f:67:a4:96:cc:59:2d:eb:2d:4c:4e: 1c:c1:2a:8b:10:f6:9f:71:59:f4:c3:dd:68:40:93:7f:ec:f0: 0e:e8:fb:82:f9:2c:eb:67:1f:44:7f:3a:f2:23:2c:1c:cf:e3: 58:44:4e:19:81:61:b3:ab:23:25:9f:c7:45:e5:6f:ef:d7:3f: 26:5b:89:41:84:a8:95:bf:e6:e5:58:f4:03:a8:9b:8b:aa:28: 27:51:cf:b4:76:33:50:8a:2e:f4:72:26:94:40:06:89:74:e5: 64:11:05:7a:33:d2:78:7f:34:84:5f:c4:be:0f:47:ef:9d:3b: f2:1e:61:e7:ff:91:e5:e9:87:10:29:cd:7e:a9:00:1e:53:89: 6a:6e:bb:ff:c9:70:1c:58:f8:7b:59:eb:eb:d1:85:ff:39:34: 02:47:d1:ec:65:72:a6:8a:06:3d:ed:12:43:74:2e:12:bf:c4: 8b:4e:5c:12:4b:36:5f:25:43:77:30:0e:c8:ec:b8:1c:7e:c4: e9:6f:a4:e5:3a:2b:dd:c3:37:6e:cd:4e:c6:4d:a2:1b:08:db: ab:af:13:c4:17:81:11:99:75:ef:ac:06:c0:8f:f4:47:2d:2b: c9:86:3b:ed:f1:d3:8c:a2:80:44:91:8c:0c:e4:87:ec:ca:b2: 5f:aa:b4:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5MjZBRTY4NzM4Q0FC QzExMkUwMUVCRjE0OTU4QjY2RUIwNkY1OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHPArrnT0wmlAwt11DWfU73kx2dJLpANdQm0I2sYUb30elbEai TYIwjp4hhVN11FRfricx2NFbbQe627qZXHK8B1aIaKnn1kD8n4w+0REphlEwoTPR hGryFQdyC0nLOoodtoitLtIR00f2LYhkIIf/1svnKTkbHEuTuwdyjOZWDllUIpFm L4WQn9/P41+NE9D0RVEjpJYHUnz65U+nK57F6U0fRhxrHZBd2dE0ZzfgskcMbewY 0wF+Ev2y2Q2GmYeOgbhiD6HldOXALN19+bgIGXfj50Q3kbvAVQumOKLUJKnemic9 E7FxSp3blEjYfJvh/UOGoeYtvrZ20hNrv/z1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+SauaHOMq8ES4B6/FJWLZusG9ZswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1TYXVhSE9NcThFUzRCNl9G SldMWnVzRzlacy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0 sXgwDQYJKoZIhvcNAQELBQADggEBAIPRmMUSHnQvZ6SWzFkt6y1MThzBKosQ9p9x WfTD3WhAk3/s8A7o+4L5LOtnH0R/OvIjLBzP41hEThmBYbOrIyWfx0Xlb+/XPyZb iUGEqJW/5uVY9AOom4uqKCdRz7R2M1CKLvRyJpRABol05WQRBXoz0nh/NIRfxL4P R++dO/IeYef/keXphxApzX6pAB5TiWpuu//JcBxY+HtZ6+vRhf85NAJH0exlcqaK Bj3tEkN0LhK/xItOXBJLNl8lQ3cwDsjsuBx+xOlvpOU6K93DN27NTsZNohsI26uv E8QXgRGZde+sBsCP9EctK8mGO+3x04yigESRjAzkh+zKsl+qtBw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org