$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa File: 0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa (raw, json) Hash identifier: 8ouTZ3rLFxQfHMCcGAgDLlv7/h7RbjdHTEmbntL018E= Subject key identifier: D0:60:BF:49:8C:7B:19:97:CB:E6:17:3F:BE:93:BB:62:53:C3:4C:14 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 29CD Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa Signing time: Fri 01 Sep 2023 10:07:05 +0000 ROA not before: Fri 01 Sep 2023 10:07:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 180.176.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 18:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10701 (0x29cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D060BF498C7B1997CBE6173FBE93BB6253C34C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6d:7d:e9:a7:83:71:b9:27:08:94:d7:25:fb: ff:9a:8c:96:1d:06:df:21:e8:24:5f:87:05:ce:04: 31:e5:64:5e:91:f8:f9:3a:e5:2e:2f:35:72:83:96: f1:c4:38:bb:41:59:04:0c:19:18:55:54:fb:0c:9e: cd:78:42:45:ec:f2:2d:95:7d:a6:e5:1a:4b:0d:45: 49:a4:05:ba:a3:5b:dc:59:10:36:28:15:90:d4:47: f5:e0:d1:29:f6:09:d3:c6:18:66:13:b3:b2:ea:ed: a8:f1:de:59:99:93:36:0d:c5:86:bb:e0:0f:b7:2d: 67:17:66:95:b5:a1:75:33:21:c7:1a:bb:f3:ee:35: 53:2e:49:63:58:a7:7c:b8:0c:98:18:02:cc:bf:ef: 2b:18:b9:80:de:07:eb:6c:97:8a:85:a7:6b:13:59: ca:75:7f:c1:0c:97:16:fb:39:10:55:89:a7:df:26: 9e:fb:47:f9:8a:0b:79:a4:0b:ea:83:f9:b2:18:d0: 65:5e:87:86:80:ee:f6:f2:47:a6:d0:7b:45:37:a0: c2:f5:8c:c6:74:84:f1:e6:09:cc:0a:d4:4d:03:3f: 29:9d:43:59:8e:10:66:aa:e4:94:4f:f9:61:5c:23: f6:c5:cb:4b:1e:c0:6a:f2:c0:ef:77:59:81:3c:a2: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:60:BF:49:8C:7B:19:97:CB:E6:17:3F:BE:93:BB:62:53:C3:4C:14 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.176.232.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:87:bb:d0:31:fc:7a:6b:7f:e0:53:5f:f6:de:a4:91:b6:11: 2d:d9:90:ab:e8:1c:01:32:5b:35:fc:62:39:3c:2d:98:3b:c1: 88:d3:cf:9b:96:0f:cf:7f:80:fd:74:7b:fb:94:0f:e7:bd:6a: 9d:e7:bf:62:4a:4b:82:b8:36:c0:dc:73:6d:62:c0:18:5c:ea: 53:2c:cb:07:04:95:81:cb:73:d5:51:80:61:3b:b7:8d:01:5a: 64:21:70:55:f1:02:ca:ee:fb:f1:61:bf:cb:18:a8:6d:56:fd: 4c:ff:fd:61:84:ef:66:87:59:b9:0e:13:1a:03:25:3b:bc:22: a7:ee:cb:13:64:09:8d:9c:0a:89:7e:ef:0b:df:e4:5c:e2:ac: cd:39:b7:41:6c:e7:4e:a3:1a:e4:95:ed:44:20:42:32:d4:d9: 78:8a:9d:38:df:2f:48:dd:93:b2:cf:4b:e0:68:bc:c5:14:a1: 0c:c5:64:55:c1:aa:12:35:4b:28:d9:5c:b1:b0:3f:ca:79:3b: 97:45:3f:e1:f3:55:6c:62:1e:05:6d:8a:de:bb:c8:96:ba:15: b2:f6:48:60:e4:d3:ac:02:25:77:4d:37:c3:31:12:53:ee:ca: 09:51:b5:21:27:be:96:c4:81:a4:b7:66:2d:cb:c0:67:e8:16: 93:66:24:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQwNjBCRjQ5OEM3QjE5 OTdDQkU2MTczRkJFOTNCQjYyNTNDMzRDMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfbX3pp4NxuScIlNcl+/+ajJYdBt8h6CRfhwXOBDHlZF6R+Pk6 5S4vNXKDlvHEOLtBWQQMGRhVVPsMns14QkXs8i2VfablGksNRUmkBbqjW9xZEDYo FZDUR/Xg0Sn2CdPGGGYTs7Lq7ajx3lmZkzYNxYa74A+3LWcXZpW1oXUzIccau/Pu NVMuSWNYp3y4DJgYAsy/7ysYuYDeB+tsl4qFp2sTWcp1f8EMlxb7ORBViaffJp77 R/mKC3mkC+qD+bIY0GVeh4aA7vbyR6bQe0U3oML1jMZ0hPHmCcwK1E0DPymdQ1mO EGaq5JRP+WFcI/bFy0sewGrywO93WYE8oogFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0GC/SYx7GZfL5hc/vpO7YlPDTBQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBHQ19TWXg3R1pmTDVoY192 cE83WWxQRFRCUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0 sOgwDQYJKoZIhvcNAQELBQADggEBAAyHu9Ax/Hprf+BTX/bepJG2ES3ZkKvoHAEy WzX8Yjk8LZg7wYjTz5uWD89/gP10e/uUD+e9ap3nv2JKS4K4NsDcc21iwBhc6lMs ywcElYHLc9VRgGE7t40BWmQhcFXxAsru+/Fhv8sYqG1W/Uz//WGE72aHWbkOExoD JTu8IqfuyxNkCY2cCol+7wvf5FzirM05t0Fs506jGuSV7UQgQjLU2XiKnTjfL0jd k7LPS+BovMUUoQzFZFXBqhI1SyjZXLGwP8p5O5dFP+HzVWxiHgVtit67yJa6FbL2 SGDk06wCJXdNN8MxElPuyglRtSEnvpbEgaS3Zi3LwGfoFpNmJOM= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:53 2024 by rpki-client on console-ams.rpki-client.org